nanog mailing list archives
Lack of Info (was Re: Impending (mydoom) DOS attack)
From: Sean Donelan <sean () donelan com>
Date: Fri, 30 Jan 2004 19:48:04 -0500 (EST)
On Fri, 30 Jan 2004, Leo Bicknell wrote:
If anyone has any good analysis on the current worm (other than "it attacks www.sco.com"), that would be welcome.
Yep, the information gap is pretty big on this one. Neither the anti-virus vendors nor the ex-Symantec guy at Homeland Security seems to be releasing much details how the virus actually behaves on the network. Lots of information about changing Windows registries, but not much about how often it checks or loads the network. Some people say they've gotten it to do something in the lab, other people report its a dud. I can't tell what the difference is.
Current thread:
- Impending (mydoom) DOS attack bcm (Jan 30)
- Re: Impending (mydoom) DOS attack Chris Behrens (Jan 30)
- Re: Impending (mydoom) DOS attack Leo Bicknell (Jan 30)
- Lack of Info (was Re: Impending (mydoom) DOS attack) Sean Donelan (Jan 30)
- Re: Impending (mydoom) DOS attack Mike Tancsa (Jan 30)
- MyDoom statistics (was Re: Impending (mydoom) DOS attack) Sean Donelan (Jan 30)
- Re: Impending (mydoom) DOS attack Donovan Hill (Jan 30)
- Re: Impending (mydoom) DOS attack Leo Bicknell (Jan 30)
- Re: Impending (mydoom) DOS attack Laurence F. Sheldon, Jr. (Jan 30)
- Re: Impending (mydoom) DOS attack Donovan Hill (Jan 30)
- Re: Impending (mydoom) DOS attack Stephen J. Wilcox (Jan 31)
- Re: Impending (mydoom) DOS attack Valdis . Kletnieks (Jan 31)
- Re: Impending (mydoom) DOS attack Laurence F. Sheldon, Jr. (Jan 31)
- Re: Impending (mydoom) DOS attack Leo Bicknell (Jan 30)