Novarg/MyDoom: Some MRTG plots.

As a follow-up to Tuesday’s notes on Novarg, some MRTG plots that illustrate what happened in my inbox this week. The blue curve is legitimate mail; green is spam (and other junk), or recognized virulent material. First, spam (and other junk that’…

As a follow-up to Tuesday’s notes on Novarg, some MRTG plots that illustrate what happened in my inbox this week. The blue curve is legitimate mail; green is spam (and other junk), or recognized virulent material.First, spam (and other junk that’s automatically recognized). Note the peak on Monday evening, when Novarg first appears, and also the substantially higher junk bandwidth ever since — due to notifications about the worm:

Media_httplogdoesnote_jppco

Second, recognized viruses (getting really interesting later in the same night):

Media_httplogdoesnote_vwbbw

If you want to compare the effect to Sobig.F, here‘s a similar plot showing Sobig’s last days.