hi, i didn't join this list to have the list administrator issue virus warnings... if you can't stick to the subject of genealogy then i'll gladly unsubsribe. thanx dennis "Once, on this earth, on this familiar spot of ground, walked other men and women, as actual as we are today, thinking their own thoughts, swayed by their own passions, but now all are gone, one generation vanishing after another, gone as utterly as we ourselves shall shortly be gone like ghosts at cockcrow." -- G M Trevelyan in reply to: >From : Betty Lou Riley <chipmunk@bright.net> To : KYLEWIS-L@rootsweb.com Subject : [ KYLEWIS] Virus Warning From List Owner Date : Mon, 26 Nov 2001 18:47:12 -0500 As many of you have already found out, there is a new virus out there and it is spreading like a raging fire. Do not open any attachments!!! it pops up right away to open the attachment. The message area of the email is blank. It is attaching itself to everyone in the address book and sending the virus to them. Rootsweb is virus free but if your name is in address book of a person who uses a rootsweb web mail list it will attach itself to that list. Please, Please be careful opening attachments. Spare yourself the grief of infecting yourself with this nasty virus!! Upgrade your virus programs immediately. Betty Lou Riley Admin: OHAdams, KYLewis, Kirkendall, McGovney, Murr, Rideout, Ridout, Wildbirds, & Butterflies Mailing Lists CC: OHAdams, KYLewis CA: OHAdams, KYLewis, & KYGreenup ______________________________ Previous Next | Close >From : Betty Lou Riley <chipmunk@bright.net> To : KYLEWIS-L@rootsweb.com Subject : [ KYLEWIS] New Virus is loose! See Help insturctions Date : Tue, 27 Nov 2001 06:33:02 -0500 New virus is loose! Uses attachments! Do NOT Open any attachments till it cools down! Check Here!!!! >From http://www.symantec.com/avcenter/venc/data/pf/w32.badtrans.b@mm.html Symantec Security Response http://securityresponse.symantec.com W32.Badtrans.B@mm Discovered on: November 24, 2001 Last Updated on: November 24, 2001 at 12:19:48 PM PST W32.Badtrans.B@mm is a MAPI worm that emails itself out as one of several different file names. This worm also drops a backdoor trojan that logs keystrokes. Type: Worm Virus Definitions: November 24, 2001 Threat Assessment: Wild: Medium Damage: Low Distribution: High Wild: Number of infections: 50 - 999 Number of sites: 3 - 9 Geographical distribution: Medium Threat containment: Easy Removal: Easy Damage: Payload: Large scale e-mailing: Sends email from addresses found in the default MAPI program. Compromises security settings: Installs keystroke logging Trojan. Technical description: This worm arrives as an email with one of several attachment names and a combination of two appended extensions. The list of possible file names is: HUMOR DOCS S3MSONG ME_NUDE CARD SEARCHURL YOU_ARE_FAT! NEWS_DOC IMAGES PICS The first extension that is appended to the file name is one of the following: .DOC .MP3 .ZIP The second extension that is appended to the file name is one of the following: .pif .scr The resulting file name would look something like this: CARD.DOC.PIF NEWS_DOC.MP3.SCR etc. When executed, this worm copies itself as kernel32.exe in the "\windows\system" directory. It then adds the following registry value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Kernel3 2=kernel32.exe. Prevention methods: 1. Corporate email filtering systems should block all email that have attachments with the extensions .scr and .pif. 2. Users should not open any emails with an attachment that matches the names listed above. Any email that has such an attachment should be deleted. Removal instructions: 1. Run LiveUpdate to make sure that you have the most recent virus definitions. 2. Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files. For instructions on how to do this, read the document How to configure Norton AntiVirus to scan all files. 