Goner worm fails to impact Asian users

The Goner worm which began circulating in Europe Tuesday has had limited impact in Asia, according to antivirus vendors and specialist response teams in the region.

"We have seen a certain level of activity, but few reports of infections among our members," said Kathryn Kerr, threat assessment manager at Australia's Computer Emergency Response Team (AusCERT).

The W32.Goner.A@mm or Goner worm is disguised as a screensaver that comes attached to an e-mail message. When the recipient opens the attachment, the worm activates and seeks out any locally installed antivirus and personal firewall software. It then attempts to erase all the files in the directory where the software is installed. It can also spread through file attachments sent by instant messaging systems.

The reason for the low infection level is a combination of growing end-user awareness of the potential damage worms and viruses can cause, and because Goner is a fairly straightforward worm that only starts up if a user opens an e-mail attachment, according to Kerr.

"Users are more aware and more cautious now, but there is still a certain percentage of people who fall for these things," Kerr said.

In Singapore and Malaysia, fewer than five customers have made inquiries about the worm to security vendor Symantec Corp., according to spokeswoman Teresa Wong.

On the downside, the payload is quite damaging as one of the worm's primary tasks is to disable a computer's antivirus and firewall protection. "It can damage systems if users wait (to eliminate it) as the payload can damage existing antivirus software and let other worms or viruses attack," said Kerr.

Symantec has given the worm a Category 4 (severe) rating because of its ability to spread quickly and its potentially damaging payload.

Kerr said that AusCERT was first informed about the worm from the U.K., but the exact origins of the worm remain unknown, as in most other worm and virus cases recently.

"There have been some investigations in previous cases, but it is quite difficult to find out where viruses come from," said Kerr.

Security vendor Trend Micro Inc. said it believed the worm began spreading in France, and that the chief danger was for users who underestimate the potential threat.

"Some people have the idea that viruses are big and dramatic, so they intentionally download viruses, and click on them because they want to see what it is capable of doing," said David Perry, Trend Micro's global director of education. "Many people who clicked on Goner, wanted to see the screensaver. Some of them even after they know it's a virus still want to see it."

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

David Legard

Computerworld
Show Comments

Cool Tech

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Breitling Superocean Heritage Chronographe 44

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?