This is a forwarded message ***Comment New virus, semoga tdk ada yg terkena ya :-)
Syafril mailto:[EMAIL PROTECTED] End*** >From : [EMAIL PROTECTED] <[EMAIL PROTECTED]> To : [EMAIL PROTECTED] Date : 5 Dec 2001, 13:57:58 Subject: "Goner" - The latest scum to attack your computers. ===8<==============Original message text=============== Yet another mass-mailing e-mail worm "Goner" is now attacking email servers across the world. Dubbed Pentagone, Goner or Gone, the Visual Basic Script (VBS) program spreads via e-mail and the messaging system ICQ. On infected computers, it stops most antivirus and security programs. The worm only affects computers running Microsoft Windows and spreads through Outlook e-mail clients. The worm arrives in a message with the subject "Hi" and the following text in the body of the e-mail: How are you ? When I saw this screensaver, I immediately thought about you I am in a harry, I promise you will love it! Attached to the message is an attachment (with SCR attachment, also interpreted as a ScreenSaver file), GONE.SCR, a compressed copy of the worm. *********************************************************************** The content-filtering technology used inside eScan and MailScan will automatically protect all our customers from this scum. All users of eScan and MailScan, be assured. You are in safe hands:) *********************************************************************** When the file is opened, Goner will infect the victim's PC, stopping a variety of antivirus and security applications and deleting all the files in the folders containing those applications. After deleting the files on the computer, the worm opens up a dialog box containing its name, Pentagone, and the handles of its creators. The dialog box also includes acknowledgements to other people on the Net. The worm then installs a backdoor program linked to mIRC, a popular Internet Relay Chat program. The backdoor can be used to execute denial-of-service attacks against IRC servers. To spread by e-mail, Pentagone uses script commands to send a copy of itself to every entry in the victim's Outlook address book. In ICQ, the worm uses specific commands to send a copy of itself to other people using the application. Oflate, the Nimda, BadTrans and the Aliz worms have been causing lots of anxiety amongst users. MicroWorld. ===8<===========End of original message text=========== -- --[MDaemon-L]-------------------------------------------------------- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Arsip : <http://mdaemon-l.dutaint.com> Moderator : <mailto:[EMAIL PROTECTED]> Unsubscribe : <mailto:[EMAIL PROTECTED]> Subscribe : <mailto:[EMAIL PROTECTED]> Latest Vers. : 5.0.4 --[POWERED BY MDAEMON!]----------------------------------------------
