Q-C Online support pages
Technical support article

About the Goner virus "W32.Goner.A@mm"



W32.Goner.A@mm is a mass-mailing worm that is written in Visual Basic. The worm has been compressed using a known Portable Executable (PE)* file compressor. The worm can spread its infection using the ICQ network as well as by email using Microsoft Outlook. If IRC is installed, this worm can also insert mIRC scripts that will enable the computer to be used in Denial of Service (DOS) attacks.

The E-mail will most likely come to you from someone you know and will appear saying:
How are you?
When I saw this screensaver, I immediately thought about you
I am in a harry, I promise you will love it!

Once launched, W32.Goner.A@mm starts by displaying the following window.



The worm has been packed using a known Portable Executable (PE) packer. The size of the worm unpacked is approximately 159 KB. The worm adds the value: C:\%SYSTEM%\gone.scr to the registry key of HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
This virus an also infect your machine via ICQ and mIRC, two of the most popular chat clients. For more information on how these chat clients are infected, visit Norton Anti-virus W32.Goner.A@mm information

To remove this or any other virus, update your anti-virus software immediately and run a thorough scan of your machine. Your best defense against a virus is to always remember to never download any strange attachment, especially if you do not know who it is coming from. If you do not know what a specific attachment is, reply to the person who sent it to you and ask, do not download. Your second line of defense should be having, and running, an up to date Anti-Virus application. For more information on virus updates and anti-virus software, visit our Virus Information section.

Local events heading








  Today is Monday, May 20, the 140th day of 2013. There are 225 days left in the year.
1863 -- 150 years ago: A petition is being circulated asking the city council to order awell bored in Market Square. It would be a great accommodation to the public.
1888 -- 125 years ago: At 1 p.m. on May 18 the Mississippi River flooded its banks atRock Island and destroyed the warehouse of the Rock Island Lumber Co. and damagedRock Island Arsenal power plant. Total loss is estimated at $100,000.
1913 -- 100 years ago: Residents of Sough Rock Island Township are circulating apetition favoring the annexation of that area to the City of Rock Island.
1938 -- 75 years ago: A group of state members of the National Grandmothers Clubmeeting in Rock Island are making plans to petition for the observance of a NationalGrandmothers Day.
1963 -- 50 years ago: Deere and Co. reported today that its U.S. and Canadian sales forthe first half of the 1963 fiscal year set an all time record of $323,716.628.
1988 -- 25 years ago: William G. Lawrence, first administrative director, has retired fromPECO Enterprises, Inc. Prior to his service at PECO, Mr. Lawrence was the civilianpersonnel officer at the Rock Island Arsenal.






(More History)