[Dshield] MyDoom/NoVarg DoS details

Mark Challender MarkC at mtbaker.wednet.edu
Thu Jan 29 21:04:50 GMT 2004


Washington is listed twice.  Our earliest receipt is 21:08 UT and we are in
Washington State -- the other Washington, on the West Coast.

Mark Challender, MCSE
Network Administrator


-----Original Message-----
From: Bjorn Stromberg [mailto:bjorn at thechemistrylab.com]
Sent: Thursday, January 29, 2004 12:10 PM
To: General DShield Discussion List
Subject: Re: [Dshield] MyDoom/NoVarg DoS details


From
http://www.messagelabs.com/news/virusnews/detail/default.asp?contentItemId=7
33 :

[QUOTE]The worm was first intercepted by MessageLabs on the 26th January,
2004 at 8:03 a.m. ET and as of 7:00 p.m. ET, MessageLabs has stopped over
170,000 copies of the virus, while providing complete protection for
MessageLabs' 8,000 business customers worldwide. The email containing the
first copy was sent from Russia.[/QUOTE]

Informal summary of virus movements hopefully I got my timezone corrections
right ;)

Russia
01/26/2004 13:03 UT -- First virus

Poland
01/26/2004 20:50 UT

Washington
01/26/2004 21:08 UT

West Coast
01/26/2004 21:46 UT

Washington
01/26/2004 22:05 UT

New York
01/26/2004 23:23 UT


Bjorn Stromberg

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list