I got an email from someone on this listserv that had the virus too, so I think there's a good chance many of us got it. Here are those links. A relative of mine got it from the ROOTSWEB listserv too. Here is the Norton Antivirus site with a description of the virus and instructions on how to get rid of it: http://www.symantec.com/avcenter/venc/data/[email protected] Other have told me that Norton found the virus but couldn't fix it for them (but it did work for other people). Here is another site that I hear has a free antivirus program that is pretty good and helped other people get rid of this virus. http://www.grisoft.com/html/us_index.cfm Elizabeth (Gardner) Woolley

No one is getting these viruses from RootsWeb. When you send a message to RootsWeb and they send it on, they send on your e-mail address, too. for instance look at the top of this message it will show that it is from "Joan Best" and to GARDNER and is being passed on to you by the RootsWeb program. When it is passed on it is stripped of any viruses because RootsWeb does not accept attachments. However, my e-mail address has also been passed on to you through this message. It is now sitting in your computer. If you have the BadTran virus it will send out a message to me, unbeknownst to you, with its attachment. There are several viruses going around that are attaching mailing lists in this way. EVERYONE should install an anti-virus program and keep it up to date with weekly downloads of the newest virus definitions. Nortons is a good one. It allows you to chose a program that screens for virus in your e-mail before it downloads it. Joan Best ----- Original Message ----- From: "Elizabeth Woolley" <[email protected]> To: <[email protected]> Sent: Monday, May 14, 2001 9:25 AM Subject: [GARDNER] Re: GARDNER-D Digest V01 #62 > I got an email from someone on this listserv that had the virus too, so I think there's a good chance many of us got it. Here are those links. A relative of mine > got it from the ROOTSWEB listserv too. > > Here is the Norton Antivirus site with a description of the virus and instructions on how to get rid of it: > > http://www.symantec.com/avcenter/venc/data/[email protected] > > Other have told me that Norton found the virus but couldn't fix it for them (but it did work for other people). Here is another site that I hear has a free > antivirus program that is pretty good and helped other people get rid of this virus. > > http://www.grisoft.com/html/us_index.cfm > > Elizabeth (Gardner) Woolley > > > ==== GARDNER Mailing List ==== > Missed a message? Go to: > RootsWeb: GARDNER-L Archives > http://archiver.rootsweb.com/th/index/GARDNER > > ============================== > Search over 1 Billion names at Ancestry.com! > http://www.ancestry.com/rd/rwlist1.asp > >

At 12:25 PM 5/14/01 -0700, Elizabeth Woolley wrote: >I got an email from someone on this listserv that had the virus too, so I >think there's a good chance many of us got it. Here are those links. A >relative of mine >got it from the ROOTSWEB listserv too. > >Here is the Norton Antivirus site with a description of the virus and >instructions on how to get rid of it: > >http://www.symantec.com/avcenter/venc/data/[email protected] > >Other have told me that Norton found the virus but couldn't fix it for >them (but it did work for other people). Here is another site that I hear >has a free >antivirus program that is pretty good and helped other people get rid of >this virus. > >http://www.grisoft.com/html/us_index.cfm > >Elizabeth (Gardner) Woolley Hi, Elizabeth: It is important, I think, that people understand that it is *NOT POSSIBLE* for BadTrans to pass through a RootsWeb list server. RootsWeb transmits only plain text messages, and this worm ("virus") contains binary code. I have dealt with three infected subscribers to lists I admin, and in no case has an infected message passed through the list. However, it is the nature of this devious program that its infected reply messages *LOOK* like they come, not from the list, but from an address that received a message that you sent to the list. I too received an infected message from an unfortunate fellow subscriber to GARDNER-L, and I can assure you after checking the full headers, etc. that the malicious program never passed through a RootsWeb server. It is also important to note that it is not always enough to keep your antivirus definitions file up to date. It also requires that the version of the program that you are running is capable of being updated to handle a new threat, such as BadTrans. I believe you need Norton Antivirus 2000 to deal with BadTrans; Norton AV ver. 5 can't do the job. For McAfee, I think the minimum version is 5.0 but I'm not 100% sure of that. Hope this helps. Darrell Admin for VTGEN, VTCALEDO, VTLAMOIL, VTORANGE, VTWINDSO, MANORFOL, F.ELCH, F.ORBUSH, H.ARTWELL, H.ULBERT, L.AMSON, L.OWER, N.ELSON, R.OUSSEAU, R.USSEAU [email protected]