[33488] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Hysterical first technical alert from US-CERT

daemon@ATHENA.MIT.EDU (Stephen Samuel)
Fri Feb 6 17:42:44 2004

Message-ID: <4021FFEB.90102@bcgreen.com>
Date: Thu, 05 Feb 2004 00:33:47 -0800
From: Stephen Samuel <samuel@bcgreen.com>
MIME-Version: 1.0
To: Valdis.Kletnieks@vt.edu
Cc: Larry Seltzer <larry@larryseltzer.com>, bugtraq@securityfocus.com
In-Reply-To: <200402041431.i14EVFsc030677@turing-police.cc.vt.edu>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Valdis.Kletnieks@vt.edu wrote:
> On Tue, 03 Feb 2004 07:11:49 EST, Larry Seltzer <larry@larryseltzer.com>  said:
>>Second, and more to the point, it takes an extreme view of MyDoom.B that nobody else is
>>supporting, including the sources they cite. MyDoom.B is a flop.
> 
> OK. So let's see.  We've got one highly successful virus (MyDoom.A) on the
> loose at the time of writing, another variant that's essentially identical
> except for the target, and no clear indication why this one *shouldn't*
> take off as well.

Most of the time, I'd expect that a copycat virus is going to be
much smaller than the original, since that trick-space is now
going to be saturated.If there's nothing different in the
distribution of the virus, then I'd say they were silly to
presume it was going to be anywhere near as big as MyDoom A.
-- 
Stephen Samuel +1(604)876-0426                samuel@bcgreen.com
		   http://www.bcgreen.com/~samuel/
    Powerful committed communication. Transformation touching
      the jewel within each person and bringing it to light.

home help back first fref pref prev next nref lref last post