FLUXLIST: Fwd: Re: Fwd: EMERGENCY VIRUS ALERT - W32/Goner@MM

[John M. Bennett]

Delivered-To: [EMAIL PROTECTED]
Date: Wed, 05 Dec 2001 09:12:28 -0500
Reply-To: [EMAIL PROTECTED]
Sender: [EMAIL PROTECTED]
From: Lisa Iacobellis <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: Fwd: EMERGENCY VIRUS ALERT - W32/Goner@MM
X-Sender: [EMAIL PROTECTED]
X-Mailer: QUALCOMM Windows Eudora Version 4.3.1

Warning-

McAfee(4.0.4174) let it come through on mine this morning more than once.

Lisa

At 08:44 AM 12/5/01 -0500, you wrote:

Folks,
        there's a new computer virus making the rounds (see Jim's bounced email below). Our McAfee should catch this and disable this one.   (IT just "sent out" the newest DAT file this morning, our pcs should pick this up when we login and they should now be running on the 4174 DAT file.)

Deb

Delivered-To: [EMAIL PROTECTED]
X-Sender: [EMAIL PROTECTED]
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Wed, 05 Dec 2001 08:32:06 -0500
To: [EMAIL PROTECTED]
From: "James R. Whitcomb" <[EMAIL PROTECTED]>
Subject: Fwd: EMERGENCY VIRUS ALERT - W32/Goner@MM

Deb,

You may want to alert folks about this! I got two copies of it from the OhioLink listserv, but didn't open them as I knew it was a virus. I get some of these types of emails in my hotmail account so was already aware of this.

Jim.

X-Sender: [EMAIL PROTECTED]
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Wed, 05 Dec 2001 08:13:24 -0500
To: "The OhioLINK list" <[EMAIL PROTECTED]>
From: Laura Windsor <[EMAIL PROTECTED]>
Subject: Fwd: EMERGENCY VIRUS ALERT - W32/Goner@MM
Reply-To: [EMAIL PROTECTED]
Sender: [EMAIL PROTECTED]

Hi,

The message we keep receiving with the "Hi" subject line has a virus attached. 
Delete it.

Laura

From McAfee.com....

McAfee.com has seen an OUTBREAK of computers infected with W32/Goner@MM, also known as Pentagone, Goner or Gone. This is a NEW, HIGH RISK virus that spreads via Microsoft Outlook email and ICQ instant messaging programs. This mass-mailing worm will arrive from someone you know with the following email message:

Subject: Hi

Body:
How are you ?
When I saw this screen saver, I immediately thought about you
I am in a harry, I promise you will love it!

Attachment: GONE.SCR

Goner has a DESTRUCTIVE PAYLOAD. When the attachment is opened, it will look for a variety of anti-virus, firewall and other security programs and attempt to delete them, along with ALL FILES in the same directory. This worm will also place a trojan, REMOTE32.INI, on the system, which contains instructions to attempt Denial-of-Service attacks on other IRC users.