Thanks to Mike who sent us the following note about what he's seen on his network. Anyone else seeing similar movement?

The Symantec AV attacks have picked up over the last day or so, as systems that were probably turned off over the holidays are turned on and infected by the worm.  Almost all of the attacks we saw just before Christmas were from other .edus; now we are seeing more attacks from systems in countries other than the US.  About 70% of the 186 systems that tried attacking us today were outside the US.  Brazil and Taiwan take top honors for most attacking hosts.