According to the latest article on CNET http://news.com.com/2100-1002_3-5064433.html?tag=fd_top Quote : "The worm is programmed to start attacking Windowsupdate.com at midnight Friday in each time zone. As a result, Australia was among the first countries slated to be affected, with its midnight hitting at 7 a.m. PDT" Regards, Jithen -----Original Message----- From: Simon Byrnand [mailto:simon(a)igrin.co.nz] Sent: Saturday, 16 August 2003 9:26 a.m. To: Barry Murphy Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] blaster worm
Maybe every ISP should point it to windowsupdate.microsoft.com instead of 127.0.0.1 *chuckle*. That would only favour the person that wrote the virus .
Guess we can't all win. 10mins to go...
Uh, everyone seems to be assuming that this worm uses local time zones to decide when to start its attack ? Have any of the anti-virus firms or security advisories actually said that ? Would it not be more logical for the worm to use something like GMT time so that worms all around the world will actually start sending at the *same* time instead of spreading their start times out over 24 hours ? Guess we'll find out for sure in little under 3 hours :) Regards, Simon _______________________________________________ Nznog mailing list Nznog(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog