Goner worm fails to impact Asian users

The Goner worm which began circulating in Europe Tuesday has had limited impact in Asia, according to antivirus vendors and specialist response teams in the region.

"We have seen a certain level of activity, but few reports of infections among our members," said Kathryn Kerr, threat assessment manager at Australia's Computer Emergency Response Team (AusCERT).

The W32.Goner.A@mm or Goner worm is disguised as a screensaver that comes attached to an e-mail message. When the recipient opens the attachment, the worm activates and seeks out any locally installed antivirus and personal firewall software. It then attempts to erase all the files in the directory where the software is installed. It can also spread through file attachments sent by instant messaging systems.

The reason for the low infection level is a combination of growing end-user awareness of the potential damage worms and viruses can cause, and because Goner is a fairly straightforward worm that only starts up if a user opens an e-mail attachment, according to Kerr.

"Users are more aware and more cautious now, but there is still a certain percentage of people who fall for these things," Kerr said.

In Singapore and Malaysia, fewer than five customers have made inquiries about the worm to security vendor Symantec Corp., according to spokeswoman Teresa Wong.

On the downside, the payload is quite damaging as one of the worm's primary tasks is to disable a computer's antivirus and firewall protection. "It can damage systems if users wait (to eliminate it) as the payload can damage existing antivirus software and let other worms or viruses attack," said Kerr.

Symantec has given the worm a Category 4 (severe) rating because of its ability to spread quickly and its potentially damaging payload.

Kerr said that AusCERT was first informed about the worm from the U.K., but the exact origins of the worm remain unknown, as in most other worm and virus cases recently.

"There have been some investigations in previous cases, but it is quite difficult to find out where viruses come from," said Kerr.

Security vendor Trend Micro Inc. said it believed the worm began spreading in France, and that the chief danger was for users who underestimate the potential threat.

"Some people have the idea that viruses are big and dramatic, so they intentionally download viruses, and click on them because they want to see what it is capable of doing," said David Perry, Trend Micro's global director of education. "Many people who clicked on Goner, wanted to see the screensaver. Some of them even after they know it's a virus still want to see it."

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

David Legard

Computerworld
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?