Slashdot Mirror

← Back to Stories (view on slashdot.org)

Latest WinWorm Spreads Via ICQ And Outlook

Posted by timothy on from the how-vastly-creative dept.

mgooderum was among the many to write in about yet another snippet of malice making the Windows desktop rounds: "The latest email virus -- 'Goner' -- is apparently running around this morning (AP news story on Iwon here - no login needed). The virus is a typical worm that spreads via attachments and user's address books. It appears as a message with an attachment that starts: 'How are you ? When I saw this screen saver I immediately thought about you...' Goner is apparently non-destructive other than the normal DoS issues with the load from it forwarding itself everywhere. What's moderately unique are two features. One is its ability to replicate via ICQ as well as the usual Outlook and Outlook Express. Two is its small size -- it has a packed form that is only 159 bytes. Symantec has details here; McAfee has details here." Update: 12/04 21:57 GMT by T : That should read 159 kilobytes. And as many posters have pointed out, "destructive" is in the eye of the beholder.

6 of 598 comments (clear)

  1. The CEO of my technology company by v4sudeva · · Score: 5, Funny

    has already sent every one of my fellow employees all over the globe 27 copies of this thing.

    It's been going on for over two hours now. I can't help but wonder if he's still over there trying to run that damn .scr.

    Thanks, boss.

    --
    Personal me, collaborative you
    1. Re:The CEO of my technology company by sharkey · · Score: 5, Funny

      I'll send you the bill...

      Shouldn't that be, "I send you this bill to ask your repair"?

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
  2. What? Still? by Anonymous Coward · · Score: 5, Funny

    Didn't everyone get the memo that opening attachments is a really dumb idea? I'm attaching the original message:

    &ltAttachment: Don't_Open_Attachments.eml.vbs&gt

  3. Pure Wisdom by Phartx2 · · Score: 5, Funny

    I just got the warning message from my school's network goons. In a move of administrative widsom at its finest, it mentioned:

    "The Bearcat Online email system is now blocking all messages with "Hi" as the subject."

  4. Finding the culprit by rkent · · Score: 5, Funny

    Well, since McAfee and Symantec are reporting it, I guess this is not a first draft of magic lantern... unless they issue another press release in 45 minutes saying "um... nevermind, there is no 'Goner' worm."

  5. No support here! by Goner · · Score: 5, Funny

    I am ashamed that anyone would intentionally use my Slashdot account name to bolster the popularity and reputation of their sick virus. I'm sure the hackers who created this monstrosity were well versed in such hacker tools as Bonzi Buddy and Lunix. If they think I would come out and support such a destructive screen saver they are very, very wrong. If God wanted toasters to fly, he would have given them wings.

    So, you hackers, where ever you are, Goner (of Slashdot lore) does not approve!