> New worm virus raging: Following advisory came from JSC internal alert.
> Norton's latest update doesn't detect it.
> >
> > FYI. Do not open any email with a Gone.scr attachment. Just delete it
and
> > then empty your delete folder.
> >
> > W32.Goner.A@mm is a mass-mailing worm written in Visual Basic. The worm
> > has also been compressed using a known file compressor. The worm can
also
> > spread it's infection using the ICQ and IRC network. We are seeing this
> > worm at the Center at this time.
> >
> > Infection Length: 38,912 bytes
> >
> > Send itself to all users in Outlook Address Books. Attemps to delete NAV
> > when the machine is restarted.
> >
> > Subject of email: Hi
> > Name of attachment: Gone.scr
> > Size of attachment: 38Kbytes
> >
> > The worm will also add a registry key called C:%SYSTEM%gone.scr (where
> > %SYSTEM% is the path to the WindowsSystem folder). The key will have the
> > same value as the name. It will be located in
> > HKLMSoftwareMicrosoftWindowsCurrentVersionRun.
> >
> > If any users in your organization receive an email with the Gone.scr
> > attachment, please advise them NOT to open the attachment, have them
> > delete any infected email notes, empty the email deleted items folder
and
> > call their OCSM if they need further guidance.Please advise users to be
> > cautious when opening email attachments.
///
/// shop-talk@autox.team.net mailing list
/// To unsubscribe send a plain text message to majordomo@autox.team.net
/// with nothing in it but
///
/// unsubscribe shop-talk
///
///
|