Hi Dorothy Thank you for your input.� It's possible the name could have been spelled numerous ways.� EDDENS was the most prominent during my research tho'.� I've got a fair amount of work to do in OR. Regards - George dgburt@pioneer.net wrote: > Could this name appear as EDDINGS or EDDING? There is a > Sarah EDDING marriage in 1855 in Benton Co., OR to Lawrence T. > Jordan. No other sign of the family. > Dorothy Burt > > On 2 Dec 2001, at 18:33, George Davis wrote: > > > I'm new to the list.� Some of my EDDENS ancestors,� all descended from > > John EDDENS of VA,� migrated to OR from MO in the late 1800's but I've > > done little research on the name there.� Is anyone else researching the > > EDDENS name in OR? > > > > George > > > > > > ==== OREGON Mailing List ==== > >� Welcome to the OREGON LIST > > To Search the OREGON-L or leave the lists use this link to the Oregon-L > > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > > > ============================== > > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > > Source for Family History Online. Go to: > > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 > > Dorothy Burt > 27321 Reese Creek Rd > Monroe, OR 97456 > > ==== OREGON Mailing List ==== > �Welcome to the OREGON LIST > To Search the OREGON-L or leave the lists use this link to the Oregon-L > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > ============================== > Search over 1 Billion names at Ancestry.com! > http://www.ancestry.com/rd/rwlist1.asp

Could this name appear as EDDINGS or EDDING? There is a Sarah EDDING marriage in 1855 in Benton Co., OR to Lawrence T. Jordan. No other sign of the family. Dorothy Burt On 2 Dec 2001, at 18:33, George Davis wrote: > I'm new to the list.  Some of my EDDENS ancestors,  all descended from > John EDDENS of VA,  migrated to OR from MO in the late 1800's but I've > done little research on the name there.  Is anyone else researching the > EDDENS name in OR? > > George > > > ==== OREGON Mailing List ==== > Welcome to the OREGON LIST > To Search the OREGON-L or leave the lists use this link to the Oregon-L > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > ============================== > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > Source for Family History Online. Go to: > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 Dorothy Burt 27321 Reese Creek Rd Monroe, OR 97456

I'm new to the list.� Some of my EDDENS ancestors,� all descended from John EDDENS of VA,� migrated to OR from MO in the late 1800's but I've done little research on the name there.� Is anyone else researching the EDDENS name in OR? George

Thanks Lee I was there last month to picture our Finks , we know who else are related to them there too. I took a picture of the sign and one view of the valley from there. Dan ----- Original Message ----- From: "Lee Gentemann" <leegent@open.org> To: <OREGON-L@rootsweb.com> Sent: Sunday, December 02, 2001 9:23 AM Subject: {not a subscriber} Benton County Cemetery Added (Re-sent) > Thanks to Linda Olsen of Philomath, the Pleasant Valley Cemetery > inscriptions have been added to Benton County USGenWeb. Included are > burials through October 22, 2001. > > This page can be found at: > http://www.rootsweb.com/~orbenton/Cemeteries/PleasantValley.html > > Linda is one of our newest members and with the help of her technical > assistant Ron Olsen, walked the cemetery and made corrections to an > earlier publication, as well as working with the Sexton to add newer > burials. > > Lee Gentemann > Benton County USGenWeb Coordinator >

The Dalles Chronicle December 2, 2001 21 Years Ago, December 2, 1980 Procedures to permit an annexation of Foley Lakes Mobile Home Park were begun by The Dalles City Council Monday night. A public hearing on the merits of the proposal will be January 19, (1981). Meanwhile the city planning and legal staff will work up the proposal. Behind the annexations request from Foley Lakes owner Wes Pullen is an effort to provide sewer service which will meet the requirements of the Oregon Department of Environmental Quality. Shoplifting arrests have hit a three year high in The Dalles and efforts of anti-shoplifting currently underway may push it even higher. Sergeant Art Labrousse of the city police said as of the end of October, 56 persons had been apprehended and accused of shoplifting, or officially first or second degree theft depending on the value of the merchandise taken. But since October there have been enough other shoplifting cases reported to push the 1980 total higher than the 69 cases reported in 1979. (Chronicle Editor note: The file for the last quarter of 1981 has turned up missing, so the year differs on segment of Looking Back.) 40 Years Ago, December 2, 1961 Allen Tom, prominent rancher in this area, is the new president of the Oregon Wheat Growers League. Tom advanced to the presidency this morning in the election held at Pendleton (Oregon) as the three day Oregon Wheat Growers League meeting neared an end. During the past year he served as first vice president. Other officers are L.E. Kaseberg, Wasco (Oregon), first vice president, and Milton Morgan, Ione (Oregon), second vice president. Another Sherman County rancher received honors in the course of the meeting - Paulen Kaseberg of Wasco who is the Conservation Man of the year for the organization. With all the state officers, including Master Roy Gill and Overseer Morton Tompkins, expected to be in attendance, the Cherry Park Grange Hall, The Dalles, will be the scene Friday of the annual district conference of the Oregon State Grange, it was announced here this morning. Albert Weigelt, 77, a native of Germany and one of Wasco County's pioneers, died early this morning at his home in The Dalles. Death followed a heart attack. 80 Years Ago, December 2, 1921 The Columbia River highway is expected to be open this afternoon for the entire distance between this city (The Dalles) and Pendleton (Oregon). Crews of men are working at clearing the road between Quinton and Hook, and expect to get cars through this afternoon, according to word received here from Arlington (Oregon). About 20 automobiles left Arlington this morning for The Dalles, expecting to get through some time tonight, it was said. Two investigation(s) of the disastrous O.W.R.& N. (railroad) wreck at Celilo (Oregon) are underway today in an effort to fix the responsibility for head on collision which cost at least nine lives and the injury of a score or more of persons. Coroner C.N. Burgett empaneled his jury today and the remains of six victioms of the disaster were viewed at the Burgett-Morgan funeral home at 1 o'clock this afternoon. 100 Years Ago, December 2, 1901 A new case of diphtheria was announced yesterday in a family named French, who live on Fourth Street west of the Mill Creek Bridge. As an offset to the quarantine was raised from the residences of Horatio Fargher and Mrs. Murch. At noon today Health Officer Van Anda assured the Chronicle that only eight houses remained under quarantine, as against about a score last week. The annual memorial service of Cascade Lodge No. 303, Benevolent and Protective Order of Elks was held in their hall in the new Vogt block yesterday afternoon. It was largely attended and the program was unusually interesting and appropriate. Written permission to reprint Looking Back-A Glimpse Through the Chronicle's Files given by The Dalles Chronicle, The Dalles,. Oregon Copied and submitted by Earline Wasser Wasco County individual's obituaries submitted to ORWASCO-L@rootsweb.com To subscribe send e-mail to ORWASCO-L-REQUEST@rootsweb.com and type "subscribe" in message area.