3. Run a full system scan. 4. Delete all files that are detected as W32.Badtrans.B@mm. 5. Remove the registry value listed above. Write-up by: Patrick Martin Here is the URL for a tool that can be used to removed the W32/SirCam virus: http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.removal.tool.html Here is the URL for a webpage that can be used to remove most viruses: http://securityresponse.symantec.com/ http://www.snopes.com/inboxer/virus/virus.htm At 04:10 PM 11/26/01 -0500, you wrote: Dear chipmunk@bright.net, bright.net's anti-virus software has detected that "Jim & Donna Stewart" <_jimndonna@eritter.net> has sent you a virus via email. bright.net has stopped the virus before it has reached your system. Betty Lou Riley Admin: OHAdams, KYLewis, Kirkendall, McGovney, Murr, Rideout, Ridout, Wildbirds, & Butterflies Mailing Lists CC: OHAdams, KYLewis CA: OHAdams, KYLewis, & KYGreenup _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Dear Whomever, This IS a Genealogy list and yes, most of us are cousins and we are family or we become good friends.. when Betty tells us to look out for this? She is helping us .. Evidently you do not belong on this list nor any other either, as they "ALL" tell us to look out for them .. they know about them before they hit us or we are aware. Sorry you think you are better than us .. I personally applaud the list owners for their Help to us .. Thank You for your help and making us aware, Betty. One who does appreciate you helpfulness. Regards, Derre Southworth Maybury searching RILEY-STAMPER-SMITH ----- Original Message ----- From: Dennis V Carter <dvcarter2001@hotmail.com> To: <KYLEWIS-L@rootsweb.com> Sent: Tuesday, November 27, 2001 2:49 PM Subject: [ KYLEWIS] Virus Warnings are Redundant > hi, > > i didn't join this list to have the list administrator issue virus > warnings... if you can't stick to the subject of genealogy then i'll gladly > unsubsribe. > thanx > dennis > > "Once, on this earth, on this familiar spot of ground, walked other men and > women, as actual as we are today, thinking their own thoughts, swayed by > their own passions, but now all are gone, one generation vanishing after > another, gone as utterly as we ourselves shall shortly be gone like ghosts > at cockcrow." -- G M Trevelyan > > in reply to: > > >From : > Betty Lou Riley <chipmunk@bright.net> > > To : > KYLEWIS-L@rootsweb.com > > Subject : > [ KYLEWIS] Virus Warning From List Owner > > Date : > Mon, 26 Nov 2001 18:47:12 -0500 > > As many of you have already found out, there is a new virus out there > and it > is spreading like a raging fire. > > Do not open any attachments!!! it pops up right away to open > the attachment. The message area of the email is blank. It is attaching > itself to everyone in the address book and sending the virus to them. > > Rootsweb is virus free but if your name is in address book of a person who > uses a rootsweb web mail list it will attach itself to that list. > > Please, Please be careful opening attachments. > > Spare yourself the grief of infecting yourself with this > nasty virus!! Upgrade your virus programs immediately. > > > > Betty Lou Riley > Admin: OHAdams, KYLewis, Kirkendall, McGovney, Murr, Rideout, Ridout, > Wildbirds, & Butterflies Mailing Lists > CC: OHAdams, KYLewis CA: OHAdams, KYLewis, & KYGreenup > > ______________________________ > > Previous Next | Close > > >From : > Betty Lou Riley <chipmunk@bright.net> > > To : > KYLEWIS-L@rootsweb.com > > Subject : > [ KYLEWIS] New Virus is loose! See Help insturctions > > Date : > Tue, 27 Nov 2001 06:33:02 -0500 > > New virus is loose! Uses attachments! Do NOT Open any attachments till > it cools down! > > Check Here!!!! > >From http://www.symantec.com/avcenter/venc/data/pf/w32.badtrans.b@mm.html > Symantec Security Response > http://securityresponse.symantec.com > W32.Badtrans.B@mm > Discovered on: November 24, 2001 > Last Updated on: November 24, 2001 at 12:19:48 PM PST > W32.Badtrans.B@mm is a MAPI worm that emails itself out as one of several > different file names. This worm also drops a backdoor trojan that logs > keystrokes. > Type: Worm > Virus Definitions: November 24, 2001 > Threat Assessment: > > Wild: > Medium Damage: > Low Distribution: > High > > Wild: > Number of infections: 50 - 999 > Number of sites: 3 - 9 > Geographical distribution: Medium > Threat containment: Easy > Removal: Easy > Damage: > Payload: > Large scale e-mailing: Sends email from addresses found in the default MAPI > program. > Compromises security settings: Installs keystroke logging Trojan. > Technical description: > This worm arrives as an email with one of several attachment names and a > combination of