PLEASE FORGIVE ME FOR POSTING TO THE LISTS - BUT PLEASE READ THE BELOW MESSAGE - I WAS SENT THIS VIRUS THROUGH THE VASOUTHSIDE-ROOTSWEB LIST - IT WAS "SENT" BY SOMEONE WITH THE SUBJECT "THURMAN FAMILY" - I RAN MCAFEE ON IT AND IT SAID IT WAS OK - ******NOT SO!!!**** IF YOU ALL GET ANYTHING WITH MY E-MAIL ADDRESS ON IT INCLUDING THE ATTACHMENT ETC., IT WAS NOT SENT BY ME AND DO NOT OPEN IT. Donna Thurman Howland >From: Susan Buckley <spice3@juno.com> >To: OVERSTREET-L@rootsweb.com >Subject: Re: Recent Virus Reports >Date: Thu, 16 Dec 1999 07:50:58 -0800 > >From one of the head gurus at Rootsweb to all the >List owners: > >Tim Pierce <twp@rootsweb.com> writes: > > >Hi, folks - > > > >We've had a lot of reports tonight about a virus being >passed around on >RootsWeb lists. I have looked into > >these reports and it does NOT appear that the viruses > >have actually been sent through our lists. > > > >I've included a semi-technical explanation of what I > >have been able to find out, for those of you who are >curious. The >onlyimportant message here is that > >RootsWeb's lists are NOT the source of recent virus >reports. > > > >What seems to be happening is that the current flock of >viruses do the >following things when they infect a new >computer: > > > > * The virus sends a copy of itself to everyone in the > > computer's address book; > > > > * It forges its own return address to look like it > >was sent by someone *else* in the address book; > > > > * and it uses the Subject line from a message that > >was recently sent from that machine. > > > >So if an infected person sent mail to BUMBLEROTTER->L@rootsweb.com, the >virus might send out mail like this > >to someone else in the victim's address book: > > > > From: BUMBLEROTTER-L@rootsweb.com > > To: joe@example.com > > Subject: [BUMBLEROTTER] looking for Fred and Wilma >Bumblerotter > > > ><http://stuart.messagemates.com/index.html>http://stuart.messagemates.co >m/index.html > > > > Hypercool Happy New Year 2000 funny programs and >animations... > > We attached our recent animation from this site in > >our mail ! Check it out ! > > > >Even though the mail never was sent to RootsWeb, the >return address is >forged to make it appear as if it > >came from us. > > > >I will continue to work on figuring out if there is >anything that we >can do about this; in the meantime, >please assure any concerned >subscribers that subscribing >to a RootsWeb list is not dangerous. :-) > > > >-- > >Regards, > >Tim Pierce > >RootsWeb.com lead system admonsterator > >and Chief Hacking Officer > > > >___________________________________________________________________ >Why pay more to get Web access? >Try Juno for FREE -- then it's just $9.95/month if you act NOW! >Get your free software today: http://dl.www.juno.com/dynoget/tagj. > ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com