virus alert

[Bill London <london@moscow.com>]

Watch out for new virus---Goner
here's a warning from WSU
BL


>
> > >> Malicious Software Report
> > >> W32/Gone.A@mm, I-Worm.Goner, Gone
> > >>
> > >> Detail
> > >> ======
> > >>
> > >> NAME: Goner
> > >> ALIAS: W32/Gone.A@mm, I-Worm.Goner, Gone
> > >>
> > >> Goner is a mass-mailer written in Visual Basic. It appeared on December
> > >> 4th, 2001. The worm spreads itself using Outlook and ICQ if it's installed
> > >> on an infected computer.
> > >>
> > >> When the worm's file is run, it shows a dialog box with greetings and some
> > >> animation. This is done to disguise itself. Then it shows a messagebox
> > with
> > >> a fake error message.
> > >>
> > >> The worm copies itself as GONE.SCR to Windows System folder and tries to
> > >> creates its startup key in the Registry. Then the worm connects to
> > >> Outlook Address Book, reads e-mail addresses from it and sends itself to
> > >> all these addresses. The infected message looks like:
> > >>
> > >> Subject: Hi
> > >>
> > >> Body:
> > >>
> > >>   How are you ?
> > >>   When I saw this screen saver, I immediately thought about you
> > >>   I am in a harry, I promise you will love it!
> > >>
> > >> Attachment: Gone.scr
> >
> >