two appended extensions. > The list of possible file names is: > HUMOR > DOCS > S3MSONG > ME_NUDE > CARD > SEARCHURL > YOU_ARE_FAT! > NEWS_DOC > IMAGES > PICS > The first extension that is appended to the file name is one of the > following: > .DOC > .MP3 > .ZIP > The second extension that is appended to the file name is one of the > following: > .pif > .scr > The resulting file name would look something like this: > CARD.DOC.PIF > NEWS_DOC.MP3.SCR > etc. > When executed, this worm copies itself as kernel32.exe in the > "\windows\system" directory. It then adds the following registry value: > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Kernel3 > 2=kernel32.exe. > Prevention methods: > 1. Corporate email filtering systems should block all email that have > attachments with the extensions .scr and .pif. > 2. Users should not open any emails with an attachment that matches the > names listed above. Any email that has such an attachment should be deleted. > > > Removal instructions: > > > 1. Run LiveUpdate to make sure that you have the most recent virus > definitions. > 2. Start Norton AntiVirus (NAV), and make sure that NAV is configured to > scan all files. For instructions on how to do this, read the document How to > configure Norton AntiVirus to scan all files. > 3. Run a full system scan. > 4. Delete all files that are detected as W32.Badtrans.B@mm. > 5. Remove the registry value listed above. > > > > > Write-up by: Patrick Martin > > > Here is the URL for a tool that can be used to removed the W32/SirCam virus: > http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.removal.tool.h tml > > Here is the URL for a webpage that can be used to remove most viruses: > http://securityresponse.symantec.com/ > > http://www.snopes.com/inboxer/virus/virus.htm > > > > At 04:10 PM 11/26/01 -0500, you wrote: > Dear chipmunk@bright.net, > > bright.net's anti-virus software has detected that "Jim & Donna Stewart" > <_jimndonna@eritter.net> has sent you > a virus via email. bright.net has stopped the virus before it has reached > your system. > > > Betty Lou Riley > Admin: OHAdams, KYLewis, Kirkendall, McGovney, Murr, Rideout, Ridout, > Wildbirds, & Butterflies Mailing Lists > CC: OHAdams, KYLewis CA: OHAdams, KYLewis, & KYGreenup > > > > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp > > > ==== KYLEWIS Mailing List ==== > > Messge Board: http://boards.ancestry.com/mbexec?htx=board&r=rw&p=localities.northam.usa.st ates.kentucky.counties.lewis&o=1&maxrows=25&dir=next > >

Betty Lou Riley Admin: OHAdams, KYLewis, Kirkendall, McGovney, Murr, Rideout, Ridout, Wildbirds, & Butterflies Mailing Lists CC: OHAdams, KYLewis CA: OHAdams, KYLewis, & KYGreenup

who cares

Well I don't know about everyone else but I appreciate hearing from anyone when there's a potential problem. I don't want to get any viruses. I'd rather be safe than sorry. Thank you Betty Lou, it's nice to know some people care. Barb Weinel ----- Original Message ----- From: "Dennis V Carter" <dvcarter2001@hotmail.com> To: <KYLEWIS-L@rootsweb.com> Sent: Tuesday, November 27, 2001 3:49 PM Subject: [ KYLEWIS] Virus Warnings are Redundant > hi, > > i didn't join this list to have the list administrator issue virus > warnings... if you can't stick to the subject of genealogy then i'll gladly > unsubsribe. > thanx > dennis > > "Once, on this earth, on this familiar spot of ground, walked other men and > women, as actual as we are today, thinking their own thoughts, swayed by > their own passions, but now all are gone, one generation vanishing after > another, gone as utterly as we ourselves shall shortly be gone like ghosts > at cockcrow." -- G M Trevelyan > > in reply to: > > >From : > Betty Lou Riley <chipmunk@bright.net> > > To : > KYLEWIS-L@rootsweb.com > > Subject : > [ KYLEWIS] Virus Warning From List Owner > > Date : > Mon, 26 Nov 2001 18:47:12 -0500 > > As many of you have already found out, there is a new virus out there > and it > is spreading like a raging fire. > > Do not open any attachments!!! it pops up right away to open > the attachment. The message area of the email is blank. It is attaching > itself to everyone in the address book and sending the virus to them. > > Rootsweb is virus free but if your name is in address book of a person who > uses