This is a multi-part message in MIME format. --------------F5AB05D098E3B28C7B6E76C1 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit --------------F5AB05D098E3B28C7B6E76C1 Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Content-Disposition: inline Received: from bl-14.rootsweb.com (bl-14.rootsweb.com [204.212.38.30]) by franklin.lisco.com (8.9.0/8.9.0) with ESMTP id LAA07393 for <njennings@lisco.net>; Mon, 20 Dec 1999 11:27:25 -0600 (CST) Received: (from slist@localhost) by bl-14.rootsweb.com (8.9.3/8.9.3) id JAA15357; Mon, 20 Dec 1999 09:25:16 -0800 (PST) Resent-Date: Mon, 20 Dec 1999 09:25:16 -0800 (PST) Sender: artdept@compuserve.com Message-ID: <385E6515.1430@compuserve.com> Date: Mon, 20 Dec 1999 09:19:17 -0800 From: Richard Harrison <artdept@compuserve.com> Reply-To: artdept@compuserve.com Organization: The Art Department X-Mailer: Mozilla 3.01Gold (Win95; I) MIME-Version: 1.0 Old-To: Iowa Genealogy Discussion List <IAGEN-L@rootsweb.com>, Iowa Rootsweb List <iowa-l@rootsweb.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: [IAGEN-L] Virus Warnings Resent-Message-ID: <7emovC.A.wvD.8ZmX4@bl-14.rootsweb.com> To: IAGEN-L@rootsweb.com Resent-From: IAGEN-L@rootsweb.com X-Mailing-List: <IAGEN-L@rootsweb.com> archive/latest/736 X-Loop: IAGEN-L@rootsweb.com Precedence: list Resent-Sender: IAGEN-L-request@rootsweb.com X-Mozilla-Status2: 00000000 Folks- We normally do not allow virus warnings on this list, but I'm making an exception in this case as this "messagemates" thing appears to be coming from Rootsweb even though it isn't. - --------------------------------------------------------------------- Virus Warnings Recently a new virus has turned up and many people appear to be getting a copy of it from our lists. This is not true. Our lists are filtered and no attachments are allowed. This virus sends itself out to the addresses in your address book using an address it found there as the sender's address. So if you have the address of a list in your address book, the virus may use that to make it appear it came from the list. It does not actually come through RootsWeb, it only looks like it did. Here is what Tim Pierce had to say about this recent virus: Hi, folks - We've had a lot of reports tonight about a virus being passed around on RootsWeb lists. I have looked into these reports and it does NOT appear that the viruses have actually been sent through our lists. I've included a semi-technical explanation of what I have been able to find out, for those of you who are curious. The only important message here is that RootsWeb's lists are NOT the source of recent virus reports. What seems to be happening is that the current flock of viruses do the following things when they infect a new computer: * The virus sends a copy of itself to everyone in the computer's address book; * It forges its own return address to look like it was sent by someone *else* in the address book; * and it uses the Subject line from a message that was recently sent from that machine. So if an infected person sent mail to BUMBLEROTTER-L@rootsweb.com, the virus might send out mail like this to someone else in the victim's address book: From: BUMBLEROTTER-L@rootsweb.com To: joe@example.com Subject: [BUMBLEROTTER] looking for Fred and Wilma Bumblerotter http://stuart.messagemates.com/index.html Hypercool Happy New Year 2000 funny programs and animations... We attached our recent animation from this site in our mail ! Check it out ! Even though the mail never was sent to RootsWeb, the return address is forged to make it appear as if it came from us. I will continue to work on figuring out if there is anything that we can do about this; in the meantime, please assure any concerned subscribers that subscribing to a RootsWeb list is not dangerous. :-) -- Regards, Tim Pierce RootsWeb.com lead system admonsterator and Chief Hacking Officer What can you do? Protect yourself by never opening an attachment from someone you do not know or that looks suspicious. Use a virus protection program. Know what viruses are out there so you will recognize one when if you get it. There are sites that will help you such as: http://www.symantec.com/avcenter/ http://www.stanford.edu/group/partners/hoaxes.shtml http://kumite.com/myths/ http://www.mcafee.com/centers/anti-virus/default2.asp and many others. Remember, if you do not open the attachment, you can not get infected with the virus. Delete it. Then empty the trash bin to make sure it is gone. If you are using an email program that stores attachments elsewhere on your computer, such as Eudora, find it there and delete it too. -- Richard Harrison/Encinitas, San Diego, California IAGenWeb State Coord.: http://www.rootsweb.com/~iagenweb/index.htm IAGEN-L List Owner: IAGEN-L@rootsweb.com IOWA-L List Owner: IOWA-L@rootsweb.com Jones Co. IAGenWeb Coord.: http://www.rootsweb.com/~iajones/index.htm Jones Co. List Owner: IAJONES-L@rootsweb.com Richard's Genealogy: http://homepages.rootsweb.com/~richard ==== IAGEN Mailing List ==== SPACE FOR IAGENWEB'S WEBSITE AND FOR THIS LIST IS PROVIDED BY ROOTSWEB http://www.rootsweb.com/rootsweb/how-to-subscribe.html --------------F5AB05D098E3B28C7B6E76C1--