As a follow-up to Tuesday's notes on Novarg, some MRTG plots that illustrate what happened in my inbox this week. The blue curve is legitimate mail; green is spam (and other junk), or recognized virulent material.
First, spam (and other junk that's automatically recognized). Note the peak on Monday evening, when Novarg first appears, and also the substantially higher junk bandwidth ever since -- due to notifications about the worm:
Second, recognized viruses (getting really interesting later in the same night):
If you want to compare the effect to Sobig.F, here's a similar plot showing Sobig's last days.