I am trying to trace one of ancestors Robert WILSON and his family, who moved to Medford, Oregon in the 1880s after first living at Macomb, Illinois. Unfortunately, I have not been able to find about anything about this period of Robert Wilson's life or the further progress of his family. I wonder if anyone could offer any help, perhaps from census look-ups or any other source? I have the following data about Robert Wilson: Robert Wilson was born in 10th June 1850, in Ossett, Yorkshire England. Robert was the third son of Mark Wilson and Elizabeth (Naylor) Wilson who moved with their family to the USA in 1856 and eventually settled in Emmet Twp, McDonough County, Illinois. Robert Wilson married Nancy D. Bowen (born 28th May 1856 in Illinois) on the 20th March 1878. His occupation is listed in the 1880 census as a farmer at Emmet Township, Illinois. Sometime between October 1881 and January 1884, Robert Wilson left Illinois and moved his family west to Medford, Oregon. Robert and Nancy Wilson had seven children: Maud E. Wilson born 28th February 1879 at Macomb, Illinois. She married John Day on 16 Aug 1905 and died 28th November 1939 aged 50. She is buried in Portland, Oregon. They had two boys. Grace I. Wilson born 13th March 1880 at Macomb, Illinois married Charles Schleichert. Willard Wilson born 12th October 1881 at Macomb, Illinois - buried in Medford, Oregon. Anna Wilson born 8th January 1884 at Medford, Oregon married George Eads. Jessie B. Wilson born 8th July 1886 at Medford, Oregon married Cabell Breckenridge Garnett born 24th July 1868 in Locust Dale, Madison County, Virginia. Jessie Wilson died 6th February 1964 aged 75 in Los Angeles County, California. Her husband Cabell, who died February 17th 1951 aged 82, also in Los Angeles County, California, predeceased her. Nancy B. Wilson born 30th May 1888 at Medford, Oregon married Fred Day. Nancy Wilson died on May 28th 1958 aged 69 years in Los Angeles County, California. Frank Wilson born 10th March 1890 at Medford, Oregon. Robert Wilson died 10th April 1919 in Medford, Oregon and Nancy (Bowen) Wilson died 9th May 1935 in Medford, Oregon. Any help would be gratefully received. Thanks in advance. Steve Wilson Wetherby, West Yorkshire England

Robert Wilson and Nancy (Bowen) Wilson and their son Willard Wilson are buried in the Eastwood IOOF Cemetery in Medford. I will be happy to look in census transcriptions and other local resources to see if there is more available about them. Anne Billeter billeter@entwood.com At 09:11 PM 11/30/01 +0000, you wrote: >I am trying to trace one of ancestors Robert WILSON and his family, who >moved to Medford, Oregon in the 1880s after first living at Macomb, >Illinois. Unfortunately, I have not been able to find about anything >about this period of Robert Wilson's life or the further progress of his >family. > >I wonder if anyone could offer any help, perhaps from census look-ups or >any other source? > >I have the following data about Robert Wilson: > >Robert Wilson was born in 10th June 1850, in Ossett, Yorkshire England. >Robert was the third son of Mark Wilson and Elizabeth (Naylor) Wilson >who moved with their family to the USA in 1856 and eventually settled in >Emmet Twp, McDonough County, Illinois. > >Robert Wilson married Nancy D. Bowen (born 28th May 1856 in Illinois) on >the 20th March 1878. His occupation is listed in the 1880 census as a >farmer at Emmet Township, Illinois. > >Sometime between October 1881 and January 1884, Robert Wilson left >Illinois and moved his family west to Medford, Oregon. > >Robert and Nancy Wilson had seven children: > >Maud E. Wilson born 28th February 1879 at Macomb, Illinois. She married >John Day on 16 Aug 1905 and died 28th November 1939 aged 50. She is >buried in Portland, Oregon. They had two boys. > >Grace I. Wilson born 13th March 1880 at Macomb, Illinois married Charles >Schleichert. > >Willard Wilson born 12th October 1881 at Macomb, Illinois - buried in >Medford, Oregon. > >Anna Wilson born 8th January 1884 at Medford, Oregon married George >Eads. > >Jessie B. Wilson born 8th July 1886 at Medford, Oregon married Cabell >Breckenridge Garnett born 24th July 1868 in Locust Dale, Madison County, >Virginia. Jessie Wilson died 6th February 1964 aged 75 in Los Angeles >County, California. Her husband Cabell, who died February 17th 1951 aged >82, also in Los Angeles County, California, predeceased her. > >Nancy B. Wilson born 30th May 1888 at Medford, Oregon married Fred Day. >Nancy Wilson died on May 28th 1958 aged 69 years in Los Angeles County, >California. > >Frank Wilson born 10th March 1890 at Medford, Oregon. > >Robert Wilson died 10th April 1919 in Medford, Oregon and Nancy (Bowen) >Wilson died 9th May 1935 in Medford, Oregon. > >Any help would be gratefully received. > >Thanks in advance. > >Steve Wilson >Wetherby, West Yorkshire >England > > >==== OREGON Mailing List ==== > Welcome to the OREGON LIST >To Search the OREGON-L or leave the lists use this link to the Oregon-L >web site http://lists.rootsweb.com/index/usa/OR/misc.html > >============================== >Search over 1 Billion names at Ancestry.com! >http://www.ancestry.com/rd/rwlist1.asp > > >

