[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Full-Disclosure] [UPDATE] ping floods
- To: Sam Pointer <sam.pointer@hpdsoftware.com>, "'Abraham, Antony (Cognizant)'" <Antony@blr.cognizant.com>, B3r3n@argosnet.com, full-disclosure@lists.netsys.com
- Subject: RE: [Full-Disclosure] [UPDATE] ping floods
- From: B3r3n <B3r3n@argosnet.com>
- Date: Mon, 18 Aug 2003 19:24:35 +0200
>Well I guess it would appear from this portion of NAI's analysis that
>someone was listening to the thread on this list about writing an
>anti-blaster worm:
In fact, we were infected this morning with this worm and we sent it to NAI
since we are using their products.
NAI's reaction: "what are you talking about? No no, there are no worm
spreading at the moment., bla bla bla..."
We gave the 2 files dllhost + svchost and after a long time (avg 16:30 our
time when Trend announced the same worm at 14:30 localtime), NAI finally
announced it too.
Last to wake-up: Symantec reaction at 17:30 avg for the same worm.
Brgrds
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html