I think I can shed some light on at least one source of virus problem. If you receive anything from "webzone.net" delete it. I unsubscribed from Davidson-L when my former ISP server "webzone.net" was bought out by Earthlink/Mindspring, and re-subscribed with "mindspring.com." I don't know how or why, but apparently the phantom worm attached itself to my address book. I didn't turn my computer on until after 7pm Tues (when all of this started), however when I did I was inundated with returned/"undeliverable messages" all with the "webzone.net" return addy that had been sent out that morning. [Webzone.net has not been my ISP server for several months.] At first I checked to see who was bouncing back and recognized a few of the names and addy's, or supposed contacts, but the majority I did not, and finally started deleting the messages as fast as I could. NOTE: my email addy is domuff@mindspring.com. It is impossible for me to send anything via webzone.net, they are defunct. Apparently my new server is "forwarding" messages from webzone.net , as I am receiving duplicate messages from the same sources. Would it be possible for someone, who knows how, to unsub my webzone.net again? I apologize for the inconvenience and pray that something terrible didn't/doesn't happen/ed to anyone's computer. One good thing, after running the virus scan, then deleting the system%\CP_25389.NLS file, and the registry value: kernel32, and finally the registry value as per instructions at http://housecall.antivirus.com/ re Worm_badtrans.B. After restarting the system there were not any further incidences. So hopefully the problem has been taken care of. I did find out that this particular virus/worm is rated as a low risk and not destructive. Easy for them to say. It's been a nightmare. There is a list posted of all the viruses to watch for at http://vil.mcafee.com/hoax.asp I remain baffled, until next time, domuff@mindspring.com PS My McAfee doesn't indicate that I ever had a virus. I checked out Norton Anti Virus site and decide to download the free trialware, but was intercepted with a notice that the software was not certified (doesn't have a certificate), so the authenticity of this software cannot be verified, and might not be safe to install and run on my computer. So I did not proceed to download/install the software. ----- Original Message ----- From: "Jinx Dopson" <jdopson@bellsouth.net> To: <DAVIDSON-L@rootsweb.com> Sent: Wednesday, November 28, 2001 2:20 PM Subject: Re: [DAVIDSON-L] virus Norton picked up on mine .......... I had just updated. Maybe you need to update. I am receiving a lot of virus mail from here also. Jinx Nall Dopson > DAVIDSON - DAVISON - DAVISSON Web Page > http://homepages.rootsweb.com/~genea/davidson.html >