On the subject of virus's and genealogy. This is a good reminder that we should all back up our files onto a floppy or CD disk often so all the hard work is not lost! Just my two cents worth. -----Original Message----- From: OREGON-L-request@rootsweb.com [mailto:OREGON-L-request@rootsweb.com]On Behalf Of Carol Stewart Sent: Tuesday, December 04, 2001 6:02 PM To: OREGON-L@rootsweb.com Subject: Re: [OREGON] List Dad note a new VIRUS ALERT To Dan and Others, I agree with the warning. To be for warned, is to be for armed!! Carol Stewart California ----- Original Message ----- From: W David Samuelsen <dsam@sampubco.com> To: <OREGON-L@rootsweb.com> Sent: Tuesday, December 04, 2001 5:14 PM Subject: Re: [OREGON] List Dad note a new VIRUS ALERT > Robin, > > Obviously you are not as informed as Dan and I are. > > The new mutated viruses of Bad Trans are the worst. Every time > a subscriber is caught off guard, GUESS WHO get the bounces? > > Dan and I do. Dan is admin of this list and a few others and I am > admin of other lists, especially European lists. > > The virus responds to xxx-admin@rootsweb.com - EVERY one of such > messages are automatically bounced to the listowners/Admins. > > The Listowners have at their own discretion decide to take harsh > action or not. It's clear Dan got too many of those virus-laden > messages and he has to take action, including issuing direct orders > to his subscribers. > > Ditto for me when I get from my lists. > > W. David Samuelsen > > Robin Helman wrote: > > > > ALL the genealogy lists have become virus warning lists! Can we please get > > them back to genealogy?????? Virus warnings were very very seldom seen on > > the genealogy lists, until lately, and now that is about all the traffic is. > > > > Enough already! > > > > Robin > > > > At 12:28 PM 12/4/01 -0800, Dan M wrote: > > >While we are still dealing with the new virus Badtrans , we have another new > > >on to deal with now. > > >============ > > >VIRUS ALERT > > > > > >There is a new and dangerous virus in circulation with the key details as > > >follows: > > > > > >The essential details are as follows: > > > > > >· Virus name: Goner > > >· Official name: W32/Goner.A-mm > > >· Number of copies seen so far: over 16,000 > > >· Time & Date first Captured: 4 Dec 2001 10:49 GMT > > >· Origin of first intercepted copy: United States > > >· Number of countries seen active: 17 > > >· Top three most active countries: US, UK, France > > > > > >No MessageLabs customer has been affected by this virus. > > > > > >Description: > > > > > >The virus creates emails with the following characteristics. > > > > > >Subject: Hi > > > > > >Text: > > > How are you ? > > > When I saw this screen saver, I immediately thought about you > > > I am in a harry, I promise you will love it! > > > > > >Attachment: gone.scr > > > > > >Size: 38912 > > > > > >Detection: > > > > > >The virus was detected pro-actively by Skeptic, MessageLabs proprietary > > >heuristics technology for detecting new outbreaks. Traditional anti-virus > > >software will need to download a new patch before it can identify and stop > > >this virus. > > > > > >Payload: > > > > > >The virus attempts to disable any anti-virus software running locally. > > >Further analysis is on-going. > > > > > >Distribution Rate: > > > > > >This is one of the fastest spreading viruses MessageLabs has ever seen and > > >we are currently stopping over 100 copies every minute. > > > > > >World Spread > > > > > >Earlier figures show that as at 16:00 GMT, the county-by-country information > > >for those samples where country information was available was as follows: > > > > > >Time First Seen Country Copies > > >--------------- ------- ------ > > >2001-12-04 10:49 US 43 > > >2001-12-04 10:58 GB 49 > > >2001-12-04 11:55 FR 10 > > >2001-12-04 13:02 DE 1 > > >2001-12-04 13:30 NL 7 > > >2001-12-04 13:34 CH 33 > > >2001-12-04 14:08 AR 2 > > > > > >Please visit www.messagelabs.com for further information regarding this > > >virus. > > > > > >Regards > > > > > >MessageLabs > > > > > > > > >MessageLabs is a Managed Service Provider (MSP) specialising in > > >Internet-level e-mail content filtering. Our revolutionary SkyScan portfolio > > >of services enables customers to be protected from threats such as viruses > > >and unsolicited mail, before they come anywhere near the network boundaries. > > > > > > > > > > > > > > >==== OREGON Mailing List ==== > > > Welcome to the OREGON LIST > > >To Search the OREGON-L or leave the lists use this link to the Oregon-L > > >web site http://lists.rootsweb.com/index/usa/OR/misc.html > > > > > >============================== > > >Search over 1 Billion names at Ancestry.com! > > >http://www.ancestry.com/rd/rwlist1.asp > > > > > > > > > > > > > ==== OREGON Mailing List ==== > > Welcome to the OREGON LIST > > To Search the OREGON-L or leave the lists use this link to the Oregon-L > > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > > > ============================== > > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > > Source for Family History Online. Go to: > > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 > > > ==== OREGON Mailing List ==== > Welcome to the OREGON LIST > To Search the OREGON-L or leave the lists use this link to the Oregon-L > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > ============================== > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > Source for Family History Online. Go to: > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 > ==== OREGON Mailing List ==== Welcome to the OREGON LIST To Search the OREGON-L or leave the lists use this link to the Oregon-L web site http://lists.rootsweb.com/index/usa/OR/misc.html ============================== Search over 1 Billion names at Ancestry.com! http://www.ancestry.com/rd/rwlist1.asp

Well written Rose! Now you can understand why I use OS/2 Warp 4 as my operating system. With all these viruses written for Mr. Gates code, very few are written to OS/2 code. Morley On Wed, 28 Nov 2001 00:32:56 -0800, Rose Terry wrote: >To: Fellow List Members! >From: BILYEU/WORKMAN/OREGON TRAIL Mail Lists MOM > > IMPORTANT! > >I MUST pass along this message with a full description on the new virus >W32.BadTrans.B@MM which showed up for me when I received 8 emails in the >past 2 DAYS from this example email address: >"John Doe" <_johndoe@wherever.com>

The marriage date is correct and took place in Benton Co., OR. Alpheus Howard son of Pontius Howard & Sarah Grimm. Do you know who Alice N. Landerking's parents were? Dorothy Burt On 29 Nov 2001, at 15:11, Jacroing67@aol.com wrote: > Good afternoon, > > Wondering if there is anyone out there who knows of a record of a marriage > between Alpheus HOWARD and Alike LANDERKING, the marriage took place > November 22, 1883......I would imagine in Lane or Benton county. This is an > early date but perhaps there is some record somewhere. > > Jacqueline > jacroing67@aol.com > > > ==== OREGON Mailing List ==== > Welcome to the OREGON LIST > To Search the OREGON-L or leave the lists use this link to the Oregon-L > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > ============================== > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > Source for Family History Online. Go to: > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 Dorothy Burt 27321 Reese Creek Rd Monroe, OR 97456

