I got the micro-soft one to-day. I deleted it without thinking or checking since as a rule I delete all mail that have attachments from people I do not know or expect to write. I also check properties of any attachment to see if it has .exe. from people I do know and expect to write. I also delete anything that purports to come from Micro-soft. I also have a weekly virus report on developing viruses and scan the names and endings or formats or subject headings that they use, in the hope that it will ring a bell some-time in the future. If I am still not sure, I send it to a website that has a good anti-virus shield and it usually bounces saying that there is a vrus and what it is. Why don't all ISPs have the same anti-virus shield? If they did maybe no-one will buy the anti-virus programs. I hope this helps others. ----- Original Message ----- From: "Ernest M. Wiltshire" <murcot@synapse.net> To: <CARIBBEAN-L@rootsweb.com> Sent: Monday, May 19, 2003 5:06 PM Subject: A real virus warning > My antivirus service has warned about this one. People I know have > already been infected, so be careful folks & update your virus > definitions immediately. > > Ernest > > > > Virus Alert Notification > > > > Win32.Palyh.A > > Alias: I-Worm.Palyh (Kaspersky), > W32.HLLW.Mankx@mm (Symantec), > W32/Palyh@MM (McAfee), > Win32/Palyh.A.Worm > Category: Win32 > Type: Worm > Last Modified: 5/18/2003 > > The My-eTrust Technical Support team has received increased numbers of > infections for the Win32.Palyh.A worm and are advising clients to update > their anti-virus protection immediately. > > CHARACTERISTICS > Win32.Palyh.A is a worm which spreads via e-mail using its own SMTP > engine, and through shared drives. > > It arrives in a message with one of the following subjects: > > Re: My application > Re: Movie > Cool screensaver > Screensaver > Re: My details > Your password > Re: Approved (Ref: 3394-65467) > Approved (Ref: 38446-263) > Your details > > The attachment name may be one of the following: > > application.pif > movie28.pif > screen_doc.pif > screen_temp.pif > doc_details.pif > password.pif > approved.pif > your_details.pif > > The only message body observed at this time contains simply: > > All information is in the attached file. > > The worm also spoofs the 'From' address. E-mail sent by the worm appears > to be from the following address: > > "support@microsoft.com" > > > > > > ==== CARIBBEAN Mailing List ==== > ROOTSWEB MAILING LIST HELP PAGES > What is a Mailing List? > http://helpdesk.rootsweb.com/help/mail1.html > >

Why don't all ISPs have the same anti-virus shield? If they did maybe no-one will buy the anti-virus programs. I hope this helps others. Richard --------------------------------- I have already fought with Sprint over this very question......many times. They cite 'freedom of speech' and all that jazz. If the truth were known, it is expensive to put antivirus programs on huge ISP's but a lot of the smaller ones have done so. And their point is that it may be an *.exe which is an important business document and they would get their pants sued off......which IS a valid point. And NO.......antivirus companies do not employ virus writers. And they do not try to panic the world by putting out warnings. These are two things that crop up time and time again on the antivirus news group. I am merely pointing this out in case someone *misreads* your comments about the antivirus companies. Sometimes a fast-moving virus just fizzles out......but we have to send the warnings out just in case. Heather.