[iwar] [fc:Worm.turns.into.nightmare.for.computer.users]

From: Fred Cohen (fc@all.net)
Date: 2001-12-06 16:49:49


Return-Path: <sentto-279987-4030-1007686180-fc=all.net@returns.groups.yahoo.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Thu, 06 Dec 2001 16:51:07 -0800 (PST)
Received: (qmail 15707 invoked by uid 510); 7 Dec 2001 00:50:05 -0000
Received: from n15.groups.yahoo.com (216.115.96.65) by all.net with SMTP; 7 Dec 2001 00:50:05 -0000
X-eGroups-Return: sentto-279987-4030-1007686180-fc=all.net@returns.groups.yahoo.com
Received: from [216.115.97.166] by n15.groups.yahoo.com with NNFMP; 07 Dec 2001 00:49:21 -0000
X-Sender: fc@red.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-8_0_1_2); 7 Dec 2001 00:49:40 -0000
Received: (qmail 2774 invoked from network); 7 Dec 2001 00:49:40 -0000
Received: from unknown (216.115.97.167) by m12.grp.snv.yahoo.com with QMQP; 7 Dec 2001 00:49:40 -0000
Received: from unknown (HELO red.all.net) (12.232.125.69) by mta1.grp.snv.yahoo.com with SMTP; 7 Dec 2001 00:49:39 -0000
Received: (from fc@localhost) by red.all.net (8.11.2/8.11.2) id fB70nnd32011 for iwar@onelist.com; Thu, 6 Dec 2001 16:49:49 -0800
Message-Id: <200112070049.fB70nnd32011@red.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL3]
From: Fred Cohen <fc@all.net>
X-Yahoo-Profile: fcallnet
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Thu, 6 Dec 2001 16:49:49 -0800 (PST)
Subject: [iwar] [fc:Worm.turns.into.nightmare.for.computer.users]
Reply-To: iwar@yahoogroups.com
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Worm turns into nightmare for computer users 
By Kirsty Needham, Sydney Morning Herald, 12/6/2001
<a href="http://it.mycareer.com.au/breaking/2001/12/06/FFX5VCUEVUC.html">http://it.mycareer.com.au/breaking/2001/12/06/FFX5VCUEVUC.html>

A malicious worm called Goner started invading Australian computers
yesterday, destroying antivirus software. Restaurants, financial
institutions, manufacturers and home computer users were hit by the
rapidly spreading creature. The worm, which poses as a screen saver,
caused technology managers across Sydney to be woken by agitated
computer users from 2am yesterday. The malicious nature of the worm,
which can also spread through popular instant chat services, has
prompted antivirus firms to again warn computer users not to open
unsolicited email attachments, even those apparently sent by friends.
Goner originated in Germany, quickly infecting hundreds of thousands of
computers in Europe and the United States through email address books.
When it crossed the Pacific in the middle of the night, antivirus
companies started calling major Australian clients at home to warn them
of goner's approach and an update of their software to stop it. The
Australian Computer Emergency Response Team, operated by the University
of Queensland, said many corporate and government networks had blocked
the virus. However, experts said it could cause most harm in Australia
as people returned from work and opened personal email. 
Goner arrives with the subject line inviting the user to have a look at
a new screensaver. "This virus has been written with the consumer in
mind," said Symantec Australia's managing director, John Donovan. He
said antivirus software reduced risk, but the only way to guarantee the
security of a home computer was to not open unexpected email. "If a
strange parcel turned up in the letter box and there was a chance it
could cause damage, you would treat it with extreme caution. It is far
easier to find opportunities for malicious damage with email," he said. A spokesman 
for Trend Micro, Andrew Gordon, said home Internet users and
small businesses which did not have access to the premium antivirus
services were more likely to be hit by Goner. In addition to destroying
software, the virus will place a remote control agent on the infected
computer that makes contact with a hacker and allows him to hijack the
the machine when the user next browses the popular Internet Relay Chat
and ICQ (I seek you) chat services.

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-12-31 21:00:00 PST