Mary: Thank you so much for responding. However, the Elizabeth Lapp/Enoch Wilson Casner line aren't connected to my particular Casner line. I have come across Enoch Wilson Casner before and did sufficient research to know he is not of my line. I have had a fair amount of responses (I posted to 8 different lists) and some of them look very promosing. Sometimes one just has to jump in with both feet and try something different in filling in the gaps. Again, thank you so much for response. Liz Freeman In OK! > > I have CASNER connections. Elizabeth LAPP married Enoch Wilson CASNER in > 1861, PA. > > If interested I could forward your message to a cousin in TN. > > best, > Mary Ystad CURRAN > Researching: ABBOTT, LAPP, LANDON, CASNER, HARNETT, DEWOLF, CIPP(?), > MITCHELL in PA and Iowa. > ----- Original Message ----- > From: "Elizabeth Freeman" <eeffree@flash.net> > To: <OREGON-L@rootsweb.com> > Sent: Wednesday, November 28, 2001 7:52 PM > Subject: [OREGON] CASNER - CARSNER SURNAME > > > > Hello List: > > > > Are there any Casner-Carsner researchers/descendants subscribed to this > list. If so, would like to hear from you. My Casner-Carsner brothers & one > sister were (Henry, Moses, Riley, John, Andrew Jackson, William, Daniel, > Frank, Benjamin, Ebenezer, Jonas, Nancy Jane, James, David). > > > > An amazing bunch of people. > > > > Liz Freeman In OK! > > > > > > ==== OREGON Mailing List ==== > > Welcome to the OREGON LIST > > To Search the OREGON-L or leave the lists use this link to the Oregon-L > > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > > > ============================== > > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > > Source for Family History Online. Go to: > > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 > > > > > > > > > ==== OREGON Mailing List ==== > Welcome to the OREGON LIST > To Search the OREGON-L or leave the lists use this link to the Oregon-L > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > ============================== > Search over 1 Billion names at Ancestry.com! > http://www.ancestry.com/rd/rwlist1.asp >

Good afternoon, Wondering if there is anyone out there who knows of a record of a marriage between Alpheus HOWARD and Alike LANDERKING, the marriage took place November 22, 1883......I would imagine in Lane or Benton county. This is an early date but perhaps there is some record somewhere. Jacqueline jacroing67@aol.com

Surnames: Staver, Gannon, Hohenlohe Jeffrey Allen Staver, 32, a resident of The Dalles, died on Tuesday, November 20, 2001. Jeffrey was born October 11, 1969 at the U.S. Naval Hospital on Guam, the first of three children to Robert and Janice (Gannon) Staver. Jeffrey lived his first year on Guam and was delighted with the variety of sights and sounds of life on a tropical island. After his family moved to The Dalles in 1974, Jeffrey Staver attended St. Mary's Academy and graduated from The Dalles High School in 1988. As a child, Jeffrey spent hours drawing cars and spaceships and his natural talent as an artist continued to develop in college. He studied architecture at the University of Oregon for four years before transferring to Southern Oregon University in Ashland, where he earned a BFA in Scenic Design with honors in the department of Theatre Arts in 1999. At SOU, Jeffrey worked as technical director and scenic designer for numerous productions including Born Yesterday, Picasso at the Lapin Agile, Cementville, Voice of the Prarie, Goodnight Desdemona, Goodmorning Juliet, and Night of the Iguana. Truly an artisan, Jeffrey dedicated himself to crafting the perfect sense of ambiance and character for each of his designs. He often drove many miles to find a piece of period furniture that lent itself to his vision. Jeffrey spent long hours working on every aspect of his sets and inevitably could be found working alongside his crew in their construction. His outstanding talent was recognized through several department scholarships as well as the 1999 Dorothy Stolp Award for exceptional achievement in Theatre Arts. Jeffrey was inspired by the genius of Shakespeare. A volume of his complete works traveled with him everywhere. He interned at the Oregon Shakespeare Festival in Ashland in the Spring of 1999 and worked for the Festival during the 1999 season. He was selected as the Festival's technical director and assistant designer for the OSF Exhibit Center during the 2000 Season. After completing one year of the MFA program in Scenic Design at the University of Washington, Jeffrey was on leave while designing sets for several productions in Portland. Theatre was only one of Jeffrey's rich and varied interests. He was an avid snowboarder, enjoyed mountaineering, and ran several times in the Hood to Coast race. He had a vast appreciation and knowledge of music from Beethoven to Holst and Bob Dylan to Primus. He loved movies and had an incredible memory for dialogue. Jeffrey could quote entire scenes from dozens of mivies and imitate anyone from Jimmy Stewart to Fat Albert to Peter Sellers. Jeffrey put his friends and family first, always. He was equally happy working outside with his grandfather, building a bonfire with his friends, or enjoying a cup of tea with his mother. Those who knew and loved Jeff know how lucky they are to have shared in his life. He will be so deeply missed. Survivors include his parents: Robert and Janice Staver, The Dalles; a sister: Jennifer (Staver) Hohenlohe and her husband Paul, Corvallis; a brother: Jonathan Staver, Seattle; his grandparents: Ruth and Cecil Staver, Fort Collins, Colorado; numerous aunts, uncles, and cousins and many faithful friends. A memorial service to honor Jeffrey's life will be held on Saturday, December 1 at 2 p.m. in the Civic Auditorium Ballroom (The Dalles) with a potluck meal to follow. Memorial contributions may be made in memory of Jeffrey Staver, SOU Foundation (in support of students in scenic design), 1250 Siskyou Blvd., Ashland, Oregon 97520. Arrangements in care of Spencer, Libby and Powell Funeral Home. The Dalles Chronicle November 27, 2001 Written permission to reprint obituary given by The Dalles Chronicle, The Dalles, Oregon. Copied and submitted by Earline Wasser Wasco county individual's obituaries submitted to ORWASCO-L@rootsweb.com To subscribe: e-mail ORWASCO-L-REQUEST@rootsweb.com and type, "Subscribe" in message area.

Hi I have CASNER connections. Elizabeth LAPP married Enoch Wilson CASNER in 1861, PA. If interested I could forward your message to a cousin in TN. best, Mary Ystad CURRAN Researching: ABBOTT, LAPP, LANDON, CASNER, HARNETT, DEWOLF, CIPP(?), MITCHELL in PA and Iowa. ----- Original Message ----- From: "Elizabeth Freeman" <eeffree@flash.net> To: <OREGON-L@rootsweb.com> Sent: Wednesday, November 28, 2001 7:52 PM Subject: [OREGON] CASNER - CARSNER SURNAME > Hello List: > > Are there any Casner-Carsner researchers/descendants subscribed to this list. If so, would like to hear from you. My Casner-Carsner brothers & one sister were (Henry, Moses, Riley, John, Andrew Jackson, William, Daniel, Frank, Benjamin, Ebenezer, Jonas, Nancy Jane, James, David). > > An amazing bunch of people. > > Liz Freeman In OK! > > > ==== OREGON Mailing List ==== > Welcome to the OREGON LIST > To Search the OREGON-L or leave the lists use this link to the Oregon-L > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > ============================== > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > Source for Family History Online. Go to: > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 > > >

This new VIRUS is catching a lot of people Some do not even know they have it This is a sneaker virus ; it sneaks up on you . Best thing to do is 1 if you do not have an anti virus program Get one ASAP! = see my website , and go to the Virus link. Look for AVG. - free AV, this is a good one , it is the one I use. You can also use HOUSECALL to check your system. Many are saying the new Norton is catching it 2 Dont tell the LIST about every address you see with it = just tell me wb@wvi.com We can keep the lists on track this way ! Have questions ask me in private On the bottom of my Virus Webb site there is a list you can join for help, or too be help. We can use it there <G> I help with OE and Windows 95 only , need helpers for 98-ME-2000-XP AOL , etc: this is an help every one type list, and all programs are also welcome , we also discuss digital cameras and send pictures and do OE filters and HTML help. Hope this fined you all and helps you to know that this is not over yet. <<<<Biggest way to help is keep it off the lists >>>>> run Antivirus prgs and update now if you have not. Set your Bios AV to on and any other AV and security settings to high for a while. Dan = list admin Genealogy Community http://www.wvi.com/~wb/ By working together, with everyone contributing on topic we will all learn together Teach in Peace , Learn with respect.

