[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <5.2.1.1.2.20030818192152.01184c50@belegost.cimternet.com>
From: B3r3n at argosnet.com (B3r3n)
Subject: [UPDATE] ping floods
>Well I guess it would appear from this portion of NAI's analysis that
>someone was listening to the thread on this list about writing an
>anti-blaster worm:
In fact, we were infected this morning with this worm and we sent it to NAI
since we are using their products.
NAI's reaction: "what are you talking about? No no, there are no worm
spreading at the moment., bla bla bla..."
We gave the 2 files dllhost + svchost and after a long time (avg 16:30 our
time when Trend announced the same worm at 14:30 localtime), NAI finally
announced it too.
Last to wake-up: Symantec reaction at 17:30 avg for the same worm.
Brgrds
Powered by blists - more mailing lists