Here is a little more information (this came from work, so the policy there is NO downloading and NO opening attachments for the next few weeks...) Mentioned is that the Worm. EXE (mentioned below) and Melissa are back. The Worm is annoying, Melissa could be deadly. They also quoted from Network World Fusion (a weekly publication) "saying that greeting cards are a major worry because they are prime candidates fro carrying viruses. The greetings also can cripple email servers because they are so large - up to 5M bytes each - and can easily broadcast around a network" The most popular are: Snowcraft 3.5 M bytes, Elfbowl.exe - 1.5M bytes, Xmas.exe - 1.1M bytes. I have heard a rumor (completely unproven) that Elfbowl has a virus that will be released on Christmas day. That however, is a rumor and may or may not be true. My husband purchased a new virus scanner for $30 and downloaded it from online. Unfortunately, it will only detect "old" viruses. There is no protection for new ones. My advice is to wait until after the new year to trade attachments of any kind to protect us all. Candy Parent Tazewell County, VAGenWeb Coordinator http://www.rootsweb.com/~vatazewe Candy's Clan http://www.htonline.com/~candy candy@htonline.com -----Original Message----- From: Ann Lemaster- Applegate <annapplegate@maysvilleky.net> To: KYJOHNSO-L@rootsweb.com <KYJOHNSO-L@rootsweb.com> Date: Tuesday, December 21, 1999 5:46 PM Subject: VERY IMPORTANT > >Thank you, Candy, for the virus posting and if you can add anything to >this posting, PLEASE DO! > Folks, this is serious. There are many, many new viruses out and about and >more coming every day. These viruses can imitate a friend and seem >harmless. > >With permission, I have copied and pasted a portion of an e-mail received >from someone who by far is more educated on these viruses than I. These >will give you an idea of what to look for. >>> >The worm is in the attachment, which has a name chosen randomly from the >following list: > >baby.exe, bboy.exe, boss.exe, casper.exe, chestburst.exe, cooler1.exe, >cooler3.exe, copier.exe, cupid2.exe, farter.exe, fborfw.exe, goal.exe, >goal1.exe, g-zilla.exe, irngiant.exe, hog.exe, monica.exe, panther.exe, >panthr.exe, party.exe, pirate.exe, s.exe, saddam.exe, theobbq.exe, >video.exe. > >If the worm is run, the following dummy error message appears: > >The dinamic link library giface.dll could not be found in the specified path >[list of directory names] > >Note the misspelling of the word "dynamic". > >If the worm detects that Outlook Express is installed, it will search for >messages received and build a list of addresses. The next time Windows is >booted, the worm waits an unspecified amount of time and then attempts to >send itself to one of the addresses in its list, using the format described >above. > >>> > >W32/NewApt.worm > >W32/NewApt is an email worm discovered on Dec. 14, 1999. AVERT has given it >a >risk assessment of Medium-On Watch. >This worm arrives as an email attachment. The body of the email appears >differently depending on whether the email client reads HTML. If it does, >the >email text looks like this: > >--------------------------------------------------------------- > > >http://stuart.messagemates.com/index.html > > > >Hypercool Happy New Year 2000 funny programs and animations... > >We attached our recent animation from this site in our mail ! Check it out >!! > >*************************************************************************** * >******* >Do not click on hyperlinks such as the one above. Use extreme caution!!!! > >Ann > > >==== KYJOHNSO Mailing List ==== >Comments or suggestions pertaining to this list may be sent to: >annapplegate@maysvilleky.net >Visit the Johnson County Historical Society homepage: >http://www.rootsweb.com/~kyjchs/johnson.html > >