Hi Linda This virus is not really using attachments. Lots of them do not use attachments, they are automatic as you read the message Other types of Virus do not use mail at all so I urge people to be more prepared for virus's there are just too many to evenmention a few are Macro,Bios,Boot sector, e-mail, attachments, spiders , Trojans , website etc: You can log on the net and not do any thing, and without AV and ZA you can get a virus . Some help on my site with links to places for help. Dan = list admin Genealogy Community http://www.wvi.com/~wb/ By working together, with everyone contributing on topic we will all learn together Teach in Peace , Learn with respect. ----- Original Message ----- From: Linda L Nichols <famtree51@yahoo.com> To: <OREGON-L@rootsweb.com> Sent: Wednesday, November 28, 2001 6:22 PM Subject: Re: [OREGON] VIRUS Alert from ListMom - PLEASE READ!!! > I have read a lot of information on virus descriptions. Below is a > completely confusing bunch of I don't know what. > If you can't tell a person simply how to recognize the virus. Don't send a > description at all. > > Three lines of the message below is all that is needed. > > Update your virus software > > Watchourt for any attachments that you weren't expecting! > > And Outlook User read special instructions. <<<snipped>>>

Hello List: Are there any Casner-Carsner researchers/descendants subscribed to this list. If so, would like to hear from you. My Casner-Carsner brothers & one sister were (Henry, Moses, Riley, John, Andrew Jackson, William, Daniel, Frank, Benjamin, Ebenezer, Jonas, Nancy Jane, James, David). An amazing bunch of people. Liz Freeman In OK!

