 |
 |
Heads-Up folks, there is a new virus going around called w32/Goner@mm that is taking it's toll on some systems. Check out the following URL for info on the virus: http://vil.nai.com/vil/virussummary.asp?virus_k=99272 If your not blocking .SCR file attachments on your email servers, you might want to consider doing so until the new virus defs are out for your respective products. CERT INFO: ======= DLA CERT Advisory 2001-0122 DLA Computer Emergency Response Team Advisory 2001-0122, 4 Dec 2001 1649Z SUBJECT: VIRUS ALERT: Goner Worm PROBLEM: There's an outbreak of a new mass mailing worm called Goner. This is a preliminary Advisory and updates will be sent as new information becomes available. Subject: Hi Attachment: GONE.SCR Message text: How are you ? When I saw this screen saver, I immediately thought about you I am in a harry, I promise you will love it! SOLUTION: Watch for updated definition files and download as soon as available. Symantec's def file should be available after 11AM today. McAfee's site was unreachable for their status. Ensure all systems are using the most current antivirus definition files which protect against this worm. http://www.cert.mil/antivirus/updates.htm http://www.symantec.com/avcenter/download/pages/US-NNT.html http://download.mcafee.com/updates/updates.asp This worm can be blocked by setting your firewall, gateway and/or email server to block by attachment name or .scr extension. All users should be made aware of this worm, its subject line and attached file, and not to open this attachment or any emails of a suspicious nature. REQUIRED ACTIONS: 1) Distribute for awareness to all involved personnel. 2) Ensure that all possible defensive measures are taken including updating definition files, blocking emails by extension/attachment and notifying users of this worm and it's characteristics. 3) Notify DLA CERT immediately if any of your sites becomes infected with this worm. Give all data required by DLA CERT Tasking 2001-0047, type-two reporting. =============================== Al Bray Systems Analyst University Services Michigan State University Phone: 517-355-0357 Ext. 161 Fax: 517-353-2024