E-mail security warning as high-risk virus arrives

By ALAN PERROTT and AGENCIES

An e-mail computer virus that poses as a screen saver and deletes files related to security software has arrived.

The virus, rated as high risk, is contained in an attachment called "gone.scr,".

It mails itself to everyone listed in the address book of an infected computer with a message saying the attachment contains a screen saver.

The email includes the message: "When I saw this screen saver, I immediately thought about you."

It has been called "Goner" by computer-security workers since it arose a week ago.

It follows recent attacks including the Badtrans virus, which hit last month, and the Nimda virus in September.



Despite more awareness of viruses, Goner is spreading because companies that block all emails with attachments, which frequently contain viruses, do not always block screen savers.

Tim Wood, a director at internet service provider ihug, said the virus arrived in New Zealand on Tuesday and computer users should beware.

"This will be the third big one in the last three weeks and they are getting more devious and damaging," he said. "I presume it will be as bad as Badtrans. It has different side-effects, is hard to detect and is quite destructive.

"Over the next few days it will start to amp up."

Mr Wood recommends users update email filter programs every week and change their dial-in password every 60 days or sign on to a screening service that will filter emails before they arrive.

"These precautions are now a fact of life, otherwise it's like walking out of the house and leaving the door open with a spray can on the table and 'paint me' on the wall," he said.

Computers using Microsoft's Outlook email software are affected by the virus.

The bug will delete software needed to run anti-virus programs and firewalls that block attacks by hackers. Computer users who have been infected should reinstall those programs.

American software technicians suspect the virus originated in Europe.