Just a word of correction on the W32.NewApt.Worm virus--the email messages DO NOT come from ILWOODFO-L or any other Roots Web mailing list. As I understand it, by the very nature of the listservers, you cannot send or receive attached files to/from mailing lists. Therefore, any messages you receive purporting to be from a Roots Web mailing list which contain an attachment are bogus and should be deleted. I received one the day before yesterday with a ILWOODFO-L return address, so someone on the list is apparently infected, but the messages are going direct to the receiver, not through the listserver. The following explanation of how this virus is disseminated was posted to the westphalen-L list. Dan Steffen El Paso, IL ________________________________________________________________________ This explanation of the new crop of viruses was posted to Listowners, by George W. Durman(SgtGeorge) I thought it might be helpful to post it to the AGS list. This virus is NOT coming from, or through, any of the Lists at Rootsweb,regardless of what the FROM: header says. In other words, the infected email you received did NOT come from, or through, the VACULPEPER-L Mailing List. Here's how the virus works: It infects a person's system. That person has email sitting in the IN Box; it doesn't matter if the email has been read or not, it just matters that it IS in the IN Box. The virus picks an email in the IN Box at random. Let's say the one it picks is a "good" email from VACULPEPER-L@rootsweb.com, and it's subject is "State Genealogy Sites". The virus then picks out another email, let's say this one is from "John Doe" <jdoe@whatever.com> (subject is irrelevant), and is a private/personal email. Then, the virus sends what looks like a reply to the first email, but addresses it to John Doe. John Doe then receives an email containing the now-famous blue background with the familiar text, AND attaches a file, the name of which is taken from the list below at random [list deleted--same as list in previous post--DS]. The email that John Doe receives SAYS it is from "VACULPEPER-L@rootsweb.com". The subject line is "Re: State Genealogy Sites". Of course John Doe SWEARS that he received the virus from the Mailing List!!!!! He did not!!!!! He received it from someone's computer, someone ELSE whose system is infected. So far, I have found no way to find out WHOSE system sent the danged forgery. __________________________________________________________ At 03:47 AM 12/23/99 -0800, you wrote: >The information below this line is what I received from the Woodford County, >IL mailing list. >(NOTE: Please do not click on the highlighted website.) >- -------------------------------------------------------------------------- >- ---------------------------------------------------- > > > [x]http[x]://stuart.messagemates.com/index.html > > Hypercool Happy New Year 2000 funny programs and > animations... > > We attached our recent animation from this site in our > mail ! Check it out >