a rootsweb web mail list it will attach itself to that list. > > Please, Please be careful opening attachments. > > Spare yourself the grief of infecting yourself with this > nasty virus!! Upgrade your virus programs immediately. > > > > Betty Lou Riley > Admin: OHAdams, KYLewis, Kirkendall, McGovney, Murr, Rideout, Ridout, > Wildbirds, & Butterflies Mailing Lists > CC: OHAdams, KYLewis CA: OHAdams, KYLewis, & KYGreenup > > ______________________________ > > Previous Next | Close > > >From : > Betty Lou Riley <chipmunk@bright.net> > > To : > KYLEWIS-L@rootsweb.com > > Subject : > [ KYLEWIS] New Virus is loose! See Help insturctions > > Date : > Tue, 27 Nov 2001 06:33:02 -0500 > > New virus is loose! Uses attachments! Do NOT Open any attachments till > it cools down! > > Check Here!!!! > >From http://www.symantec.com/avcenter/venc/data/pf/w32.badtrans.b@mm.html > Symantec Security Response > http://securityresponse.symantec.com > W32.Badtrans.B@mm > Discovered on: November 24, 2001 > Last Updated on: November 24, 2001 at 12:19:48 PM PST > W32.Badtrans.B@mm is a MAPI worm that emails itself out as one of several > different file names. This worm also drops a backdoor trojan that logs > keystrokes. > Type: Worm > Virus Definitions: November 24, 2001 > Threat Assessment: > > Wild: > Medium Damage: > Low Distribution: > High > > Wild: > Number of infections: 50 - 999 > Number of sites: 3 - 9 > Geographical distribution: Medium > Threat containment: Easy > Removal: Easy > Damage: > Payload: > Large scale e-mailing: Sends email from addresses found in the default MAPI > program. > Compromises security settings: Installs keystroke logging Trojan. > Technical description: > This worm arrives as an email with one of several attachment names and a > combination of two appended extensions. > The list of possible file names is: > HUMOR > DOCS > S3MSONG > ME_NUDE > CARD > SEARCHURL > YOU_ARE_FAT! > NEWS_DOC > IMAGES > PICS > The first extension that is appended to the file name is one of the > following: > .DOC > .MP3 > .ZIP > The second extension that is appended to the file name is one of the > following: > .pif > .scr > The resulting file name would look something like this: > CARD.DOC.PIF > NEWS_DOC.MP3.SCR > etc. > When executed, this worm copies itself as kernel32.exe in the > "\windows\system" directory. It then adds the following registry value: > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Kernel3 > 2=kernel32.exe. > Prevention methods: > 1. Corporate email filtering systems should block all email that have > attachments with the extensions .scr and .pif. > 2. Users should not open any emails with an attachment that matches the > names listed above. Any email that has such an attachment should be deleted. > > > Removal instructions: > > > 1. Run LiveUpdate to make sure that you have the most recent virus > definitions. > 2. Start Norton AntiVirus (NAV), and make sure that NAV is configured to > scan all files. For instructions on how to do this, read the document How to > configure Norton AntiVirus to scan all files. > 3. Run a full system scan. > 4. Delete all files that are detected as W32.Badtrans.B@mm. > 5. Remove the registry value listed above. > > > > > Write-up by: Patrick Martin > > > Here is the URL for a tool that can be used to removed the W32/SirCam virus: > http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.removal.tool.h tml > > Here is the URL for a webpage that can be used to remove most viruses: > http://securityresponse.symantec.com/ > > http://www.snopes.com/inboxer/virus/virus.htm > > > > At 04:10 PM 11/26/01 -0500, you wrote: > Dear chipmunk@bright.net, > > bright.net's anti-virus software has detected that "Jim & Donna Stewart" > <_jimndonna@eritter.net> has sent you > a virus via email. bright.net has stopped the virus before it has reached > your system. > > > Betty Lou Riley > Admin: OHAdams, KYLewis, Kirkendall, McGovney, Murr, Rideout, Ridout, > Wildbirds, & Butterflies Mailing Lists > CC: OHAdams, KYLewis CA: OHAdams, KYLewis, & KYGreenup > > > > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp > > > ==== KYLEWIS Mailing List ==== > > Messge Board: http://boards.ancestry.com/mbexec?htx=board&r=rw&p=localities.northam.usa.st ates.kentucky.counties.lewis&o=1&maxrows=25&dir=next >