Fact Check

Goner Virus

Information about the 'Goner' worm.

Published Dec 5, 2001


Virus name:   Goner.

Status:   Real.

Example:   [Collected on the Internet, 2001]

Subject: Hi

When I saw this screen saver, I immediately thought about you I am in a harry, I promise you will love it!

Origins:   Goner is a mass-mailing worm written in Visual Basic and generally sent as a file attachment named gone.scr accompanied by a message similar to the one quoted above. Goner infects the recipient's PC when the attachment (named in such a way as to fool the operating system into seeing it as a screen saver) is opened. Goner then attempts to delete anti-virus and other security software and replicates itself by sending messages to addresses found in the infected user's Microsoft Outlook address book. Goner can also reportedly be spread via ICQ and can use infected users' PCs to launch Denial of Service attacks via IRC.

Additional Information:

    Goner   Goner   (McAfee Virus Information Library)

    Goner Suspects Under House Arrest in Israel   'Goner' Suspects Under House Arrest in Israel
  (The Tribune)

Last updated:   27 January 2008

David Mikkelson founded the site now known as snopes.com back in 1994.