RE: [UPDATE] ping floods

[B3r3n <B3r3n () argosnet com>]

> Well I guess it would appear from this portion of NAI's analysis that 
> someone was listening to the thread on this list about writing an 
> anti-blaster worm:
In fact, we were infected this morning with this worm and we sent it to NAI 
since we are using their products.

NAI's reaction: "what are you talking about? No no, there are no worm 
spreading at the moment., bla bla bla..."

We gave the 2 files dllhost + svchost and after a long time (avg 16:30 our 
time when Trend announced the same worm at 14:30 localtime), NAI finally 
announced it too.

Last to wake-up: Symantec reaction at 17:30 avg for the same worm.

Brgrds


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html