Sorry to post to list, thought this might give a good description of the new BADTRANS. Jenny PS I have already received this virus type emails from members of Scottish lists. ----- Original Message ----- From: "Julie Cheesman" <juliec@clara.co.uk> To: <SUSSEX-PLUS-L@rootsweb.com> Sent: Monday, November 26, 2001 12:02 PM Subject: [SXP] ADMIN - WARNING Badtrans new version > This is very important. Anyone ignoring this advice is extremely foolish. > > There is a new variant of the Badtrans virus, it was only detected very > recently. > > The virus is called W32/Badtrans-B (dated 24Nov2001!!!) - see > www.sophos.co.uk for details (including attachment names). The infected > message is blank, whereas Badtrans-A contained a short phrase. > > This new variant is known to reply to old e-mails as well as those you've > just received, I and several other people have received copies claiming to > be replies to messages sent out months ago. The subject line will therefore > be slightly familiar to you but you must NOT open the attachment thinking > that at last you are getting a response. > > The sender's e-mail address may have been corrupted by an underscore prefix > ( _ ) so if you reply to the sender you must remove this to create a valid > address. > > If you receive such a message then let me know the e-mail address of the > sender. It must be the e-mail address, not just the name of the sender. I > will then inform them and temporarily unsubscribe them from the list. As the > virus replies to old as well as new messages the infected computer may > belong to someone who is no longer on the list but kept a copy of messages > received. > > It remains the case than you cannot receive a virus from a RootsWeb mailing > list. RootsWeb do not allow attachments or HTML and there is a size limit > for messages which is below the size of harmful viruses.These three factors > all prevent viruses from getting through RootsWeb mailing lists, the same > cannot be guaranteed for all mailing lists hosted by other organisations. > > Remember, NEVER open attachments unless you know EXACTLY what they contain. > If in any doubt delete it. Always THINK before opening anything, no matter > how tempting it might seem. > > Julie, Sussex-Plus Listowner > > > ==== SUSSEX-PLUS Mailing List ==== > The Surrey surname interests page can be found at http://www.genuki.org.uk/big/eng/Surnames/sry.htm >