Return-Path: <sentto-279987-4030-1007686180-fc=all.net@returns.groups.yahoo.com> Delivered-To: fc@all.net Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Thu, 06 Dec 2001 16:51:07 -0800 (PST) Received: (qmail 15707 invoked by uid 510); 7 Dec 2001 00:50:05 -0000 Received: from n15.groups.yahoo.com (216.115.96.65) by all.net with SMTP; 7 Dec 2001 00:50:05 -0000 X-eGroups-Return: sentto-279987-4030-1007686180-fc=all.net@returns.groups.yahoo.com Received: from [216.115.97.166] by n15.groups.yahoo.com with NNFMP; 07 Dec 2001 00:49:21 -0000 X-Sender: fc@red.all.net X-Apparently-To: iwar@onelist.com Received: (EGP: mail-8_0_1_2); 7 Dec 2001 00:49:40 -0000 Received: (qmail 2774 invoked from network); 7 Dec 2001 00:49:40 -0000 Received: from unknown (216.115.97.167) by m12.grp.snv.yahoo.com with QMQP; 7 Dec 2001 00:49:40 -0000 Received: from unknown (HELO red.all.net) (12.232.125.69) by mta1.grp.snv.yahoo.com with SMTP; 7 Dec 2001 00:49:39 -0000 Received: (from fc@localhost) by red.all.net (8.11.2/8.11.2) id fB70nnd32011 for iwar@onelist.com; Thu, 6 Dec 2001 16:49:49 -0800 Message-Id: <200112070049.fB70nnd32011@red.all.net> To: iwar@onelist.com (Information Warfare Mailing List) Organization: I'm not allowed to say X-Mailer: don't even ask X-Mailer: ELM [version 2.5 PL3] From: Fred Cohen <fc@all.net> X-Yahoo-Profile: fcallnet Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com Delivered-To: mailing list iwar@yahoogroups.com Precedence: bulk List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com> Date: Thu, 6 Dec 2001 16:49:49 -0800 (PST) Subject: [iwar] [fc:Worm.turns.into.nightmare.for.computer.users] Reply-To: iwar@yahoogroups.com Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Worm turns into nightmare for computer users By Kirsty Needham, Sydney Morning Herald, 12/6/2001 <a href="http://it.mycareer.com.au/breaking/2001/12/06/FFX5VCUEVUC.html">http://it.mycareer.com.au/breaking/2001/12/06/FFX5VCUEVUC.html> A malicious worm called Goner started invading Australian computers yesterday, destroying antivirus software. Restaurants, financial institutions, manufacturers and home computer users were hit by the rapidly spreading creature. The worm, which poses as a screen saver, caused technology managers across Sydney to be woken by agitated computer users from 2am yesterday. The malicious nature of the worm, which can also spread through popular instant chat services, has prompted antivirus firms to again warn computer users not to open unsolicited email attachments, even those apparently sent by friends. Goner originated in Germany, quickly infecting hundreds of thousands of computers in Europe and the United States through email address books. When it crossed the Pacific in the middle of the night, antivirus companies started calling major Australian clients at home to warn them of goner's approach and an update of their software to stop it. The Australian Computer Emergency Response Team, operated by the University of Queensland, said many corporate and government networks had blocked the virus. However, experts said it could cause most harm in Australia as people returned from work and opened personal email. Goner arrives with the subject line inviting the user to have a look at a new screensaver. "This virus has been written with the consumer in mind," said Symantec Australia's managing director, John Donovan. He said antivirus software reduced risk, but the only way to guarantee the security of a home computer was to not open unexpected email. "If a strange parcel turned up in the letter box and there was a chance it could cause damage, you would treat it with extreme caution. It is far easier to find opportunities for malicious damage with email," he said. A spokesman for Trend Micro, Andrew Gordon, said home Internet users and small businesses which did not have access to the premium antivirus services were more likely to be hit by Goner. In addition to destroying software, the virus will place a remote control agent on the infected computer that makes contact with a hacker and allows him to hijack the the machine when the user next browses the popular Internet Relay Chat and ICQ (I seek you) chat services. ------------------ http://all.net/ Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
This archive was generated by hypermail 2.1.2 : 2001-12-31 21:00:00 PST