RE: Possible variant of Blaster/Nachi/Welchia? (more)

["Bassett, Mark" <mbassett () omaha com>]

Yes, there is reportedly a new sobig.g that originated in china.

Mark Bassett
Network Administrator
Omaha.com
402-898-2079


-----Original Message-----
From: Jean-Luc Cavey [mailto:Jean-Luc () Cavey org] 
Sent: Friday, September 26, 2003 2:31 PM
To: Jeff Kell; Steven D. Smith
Cc: Incidents
Subject: Re: Possible variant of Blaster/Nachi/Welchia? (more)

---- Original Message ----
From: "Steven D. Smith" <sds07 () health state ny us>
To: "Jeff Kell" <jeff-kell () utc edu>
Cc: "Incidents" <incidents () securityfocus com>; "General DShield
Discussion List" <list () dshield org> 
Sent: Friday, September 26, 2003 8:08 PM
Subject: Re: Possible variant of Blaster/Nachi/Welchia? (more)

>
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.h
tml
>


Humm...

Was not W32.Sobig-F supposed to stop to propagate on Sept. 9 23:59 ?

See NOTES on the above page : 

<cite>
The worm de-activates on September 10, 2003. The last day on which the
worm will spread is September 9, 2003. 
</cite>

Jean-Luc Cavey

------------------------------------------------------------------------
---
------------------------------------------------------------------------
----



************************************************************
Omaha World-Herald Company computer systems are for business use only.
This e-mail was scanned by MailSweeper
************************************************************


---------------------------------------------------------------------------
----------------------------------------------------------------------------