I have read a lot of information on virus descriptions. Below is a completely confusing bunch of I don't know what. If you can't tell a person simply how to recognize the virus. Don't send a description at all. Three lines of the message below is all that is needed. Update your virus software Watchourt for any attachments that you weren't expecting! And Outlook User read special instructions. ----- Original Message ----- From: "Rose Terry" <RMTerry@prodigy.net> To: <OREGON-L@rootsweb.com> Sent: Wednesday, November 28, 2001 12:32 AM Subject: [OREGON] VIRUS Alert from ListMom - PLEASE READ!!! > To: Fellow List Members! > From: BILYEU/WORKMAN/OREGON TRAIL Mail Lists MOM > > IMPORTANT! > > I MUST pass along this message with a full description on the new virus > W32.BadTrans.B@MM which showed up for me when I received 8 emails in the > past 2 DAYS from this example email address: > "John Doe" <_johndoe@wherever.com> > > The underscore tipped me off! Some of the people I received the virus > from are SUBSRIBERS on our BILYEU/WORKMAN/OREGON TRAIL Mail Lists! > > I received a good explaination below from a ListOwner on the > [NJ-SOM-RARITAN] Mail List so wanted to pass it along to my lists. > > PLEASE READ! > This is NO joke... it's a BAD one, and it's running rapid TODAY! > > Rose Terry @>,--'--- > BILYEU/WORKMAN/OREGON TRAIL Mail Lists MOM > \\\|/// > \\ ~ ~ // Give your children these two things - One is roots, > ( @ @ ) the other, wings. > -oOOo-(_)-oOOo- Rose CAUDLE TERRY, Washington state @>,--'--- > BILYEU, WORKMAN & OREGON TRAIL Listmom (genealogical) > Proud RootsWeb Sponsor > RMTerry@prodigy.net http://www.genealogy.bilyeu.com/ > > > --------------------------------------------------------------------- > Hi everyone, > > You know the saying, "Forewarned is forearmed?" Well, here's your > opportunity to "get smart" with regard to this insidious and dangerous > virus that's going through all of us right now. I've been doing some > heavy research for the past two days in addition to communicating with a > lot of you. Hopefully, this message will clear up a lot of the > confusion that's been going around. It's also probably going to be a > "longie," so you might want to grab your coffee cups, tea glasses, or > soda cans and sit back to have a rather extensive read. I won't do > another update unless this virus mutates again and does something > drastically weird. > > I'm sure everyone knows by know that the current virus we're all dealing > with is a SECOND strain to the original Bad Trans worm we had to weather > through. If you'll remember, the first Bad Trans warned us by way of > double extensions on an attachment plus the giveaway instruction, "Take > a look to the attachment." Not completely so with this second strain! > > This insidious little mutant has so many people confused that they're > unwittingly opening messages and getting infected. Rather than go into > it all again, please read my warning message of the night before. From > there I'll update here... > > This section is a composite of information found at > <http://www.symantec.com>, <http://www.mcafee.com>, and > <http://www.viruslist.com>. After this section I'll pass along some > comments from the field (us)... > > The W32.BadTrans.B@MM is a worm that spreads under Win32 systems. The > virus sends email messages with infected files attached, as well as > installs a spying Trojan component to steal information from infected > systems. The worm itself is a Win32 executable file (PE EXE file). > Unopened, it's about 29-30Kb in size, but decompressed the worm file > length becomes about 60Kb in size. > > The worm consists of two main components, the Worm itself and a Trojan. > The "Worm" component sends infected messages, and the "Trojan" component > sends out information (user's info, remote access service data, cached > passwords, keyboard log) from infected computers to a specified e-mail > address. It also keeps a keystroke-log program body in its code, and > installs it into the system while infecting a new machine. > > INFECTING THE SYSTEM > > When a user clicks on an attached file and activates the code, the worm > gains access to the computer. First of all, it installs its components > to the system and registers in the system registry. > > Once running, the Trojan attempts to mail the victim's IP address to the > author. Once this information is obtained, the author can connect to the > infected system via the Internet and steal personal information such as > user names, and passwords. In addition, the Trojan also contains a > keystroke-log program which is capable of capturing other vital > information such as credit card and bank account numbers and passwords. > > The worm also drops an additional keyboard hooker (Win32 DLL file) to > the system, and then uses this to spy on text entered by a keyboard. > > If programmed by the hacker to do so, the worm may delete the original, > infected file once installation is complete. > > SPREADING > > McAfee reports, "If the attachment is opened, the worm displays a > message box entitled, "Install error" which reads, "File data corrupt: > probably due to a bad data transmission or bad disk access." But this > isn't happening to me, or a lot of other people (at least not that I've > seen, anyway). What IS happening follows: > > When a user becomes infected, the next time s/he reboots the computer, > the virus goes through the user's email program and looks for unread > messages in all the mailboxes. To send infected messages, the worm uses > a direct connection to an SMTP server. A victim's email address is > obtained in two different ways: > > 1. through your address book > 2. by the worm reading all your e-mail in your inbox, and obtains > e-mail addresses from here. > > Next, the worm generates replies and sends infected messages. The > message body contains HTML format, and uses a system breach to spawn an > infected attachment on vulnerable machines. > > The worm uses the infected computer owner's email address as the sender, > BUT it adds "_" (underscore) before the real address. The subject line > may OR MAY NOT have a subject line of nothing but "RE:" (nothing else). > For most of us, the body of the email is completely blank. There are no > attachments, so there is nothing to click. That's because the virus is > embedded in the body, with code that hides it. The recipient receives > what appears to be a totally blank message. It's actually 29-30K long. > > Are you a list manager who's receiving reports that > <_aperson@thisisp.com> has been sending out infected messages to your > membership? Let's see if I can explain this one for you ... > > A SCENARIO TO EXPLAIN MOST OF IT > > You're a listowner of the ABC-l list. In your membership is Ima Doe. > She uses Microsoft Outlook and has a HUGE address book filled with peers > doing genealogy from all the lists she belongs to. In real life, Ima > has a daughter, Sheeza. :) Sheeza isn't part of any list, nor does she > do genealogy. However, Sheeza's computer is infected. Her infected > machine emails Mom (Ima), and Mom seeing a message from her beloved > daughter Sheeza, immediately opens the message! That's all she wrote! > Ima's computer is now infected. You, the listowner of the abc-l list, > and anyone else in Ima's address book, is now vulnerable to receiving > the infection. List members start reporting that Sheeza Doe > <_sheeza@isp.com> is sending out virus messages! Being a terrific list > manager (and you are, aren't you?) you head for your utilities page to > unsub this poor woman till she gets her machine cleaned up, but alas!... > there is NO sheeza in the