From: Sherry M. Rogers (smrogers@socrates.berkeley.edu)
Date: Tue Dec 04 2001 - 14:51:10 PST
---------- Forwarded message ----------
Date: Tue, 4 Dec 2001 17:19:41 -0500
From: Fred A. Miller <fm@cupserv.org>
To: unisog <unisog@sans.org>
Subject: [unisog] Symantec Security Response - W32.Goner.A@mm
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Symantec Security Response - W32.Goner.A@mm
Due to the increased rate of submission and level of damage, Symantec
Security Response is upgrading W32.Goner.A@mm from Category 3 to
Category 4.
W32.Goner.A@mm is a mass-mailing worm that is written in Visual Basic.
The worm has been compressed using a known Portable Executable (PE)*
file compressor. The worm can spread its infection using the ICQ
network as well as by email using Microsoft Outlook. If IRC is
installed, this worm can also insert mIRC scripts that will enable the
computer to be used in Denial of Service (DOS) attacks.
Type: Worm
Infection Length: 38,912 bytes
Virus Definitions: December 4, 2001
http://www.symantec.com/avcenter/venc/data/w32.goner.a@mm.html
- --
Fred A. Miller
Systems Administrator
Cornell Univ. Press Services
fm@cupserv.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE8DUv9IhTtc6nTZIIRAo9UAJ47bsGmzbDhhg9Oq8mfDsBwGPU6MwCdHjP5
7sdady+a4YVhhAeq5RCxCg0=
=tDIm
-----END PGP SIGNATURE-----
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
For information about Micronet, its meetings and events, and its
mailing list, including information on subscribing and unsubscribing,
see the Micronet Web site at <http://wss.berkeley.edu/micronet/>.
This archive was generated by hypermail 2b29 : Tue Dec 04 2001 - 14:52:24 PST