Friends This is not a scare tactic nor a false warning. Saturday, at 9:30pm, we received an email message from a person on one of our mailing lists. The message had an attachment named "Very Funny.vbs" - we're not sure what it does. Fortunately, the virus (if that's really the right word) is a Visual Basic script (therefore, the ".vbs" extension) that works only on Windows computers; we use Macintoshes. Tom has done enough programming to recognize what the script does. Here's a portion of it: c.Copy(dirsystem&"\MSKernel32.vbs") c.Copy(dirwin&"\Win32DLL.vbs") c.Copy(dirsystem&"\Very Funny.vbs") regruns() html() spreadtoemail() We don't understand the full impact of it, but when it starts playing with MSKernel and Win32DLL, we know it's not a game. THe last line of the excerpt is also somewhat insidious. If you receive the email, you will perhaps not be infected -- we don't understand what it takes to launch a VB script. If you attempt to open the attachment, we can almost guarantee that you will be infected. Should you become infected, you'll need to find some person or place which can solve your problems. Do not direct any of your anger at someone who might send it to you -- they are just as much a victim as you are. In fact, if you are infected, you may find that you have passed it on to the addresses in your address book! A grim chuckle -- the "title lines" of the script follows ("rem" denotes a "remark", which is not executable code): rem barok -loveletter(vbe) <i hate go to school> rem by: spyder / ispyder@mail.com / @GRAMMERSoft Group / Manila,Philippines Please avoid this attachment if you can!! Judy and Tom Lundeen

Tom and others, The virus shouldn't have come through the actual mailing list, Rootsweb has not allowed attachments, if it did, I didn't catch it. If anyone gets any attachments from this list, send the email directly to me and I will report it to the powers that be. Thanks. >This is not a scare tactic nor a false warning. Saturday, at 9:30pm, we >received an email message from a person on one of our mailing lists. The >message had an attachment named "Very Funny.vbs" - we're not sure what it >does. Fortunately, the virus (if that's really the right word) is a >Visual Basic script (therefore, the ".vbs" extension) that works only on >Windows computers; we use Macintoshes. Pat Thomas Post Office Box 885 Winona, Minnesota 55987-0885 1-507-452-8290 mailto:ptthomas@hbci.com Knox County, Illinois USGENWEB CC http://www.rootsweb.com/~ilknox/knindex.htm