[Dshield] MyDoom/NoVarg DoS details

Bjorn Stromberg bjorn at thechemistrylab.com
Wed Jan 28 17:16:50 GMT 2004


I'm wondering if the SCO DDoS part isn't just some tomfoolery on the part of
the virus writer. It certainly did catch the attention of the media. It's
funny that SCO is offering such a huge reward when their financial outlook
is rather bleak.

Who's got the earliest timestamp on the virus? Give sending IP and Time
(Universal Time please).

I'll go first:

IP: 206.176.7.22
Date: 2004-01-27 04:59:09 UT

Bjorn Stromberg

----- Original Message ----- 
From: "Johannes B. Ullrich" <jullrich at sans.org>
To: "General DShield Discussion List" <list at dshield.org>
Cc: <intrusions at incidents.org>
Sent: Tuesday, January 27, 2004 2:54 PM
Subject: Re: [Dshield] MyDoom/NoVarg DoS details


> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
>




More information about the list mailing list