'Goner' Not Gone

Former astronaut Lisa Nowak enters the courtroom before a hearing at the Orange County courthouse in Orlando, Fla., Friday, Aug. 24, 2007. Nowak, accused of attacking a romantic rival, arrived in court Friday with a swarm of photographers snapping away as she was escorted to a private room to prepare.
AP Photo/John Raoux
A new computer worm named "Goner" is spreading quickly through corporate and personal e-mail inboxes, deleting system files and clogging networks in what could be the biggest outbreak since last year's "Love Letter" virus, security software vendors said.

The worm, a virus that propagates itself to other computers through the Internet or other networks, is affecting users of Microsoft Corp.'s Outlook and Outlook Express, said Ian Hameroff, business manager of security solutions at Computer Associates International Inc.

The e-mail has a subject line of "Hi," and asks the user to check a screen saver program, which is attached. If the recipient runs the screen saver, the computer becomes infected. Like many e-mail attacks, it sends itself out to everyone in the victim's address book.

People using ICQ instant messenger and Internet Relay Chat also are susceptible to the worm because files can be transferred across those networks, Hameroff said.

Researchers estimated thousands of computers had been infected by the worm, which is believed to have originated in France, according to April Goostree, virus research manager at McAfee.com.

"This is at outbreak status, which is very rare," Goostree said. "The last outbreak we had was 'Love Letter' in May 2000."

A virus is given outbreak status by McAfee.com if it is determined to be spreading quickly and affecting large corporate networks as well as individual computer users, Goostree said.

Computer experts advise that people not open unexpected e-mail attachments, even if the sender is someone familiar. Computer users should update their anti-virus software at least weekly.

Goner also attempts to delete critical files for any security or anti-virus program the victim might have installed.

© MMI, CBS Worldwide Inc. All Rights Reserved. This material may not be published, broadcast, rewritten, or redistributed. The Associated Press and Reuters Limited contributed to this report