Re: Possible variant of Blaster/Nachi/Welchia? (more)

["Jean-Luc Cavey" <Jean-Luc () Cavey org>]

---- Original Message ----
From: "Steven D. Smith" <sds07 () health state ny us>
To: "Jeff Kell" <jeff-kell () utc edu>
Cc: "Incidents" <incidents () securityfocus com>; "General DShield
Discussion List" <list () dshield org> 
Sent: Friday, September 26, 2003 8:08 PM
Subject: Re: Possible variant of Blaster/Nachi/Welchia? (more)

> http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f () mm html


Humm...

Was not W32.Sobig-F supposed to stop to propagate on Sept. 9 23:59 ?

See NOTES on the above page : 

<cite>
The worm de-activates on September 10, 2003. The last day on which the worm will spread is September 9, 2003. 
</cite>

Jean-Luc Cavey

---------------------------------------------------------------------------
----------------------------------------------------------------------------