--part1_b1b1731a.2455c812_boundary Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hope this helps everyone Kathy --part1_b1b1731a.2455c812_boundary Content-Type: message/rfc822 Content-Disposition: inline Return-Path: <owner-genealogy-l@LISTSERV.INDIANA.EDU> Received: from rly-yd04.mx.aol.com (rly-yd04.mail.aol.com [172.18.150.4]) by air-yd05.mx.aol.com (v59.4) with SMTP; Mon, 26 Apr 1999 09:21:40 -0400 Received: from LIME.EASE.LSOFT.COM (lime.ease.lsoft.com [209.119.1.41]) by rly-yd04.mx.aol.com (8.8.8/8.8.5/AOL-4.0.0) with ESMTP id JAA12527; Mon, 26 Apr 1999 09:21:18 -0400 (EDT) Received: from PEAR.EASE.LSOFT.COM (209.119.0.19) by LIME.EASE.LSOFT.COM (LSMTP for Digital Unix v1.1b) with SMTP id <1.00111B3D@LIME.EASE.LSOFT.COM>; Mon, 26 Apr 1999 9:19:55 -0400 Received: from LISTSERV.INDIANA.EDU by LISTSERV.INDIANA.EDU (LISTSERV-TCP/IP release 1.8d) with spool id 18834166 for GENEALOGY-L@LISTSERV.INDIANA.EDU; Mon, 26 Apr 1999 08:21:00 -0500 Received: from snorkel.uits.indiana.edu by piano.ucs.indiana.edu (LSMTP for Windows NT v1.1a) with SMTP id <0.B744E890@piano.ucs.indiana.edu>; Mon, 26 Apr 1999 8:20:59 -0500 Received: from massachusetts.exchange.indiana.edu (massachusetts.exchange.indiana.edu [129.79.6.159]) by snorkel.uits.indiana.edu (8.9.1a/8.9.1/1.1IUPO) with ESMTP id IAA05318 for <genealogy-l@listserv.indiana.edu>; Mon, 26 Apr 1999 08:20:59 -0500 (EST) Received: by massachusetts.exchange.indiana.edu with Internet Mail Service (5.5.2448.0) id <HDZBXS7A>; Mon, 26 Apr 1999 08:20:50 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Content-Type: text/plain Message-ID: <4F1C26C2EB4CD211BD2300805F657B5C0173B63E@newjersey.exchange.indiana.edu> Date: Mon, 26 Apr 1999 08:20:48 -0500 Reply-To: "Stephens, Larry V" <stephenl@INDIANA.EDU> Sender: SuperList of Genealogy Lists <GENEALOGY-L@LISTSERV.INDIANA.EDU> From: "Stephens, Larry V" <stephenl@INDIANA.EDU> Subject: [GENEALOGY-L] yet another virus To: GENEALOGY-L@LISTSERV.INDIANA.EDU Content-Transfer-Encoding: 7bit A little late on this notice because I've been out of town. This note does underline the importance of running virus software on your machines. ---- Yesterday, we became aware of a particularly nasty new virus called CIH or Chernobyl virus. Much like the old Michelangelo virus, this is a date dependent virus that lurks in machines until a particular date. This virus activates based upon the 26th of a month. Certain strains kick in on April 26th with others on June 26th. Since yesterday, we have found a fair amount of it on campus. The CERT Incident Note IN-99-03 can be viewed at http://www.cert.org/incident_notes/IN-99-03.html . I don't normally throw up red flags on these things, but I have some level of concern over this particular event. Two simple ways of dealing with this virus are to set your system date to April 27th now and then correct it on Tuesday. This does not get rid of the virus, but at least you avoid the date. The other simple method is to leave systems shut down between 11:59 pm on Sunday through 12:01 am on Tuesday. With both of these methods, systems must still be check for the virus. The best way of dealing with this is to find a program that recognizes and cleans it off prior to the 26th. --part1_b1b1731a.2455c812_boundary--