The worm was first found on August 18, 2003. After the infection had started, the worm tried to connect to the Internet to get to updates from 20 different internet servers on August 20. However, security officials were able to cut off and shut down the servers. The worm had a shut off date set for September 10, 2003.