W32.Goner.A@mm is a mass-mailing worm that is written in Visual Basic. The worm has been compressed using a known Portable Executable (PE)* file compressor. The worm can spread its infection using the ICQ network as well as by email using Microsoft Outlook. If IRC is installed, this worm can also insert mIRC scripts that will enable the computer to be used in Denial of Service (DOS) attacks.

Please do not open any emails which have the subject 'HI' as they are
infected with a 'screen saver' attachement (goner.scr)
Apparently, having the preview pane option turned on in Outlook (or express
?) is enough to infect your PC. (reported by Norm Dunbar).

http://securityresponse.symantec.com/avcenter/venc/data/w32.goner.a@...

Helen
(moderator)
All for Open and Open for All
InterBase Developer Initiative · http://www.interbase2000.org
_______________________________________________________