VIRUS ALERT---"Goner" Worm---Info on detection, prevention, removal
December 2001

Another mass-mailing virus/worm which spreads via Outlook. It also spreads via ICQ and IRC. Mac users do not appear to be affected.

The Subject is "Hi" and the message says: "How are you ? When I saw this screen saver, I immediately thought about you I am in a harry, I promise you will love it! "

The attachment purports to be a screensaver, with a .scr extension. "Goner" is considered to be a very high-risk virus.

We are currently filtering for this virus, but there is no guarantee we will catch everything. We are filtering on the Subject:  line so there is a chance that legitimate email bearing the same Subject: line will be returned to the sender. The attachment type causes it to be included in the body of the message—our filters do not read your messages so can not pick it out. On the user-level, most email software has filtering capabilities that individuals can set to catch and remove suspicious messages. Customers should enable filtering features in their own software to catch anything that slips through our filters. Filtering on message content, as well as headers is a feasible option for individuals. Also, be sure you have updated anti-virus protection. See below for links to the Symantec and McAffee sites that can aid in the detection, prevention, and removal of this virus.

McAffee:

Symantec:




Send comments