Re: Mydoom.B in Higher Ed

[Paul Russell <prussell () ND EDU>]

Marty Hoag wrote:

>    Have the rest of you been getting hit with mydoom.b?
> We have the latest signatures from McAfee on our e-mail
> anti-virus scanners. We are still seeing thousands of
> mydoom getting dropped but no mydoom-b. I wondered if
> McAfee or mailscan (I'm not really familiar with all
> the pieces) is just reporting both as mydoom or if our
> domains are being ignored for some reason (that would
> be ok too ;-).

McAfee has mydoom.b classified as "low profile". Apparently, it is very low
profile, because McAfee uvscan on our central mail servers has not detected
a single copy of mydoom.b in the last two days.

It appears that the original mydoom outbreak may be fading fast. Yesterday, our
central mail servers detected nearly 17,000 copies of the original mydoom virus.
So far today, they have detected only 348 copies of the original mydoom virus.
On the other hand, we are still seeing about 1000 copies of mydoom.a per hour.
We saw about 10,000 copies of mydoom.a yesterday, and have seen about 16,000
copies today.

--
Paul Russell
Senior Systems Administrator
University of Notre Dame


**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.