Folks, I am breaking my (and Rootsweb's) rule about posting virus notices. The reason is because a new strain of virus makes it look like the message was sent from a rootsweb list (or other address). I want to be sure all of you know rootsweb is a safe place to post. Viruses come in attachments and attachments CANNOT be posted to rootsweb lists. Here's how the virus works (courtesy of fellow listowner, W. David Samuelsen): Once infected, the worm is set to reply to EVERY MESSAGE that's in INBOX of the subscriber, meaning if the message you posted as long ago as even a year to a list and still in that INBOX, you get the infected attached message as if it came from the list. (it showed up in one message that was posted over a month earlier to a list). It also morphs to make it look like you were the sender or somebody else instead of the infected subscriber (such as the mailing list name). To date names of attachments that had been reported are: party.exe, b*boy.exe, casper.exe, faster.exe, pirate.exe There is an URL embedded in the message http://stuart.messagemates.com/index.html in large letters. Then there is the attachment (the one I got was pirate.exe). I received this virus from someone on SOCAL-L (although I use a Mac and couldn't open an .exe file anyway) but it's been reported on all lists and I've had notices from several of you. Many of you are infected and are unwittingly perpetuating the virus by opening the attachment. The message here is simple: DO NOT OPEN ATTACHMENTS. Run your virus software. Check our antivirus software mfrs. website for updates. Please do NOT discuss this on the list(s). Email me if you have questions or visit the Symantec web site at http://www.symantec.com. Happy holidays. Yvonne Oliver Bowers Listowner, Proud RootsWeb Sponsor, GenConnect Admin. * CORNISH * CORNISH-GEN * NORCAL * SOCAL * CA-GOLDRUSH* * BRANSON * ELLIOT(T)* GARRISON/GARRETSON * LORENTZ/LORANCE* * MOFFITT(AT/ATT/ETT)* OLIVER * SANDERS *