PDA

View Full Version : Emergency Virus Alert


blebs99
12-04-01, 08:26 PM
"McAfee.com Dispatch" <dispatch@mcafee.com>
To : "blebs99

Subject : EMERGENCY VIRUS ALERT - W32/Goner@MM

Date : Tue, 4 Dec 2001 15:59:25 -0800


McAfee.com has seen an OUTBREAK of computers infected with W32/Goner@MM, also known as Pentagone, Goner or Gone. This is a NEW, HIGH RISK virus that spreads via Microsoft Outlook email and ICQ instant messaging programs. This mass-mailing worm will arrive from someone you know with the following email message:

Subject: Hi

Body: How are you ?
When I saw this screen saver, I immediately thought about you
I am in a harry, I promise you will love it!

Attachment: GONE.SCR


Goner has a DESTRUCTIVE PAYLOAD. When the attachment is opened, it will look for a variety of anti-virus, firewall and other security programs and attempt to delete them, along with ALL FILES in the same directory. This worm will also place a trojan, REMOTE32.INI, on the system, which contains instructions to attempt Denial-of-Service attacks on other IRC users.

Godfodda
12-04-01, 10:50 PM
Ha! I picked up my work mail at home a couple of hours ago and had about 15 of those. MIS is gonna be busy tomorrow morning. :) Thanks for the note!

blebs99
12-05-01, 03:36 PM
The only problem with email alerting is, that by the time you get the email, the virus has been in the wild for a few hours.

Posted it as soon as I got it, but it was still late for many. :(

JigPu
12-05-01, 07:06 PM
Thanks for the warning! By the way, do you know if it spreads throught MS Outlook only (like it says) or through any e-mail program?

I'll keep an eye out for those messages...
JigPu

blebs99
12-05-01, 08:19 PM
As known so far, MS Outlook, ICQ, and mIRC. I would still look for it in other messaging programs though. If something changes, I'll be sure to post it. ;)