We have been co-operating with RCN, the company running the counter site that is used by the Nyxem.E worm. Last night we got the web access statistics, listing all the IP addresses that have accessed the Nyxem counter.

After filtering out the addresses of bots that have been hammering the counter lately, we used our WORLDMAP technology to map the addresses to a map. As a result we have a global view of the machines that will run into trouble unless they are disinfected before tomorrow:


- click the map for a high-resolution version -

Nyxem.E starts to overwrite files half an hour after the infected machines are started on the 3rd of the month.

We'd like to thank Jason Nealis and Chris Jackman at RCN for their generous help with this issue.