Posted: 12/4/2001 11:09:39 AM EDT
|
My lab just got hit with it be carefull subject of email Hi attachment Goner.scr size 38kb In the last 5 mins got 25 emails with this virus |
|
Ok, I am working the help desk for our network today, was reading the flash e-mail on this new virus when *ring* "Help desk." "Umm, I think I got a virus." "Let me guess, you opened goner.scr." "Yup." "Please turn off your pc." Why do all these yahoos open every d^&n attachment?!?! Update your virus defs now! |
| I just got done cleaning up our company (actually my guys did all the work). Even my boss (the CTO) got suckered into this one. Human nature at it's best. If someone says they "need your advice" or "thought of you" you could name the damn thing virus.death and people will still open it. Time to call it a day and drink a few Lagers. |
|
Name: W32.Goner.A@mm Category: 3 Virus Definitions: December 04, 2001 Type: Worm Aliases: WORM_GONE.A, W32/Goner-A W32.Goner.A@mm is a mass-mailing worm written in Visual Basic. The worm has also been compressed using a known file compressor. The worm can also spread it's infection using the ICQ and IRC network. Infection Length: 38,912 bytes Send itself to all users in Outlook Address Books. Attemps to delete NAV when the machine is restarted. Subject of email: Hi Name of attachment: Gone.scr Size of attachment: 38Kbytes The worm will also add a registry key called C:\%SYSTEM%\gone.scr (where %SYSTEM% is the path to the Windows\System folder). The key will have the same value as the name. It will be located in HKLM\Software\Microsoft\Windows\CurrentVersion\Run. REF: http://securityresponse.symantec.com/avcenter/venc/data/[email protected] Your machine will be included if you have NAV CE (Norton AntiVirus Corporate Edition) and your computer is on the network. The current definition version is 31124b dated 11/24/01. / REMEMBER: When you receive any email that has an attachment, be very careful. Unless you are 100% positive that it is not a virus, even if you know the person that is sending it to you, DO NOT OPEN THE ATTACHMENT, |
|
I got about 30 of these in the last hour or so. It clogged up our mail system. I blame Outlook for this. If you are reading a new message and delete it, the next message is automatically opened. Even if users are careful, they could still get hit. That is why I mostly use Pine. |