When this virus activates, it replaces the "From Address" with the name of the user who is currently logged on to the infected computer i.e. mine. This morning when we turned on our computer and checked our email, it showed a number of incoming emails with my own address as the sender. This makes it difficult to know who to notify, however I was able to figure out that I could contact these people through the list. Since I have done the below procedure, that is no longer happening. If you have detected the virus but not yet shut down your computer and re-booted: Run SYSEDIT by clicking START-RUN. In the RUN window type "SYSEDIT" then click OK. In SYSTEM CONFIGURATION EDITOR select C:\WINDOWS\WIN.INI then delete the entry "C:\WINDOWS\NETD.EXE". ----- Original Message ----- From: BLANCHARD <blanchac@cadvision.com> To: Mike & Ginger Jalonen <mike-ginger@home.com> Sent: Friday, April 20, 2001 12:37 PM Subject: Re: [ALBERTA] Badtrans.a Virus > Hi Ginger; I got an E-mail from Mary Jean saying she had problems opening an > attachment & I suggested she not open it because the name of the attachment > sounded weird & the sender may not have anything to do with genealogy. > > I didn't know that Virsus attached to E-mail, I thought it was only to > Attachments. Man, if that is true that Virus has really spread. Please let us > all know how to get rid this virus if it does spread through E-Mail because > everyone on Alberta List now may be infected. Martha > > > Mike & Ginger Jalonen wrote: > > > ATTENTION: Mary Jean -re: DeForas > > Fern - re: Swanson Cemetery > > Beryl - re: Accessing Archives > > Editors - Rootsweb-Review Vol 4, No. 10 & Vol 6, No > > 10 > > > > I am terribly sorry. I seem to have infected your computer with the "Troj > > Badtrans.A" virus which I picked up yesterday from someone on the > > West-Riding-Yorkshire list. > > I had that same message yesterday and the virus activated itself this > > morning when we turned our computer on. > > > > Step 1. DO NOT turn off your computer. This Virus is executed at the next > > re-boot. It then replies to all unread email messages with itself attached > > to the email. > > > > Step 2. Go to http://housecall.antivirus.com/ and follow their instructions. > > I am awaiting further instructions from my anti-virus support people. If I > > find an easier solution I will contact you. > > > > Meanwhile - do not open any attachments from me. > > > > Apologies, > > > > Ginger > >