membership, nor is there anyone from isp! The > message everyone received said it's from Sheeza Doe <_sheeza@isp.com> > simply because Sheeza was in Ima's computer! Get that??? <g> (I've > been working at this for a while folks, and am feeling a little uhm... > "creative" here! If the Ima's and Sheeza's get you all fouled up, > change the Ima to Jane and the Sheeza to son, John.) > > Symantec reports: If SMTP (user) information can be found on the current > computer, then it will be used for the From: field. Otherwise, the From: > field will be one of: > > "Mary L. Adams" <mary@c-com.net> > "Monika Prado" <monika@telia.com> <--- I've had this one several times > "Support" <support@cyberramp.net> > "Admin" <admin@gte.net> > "Administrator" <administrator@border.net> > "JESSICA BENAVIDES" <jessica@aol.com> > "Joanna" <joanna@mail.utexas.edu> > "Mon S" <spiderroll@hotmail.com> > "Linda" <lgonzal@hotmail.com> > "Andy" <andy@hweb-media.com> > "Kelly Andersen" <Gravity49@aol.com> > "Tina" <tina0828@yahoo.com> > "Rita Tulliani" <powerpuff@videotron.ca> > "JUDY" <JUJUB271@AOL.COM> > "Anna" <aizzo@home.com> > > However, we're all receiving messages from a host of other names, > including those we don't know (like <_sheeza@isp.com>?). > > >From a message in the field: "I just discovered a problem when searching > for FROM: addresses that start with <"_">. There is a problem with > people who have their email program set to show both their name and > email address in the FROM: header. If such a person is infected, mail > from him/her will show, in the header, something like the following: > > "John Doe" <_johndoe@wherever.com> > > "The FROM: element in the header you see before you open the email will > show only "John Doe". That's a problem. Either set up a filter to > divert infected emails to a separate mailbox, or make sure your system > is COMPLETELY protected before you open or preview any more emails.)" > To notify the person who has the infected machine, simply remove the > leading '_' from their email address. > > WHAT CAN YOU DO? > > 1.) Insure that your antivirus software has been updated since November > 25, 2001. Anything before that will not give you the protection you > need from this strain of BadTrans. Because of the mutations this strain > appears to be doing, most people are updating DAILY now. > > 2.) Keep your antivirus program running at all times. You just never > know when you'll be the next "recipient." > > 3.) Stay calm. Realize and remember that N0 virus is currently capable > of passing through a RootsWeb list. Rootsweb's filters are set to very > high. However, BadTrans.B makes it *APPEAR* that this is happening, and > uses list messages as a source for new targets. Unsubscribing from the > list will do you no good if your email address is already in someone > else's computer and that machine becomes infected. > > MICROSOFT OUTLOOK USERS BE SURE TO READ THIS! > > Particularly vulnerable to the BadTrans.B virus are those users of > Outlook (not Outlook Express). It's imperative that Outlook users NOT > open suspicious emails, or even preview them. Outlook users will infect > their computers simply by opening or previewing infected email. Since > these infected messages have no attachments to click on in order to > activate the virus, just opening the message activates the virus through > HTML coding embedded in the post. Again, the message size is 29-30K, > but what you see is a blank message. At the point of seeing the blank > message, the computer has been infected. > > Outlook users are advised to view the headers. If a header reports a > sender's address as similar to <_somebody@someisp.com>, DO NOT OPEN IT! > As stated above, opening or even previewing an infected message through > Outlook will activate the virus and cause your system to become > infected. > > Available since May 16, 2001 is a patch for Outlook versions 5.01 and > 5.5 that should be downloaded and installed immediately. MSIE 6.0 > appears not to be affected because the patches for previous versions > have been incorporated into it. You can check to see which patches your > system needs by going to > <http://windowsupdate.microsoft.com/>. > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > WINDOWS ME USERS READ THIS! > > Windows ME utilizes a backup utility that backs up selected files > automatically to the C:\_Restore folder. This means that an infected > file could be stored there as a backup file, and VirusScan will be > unable to > delete these files. I have the instructions on how to remove the > infected files from the C:\_Restore folder if you need/want them. > > IDEAS AND COMMENTS FROM THE FIELD (US): > > 1. Are you concerned about even receiving infected messages? Here's an > idea that _might_ work: > Set up a special folder specifically for "Infected Mail." > Then, use your email program's filter to watch and transfer all messages > with the "_" in the header to that "Infected Mail" folder. Make sure > this is the first of your filters. > > 2. Are you emailing people telling them their computer is infected and > that person writes back that it's not? > This is because of the virus sending out the infected messages > without the PC owner's knowledge. The person's machine is "definitely > infected, whatever they may say to the contrary. Keep in mind that the > virus is only contained in the messages that their computer is sending > without their knowledge - not the ones they are sending you > legitimately. That is why you are receiving some virus infected > messages and some virus free. Unless their virus definitions are > up-to-date they could run a virus scan & find nothing. Norton only > updated their definitions to include the latest Badtrans virus this > weekend." It's important that you impress on these owners that their > computer IS indeed, infected and they need to take care of it. > > 3. "In your address book ADD NEW Contact..... !0000 exactly like this. > It puts this address first in your book and STOPS the virus from sending > to your list..." > This is a hoax, I'm afraid. It doesn't work. You'll find > information about the "!0000" hoax at > <http://antivirus.about.com/library/weekly/aa082801b.htm>. > > 4. Have you heard of MailWasher <http://www.mailwasher.net>? Though I > haven't tried it, here's a user's comment regarding that FREE program: > "I can view, identify and delete the viruses while they are > still on the ISP server. They never get to my computer." > Hmmm... perhaps it's worth checking out? > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > You've done it! You've made it to the end! > > Once again let's keep this off the list. If you have any questions > you're welcome to email me <ladyaudris@earthlink.net>. > > I wish you a TERRIFIC Tuesday! :) Stay vigilant; stay alert ... keep > your computer safe! > > -------------------------------------------------------------------- > > For even more info see; > > You can read about this virus and how to remove it from your system on > the Norton Symantec site ... > http://www.symantec.com/avcenter/ > http://www.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html > > Also for more info; > http://www.antivirus.com/vinfo/ > > ---------------------------------------------------------------------- > > > ==== OREGON Mailing List ==== > Welcome to the OREGON LIST > To Search the OREGON-L or leave the lists use this link to the Oregon-L > web site http://lists.rootsweb.com/index/usa/OR/misc.html > > ============================== > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > Source for Family History Online. Go to: > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237

