Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||Invery, Gop.A, W32/Invery.A@MM|
|Effects: ||It obtains ICQ passwords.|
|First detected on:||Feb. 10, 2003|
|Detection updated on:||March 5, 2003|
Gop is a worm, whose main objective is to spread via e-mail and obtain ICQ passwords.
The attachment has a random name and a double extension (eg. JPG and EXE). In this way, it tries to pass itself off as a text file or an image, when it is actually an executable file.
A clear indication that you have received Gop is a message whose attachment has a double extension.
These are the possible combinations: TXT.EXE, DOC.EXE, JPG.EXE, BPM.EXE, GIF.EXE, JPEG.EXE and RTF.EXE.