From: Frank Burrows (no email)
Date: Tue Dec 04 2001 - 20:17:34 EST
This is the start of the lead story in the Wall Street Journal:
December 4, 2001
Tech Center
'Goner' Computer Virus Disrupts
Operations at Some Corporations
A WALL STREET JOURNAL ONLINE News Roundup
Antivirus companies scrambled to protect their customers against a new
viruslike e-mail attack Tuesday that purports to be a computer screen-saver
program.
Security company McAfee.com Corp. reported that thousands of its clients
sent in copies of the worm, called "Goner." An Internet worm has the
ability to spread to other computers on its own.
"It's very harmless looking," McAfee Virus Research Manager April Goostree
said. The email has a subject line of "Hi," and asks the user to check a
screen-saver program, which is attached.
If the recipient runs the screen saver, the computer becomes infected. Like
many email attacks, the virus sends itself out to everyone in the victim's
address book. It also can send itself through AOL Time Warner Inc.'s
instant-messaging program ICQ and Internet relay chat, or IRC. In addition
to ICQ, Goner affects Microsoft Corp.'s Outlook and Outlook Express e-mail
programs on computers running Windows. Computer experts advise that people
not open unexpected e-mail attachments, even if the sender is someone
familiar. Computer users should update their antivirus software at least
weekly.
At 05:57 PM 12/4/2001 -0500, you wrote:
>Alan,
>
> I'm not completely sure what messages you are refering to with your
> "warning", as you didn't include enough information to do an intelligent
> search. What I was able to locate on the Symantec Anti-Virus Site with
> the word "Hi" in the subject line, was the following information on yet
> another HOAX...
>
>
>----------
>
>The following message has been sent out by email. It is a hoax. This
>"virus" does not exist.
>
>The hoax message includes the following "warning":
>
>---------------------------------------------
>Hi from Ukraine.
>When you receive this message, all computers
>in your network is already infected by
>DESPITE-virus. 11th of October, 1999, data in
>the all databases will be lost. For disinfect
>you need to use only STARIONI disinfector.
>1. Send to your valid e-mail
>address with subject "DESPITE".
>2. Send US$24.99 to the following bank
>account.
>----------------------------------------------
>Bank account:
>BENEFICIARY: NIKOLAEV BRANCH CB "PRIVATBANK"
>BENEFICIARY ADDRESS: 27 FRUNZE STR.,
>NIKOLAEV UKRAINE
>ACCOUNT: 3901 9 004017 003
>
>BANK OF BENEFICIARY: COMMERCIAL BANK
>"PRIVATBANK"
>ADDRESS OF THE BENEFICIARY'S BANK:
>DNEPROPETROVSK, UKRAINE
>SWIFT: PBAN UA 2X
>CORRESPONDENT ACCOUNT: 890-0085-754
>
>INTERMEDIARY BANK: THE BANK OF NEY YORK
>ADDRESS OF THE INTERMEDIARY BANK:
>Eastern Europe Division
>One Wall St., 9-th Floor
>New York, N.Y., 10286, USA
>SWIFT: IRVT US 3N
>
>DETAILS OF PAYMENTS:
>IN FAVOUR acc.26206791707001/875
>RACHKOVAN VADIM
>-----------------------------------------------
>After receiving your bank transaction, the
>STARIONI disinfector in self-extract archive
>"starioni.exe"(74.648 bytes) will have
>been deliver to your mailbox immediately.
>
>----------
> If this is what you are referring to, it's a HOAX. Please check
> before sending this stuff around the Web...
>
>
>Jack Beale
><mailto:>
>http://home.att.net/~jack.beale/computerguy.htm
>
>
>----------
>
>----- Original Message -----
>>From: <mailto:>Alan Lewis
>>To: <mailto:> ;
>><mailto:> ;
>><mailto:> ;
>><mailto:>
>>Sent: Tuesday, December 04, 2001 3:51 PM
>>Subject: lv-ab: Virus
>>
>>Do not open any mail with the subject line "hi". This is a new Outlook
>>virus that is sweeping the country this afternoon. It resends the mail
>>(with attachment) to everyone in your contact list.
>>
>>Alan
___________________________________________________________________________
|| The Live-Aboard List : send a "subscribe" or "unsubscribe" request ||
|| in body of message to: ||
|