The most recent worm to threaten Internet users is Goner, a file-deleting worm that already tops most anti-virus vendor threat lists. The worm, which spreads itself through Microsoft`s Outlook e-mail application, has been widely predicted to be the most destructive since last year`s LoveLetter worm attacked corporate and personal computers.
Goner propagates itself through the Internet and other networks using both the Outlook and Outlook Express e-mail applications. Security company Internet Security Systems says Outlook 2002 users may be at less of a risk since the program blocks potentially harmful attachments by default as well as warning users when applications attempt to access the address book.
Symantec`s Security Response Centre reports that the worm is written in Visual Basic and is compressed with a known portable executable file compressor tool. According to Symantec, Goner can spread using both e-mail and the ICQ network. If IRC is installed on the infected computer the worm is able to insert mIRC scripts that will allow the computer to be used in denial of service attacks.
US-based software company Network Associates says it received several hundred-thousand infection reports late yesterday.
"Goner is one of the most incredibly fast moving and potentially dangerous e-mail viruses we`ve seen,`` says Mark Sunner, CTO of UK-based MessageLabs.
According to Sunner, Goner arrives in an attachment masquerading as a screen saver, with an e-mail subject line of "Hi" and text saying: `"How are you? When I saw this screen saver, I immediately thought about you I am in a harry (sic), I promise you will love it!`"
Once the attachment is clicked, the worm sends itself to everyone in the user`s e-mail address book, tries to close programs that are running and deletes certain system files, including security software.
Anti-virus vendor Trend Micro has already given Goner its second-highest rating on its one to five warning scale and Symantec rates the worm "high" on its distribution list. The company also rates it "medium" on the damage scale.
Share