List I am the List DAD here <G> Rule 1 = no vitus posts to this list When I see my members pop up on my system I will deal with this off list There is a virus help web page on my website for anyone who wants free virus control There is a help list on the bottom of that website for any one who wants to join my Computer help list that I use to help my members of all my lists Oregon-L = Orklamat = Shortridge = Applgate = Crockett = Matney = Mattingly = Mc Culley = Rogers = Rodgers = Roger = Cherokee-L = CherokeeGene-L = Webb-L = US Gen Web Co ord Kla Co. and a few other lists 22 on Yahoo and 99 message borards Thanks Dan = list admin Genealogy Community http://www.wvi.com/~wb/ By working together, with everyone contributing on topic we will all learn together Teach in Peace , Learn with respect.

Thanks Rose. I have got 2 of them in the past couple of days, but I am not on the mentioned lists but am on this one, as well as many other lists concerning genealogy, both by state and surname. So far my Nortons has been catching them coming in and quarantined them, and I deleted them off my system. This is a tricky virus, as everytime you read an email above it, it previews the email below it automatically. I am using Microsoft Office's Outlook, so maybe will switch to Outlook Express for awhile as this is really banging in here alot lately and I have heard from other researchers battling the same thing. Thanks again for this info and I will pass it along to others I know who are having the same problem. Isn't it a shame that someone so darn smart as to be able to do this, has nothing better in their life but to destroy others property, when they could be making a bundle doing constructive work. Hopefully the new legislation, making this kind of thing a terrorist act, will nail some of these idiots. Sylvia See Claresholm, Alberta Canada sylviac@telusplanet.net -----Original Message----- From: Rose Terry [mailto:RMTerry@prodigy.net] Sent: Wednesday, November 28, 2001 1:33 AM To: OREGON-L@rootsweb.com Subject: [OREGON] VIRUS Alert from ListMom - PLEASE READ!!! To: Fellow List Members! From: BILYEU/WORKMAN/OREGON TRAIL Mail Lists MOM IMPORTANT! I MUST pass along this message with a full description on the new virus W32.BadTrans.B@MM which showed up for me when I received 8 emails in the past 2 DAYS from this example email address: "John Doe" <_johndoe@wherever.com> The underscore tipped me off! Some of the people I received the virus from are SUBSRIBERS on our BILYEU/WORKMAN/OREGON TRAIL Mail Lists! I received a good explaination below from a ListOwner on the [NJ-SOM-RARITAN] Mail List so wanted to pass it along to my lists. PLEASE READ! This is NO joke... it's a BAD one, and it's running rapid TODAY! Rose Terry @>,--'--- BILYEU/WORKMAN/OREGON TRAIL Mail Lists MOM \\\|/// \\ ~ ~ // Give your children these two things - One is roots, ( @ @ ) the other, wings. -oOOo-(_)-oOOo- Rose CAUDLE TERRY, Washington state @>,--'--- BILYEU, WORKMAN & OREGON TRAIL Listmom (genealogical) Proud RootsWeb Sponsor RMTerry@prodigy.net http://www.genealogy.bilyeu.com/ --------------------------------------------------------------------- Hi everyone, You know the saying, "Forewarned is forearmed?" Well, here's your opportunity to "get smart" with regard to this insidious and dangerous virus that's going through all of us right now. I've been doing some heavy research for the past two days in addition to communicating with a lot of you. Hopefully, this message will clear up a lot of the confusion that's been going around. It's also probably going to be a "longie," so you might want to grab your coffee cups, tea glasses, or soda cans and sit back to have a rather extensive read. I won't do another update unless this virus mutates again and does something drastically weird. I'm sure everyone knows by know that the current virus we're all dealing with is a SECOND strain to the original Bad Trans worm we had to weather through. If you'll remember, the first Bad Trans warned us by way of double extensions on an attachment plus the giveaway instruction, "Take a look to the attachment." Not completely so with this second strain! This insidious little mutant has so many people confused that they're unwittingly opening messages and getting infected. Rather than go into it all again, please read my warning message of the night before. From there I'll update here... This section is a composite of information found at <http://www.symantec.com>, <http://www.mcafee.com>, and <http://www.viruslist.com>. After this section I'll pass along some comments from the field (us)... The W32.BadTrans.B@MM is a worm that spreads under Win32 systems. The virus sends email messages with infected files attached, as well as installs a spying Trojan component to steal information from infected systems. The worm itself is a Win32 executable file (PE EXE file). Unopened, it's about 29-30Kb in size, but decompressed the worm file length becomes about 60Kb in size. The worm consists of two main components, the Worm itself and a Trojan. The "Worm" component sends infected messages, and the "Trojan" component sends out information (user's info, remote access service data, cached passwords, keyboard log) from infected computers to a specified e-mail address. It also keeps a keystroke-log program body in its code, and installs it into the system while infecting a new machine. INFECTING THE SYSTEM When a user clicks on an attached file and activates the code, the worm gains access to the computer. First of all, it installs its components to the system and registers in the system registry. Once running, the Trojan attempts to mail the victim's IP address to the author. Once this information is obtained, the author can connect to the infected system via the Internet and steal personal information such as user names, and passwords. In addition, the Trojan also contains a keystroke-log program which is capable of capturing other vital information such as credit card and bank account numbers and passwords. The worm also drops an additional keyboard hooker (Win32 DLL file) to the system, and then uses this to spy on text entered by a keyboard. If programmed by the hacker to do so, the worm may delete the original, infected file once installation is complete. SPREADING McAfee reports, "If the attachment is opened, the worm displays a message box entitled, "Install error" which reads, "File data corrupt: probably due to a bad data transmission or bad disk access." But this isn't happening to me, or a lot of other people (at least not that I've seen, anyway). What IS happening follows: When a user becomes infected, the next time s/he reboots the computer, the virus goes through the user's email program and looks for unread messages in all the mailboxes. To send infected messages, the worm uses a direct connection to an SMTP server. A victim's email address is obtained in two different ways: 1. through your address book 2. by the worm reading all your e-mail in your inbox, and obtains e-mail addresses from here. Next, the worm generates replies and sends infected messages. The message body contains HTML format, and uses a system breach to spawn an infected attachment on vulnerable machines. The worm uses the infected computer owner's email address as the sender, BUT it adds "_" (underscore) before the real address. The subject line may OR MAY NOT have a subject line of nothing but "RE:" (nothing else). For most of us, the body of the email is completely blank. There are no attachments, so there is nothing to click. That's because the virus is embedded in the body, with code that hides it. The recipient receives what appears to be a totally blank message. It's actually 29-30K long. Are you a list manager who's receiving reports that <_aperson@thisisp.com> has been sending out infected messages to your membership? Let's see if I can explain this one for you ... A SCENARIO TO EXPLAIN MOST OF IT You're a listowner of the ABC-l list. In your membership is Ima Doe. She uses Microsoft Outlook and has a HUGE address book filled with peers doing genealogy from all the lists she belongs to. In real life, Ima has a daughter, Sheeza. :) Sheeza isn't part of any list, nor does she do genealogy. However, Sheeza's computer is infected. Her infected machine emails Mom (Ima), and Mom seeing a message from her beloved daughter Sheeza, immediately opens the message! That's all she wrote! Ima's computer is now infected. You, the listowner of the abc-l list, and anyone else in Ima's address book, is now vulnerable to receiving the infection. List members start reporting that Sheeza Doe <_sheeza@isp.com> is sending out virus messages! Being a terrific list manager (and you are, aren't you?) you head for your utilities page to unsub this poor woman till she gets her machine cleaned up, but alas!... there is NO sheeza in the membership, nor is there anyone from isp! The message everyone received said it's from Sheeza Doe <_sheeza@isp.com> simply because Sheeza was in Ima's computer! Get that??? <g> (I've been working at this for a while folks, and am feeling a little uhm... "creative" here! If the Ima's and Sheeza's get you all fouled up, change the Ima to Jane and the Sheeza to son, John.) Symantec reports: If SMTP (user) information can be found on the current computer, then it will be used for the From: field. Otherwise, the From: field will be one of: "Mary L. Adams" <mary@c-com.net> "Monika Prado" <monika@telia.com> <--- I've had this one several times "Support" <support@cyberramp.net> "Admin" <admin@gte.net> "Administrator" <administrator@border.net> "JESSICA BENAVIDES" <jessica@aol.com> "Joanna" <joanna@mail.utexas.edu> "Mon S" <spiderroll@hotmail.com> "Linda" <lgonzal@hotmail.com> "Andy" <andy@hweb-media.com> "Kelly Andersen" <Gravity49@aol.com> "Tina" <tina0828@yahoo.com> "Rita Tulliani" <powerpuff@videotron.ca> "JUDY" <JUJUB271@AOL.COM> "Anna" <aizzo@home.com> However, we're all receiving messages from a host of other names, including those we don't know (like <_sheeza@isp.com>?). >From a message in the field: "I just discovered a problem when searching for FROM: addresses that start with <"_">. There is a problem with people who have their email program set to show both their name and email address in the FROM: header. If such a person is infected, mail from him/her will show, in the header, something like the following: "John Doe" <_johndoe@wherever.com> "The FROM: element in the header you see before you open the email will show only "John Doe". That's a problem. Either set up a filter to divert infected emails to a separate mailbox, or make sure your system is COMPLETELY protected before you open or preview any more emails.)" To notify the person who has the infected machine, simply remove the leading '_' from their email address. WHAT CAN YOU DO? 1.) Insure that your antivirus software has been updated since November 25, 2001. Anything before that will not give you the protection you need from this strain of BadTrans. Because of the mutations this strain appears to be doing, most people are updating DAILY now. 2.) Keep your antivirus program running at all times. You just never know when you'll be the next "recipient." 3.) Stay calm. Realize and remember that N0 virus is currently capable of passing through a RootsWeb list. Rootsweb's filters are set to very high. However, BadTrans.B makes it *APPEAR* that this is happening, and uses list messages as a source for new targets. Unsubscribing from the list will do you no good if your email address is already in someone else's computer and that machine becomes infected. MICROSOFT OUTLOOK USERS BE SURE TO READ THIS! Particularly vulnerable to the BadTrans.B virus are those users of Outlook (not Outlook Express). It's imperative that Outlook users NOT open suspicious emails, or even preview them. Outlook users will infect their computers simply by opening or previewing infected email. Since these infected messages have no attachments to click on in order to activate the virus, just opening the message activates the virus through HTML coding embedded in the post. Again, the message size is 29-30K, but what you see is a blank message. At the point of seeing the blank message, the computer has been infected. Outlook users are advised to view the headers. If a header reports a sender's address as similar to <_somebody@someisp.com>, DO NOT OPEN IT! As stated above, opening or even previewing an infected message through Outlook will activate the virus and cause your system to become infected. Available since May 16, 2001 is a patch for Outlook versions 5.01 and 5.5 that should be downloaded and installed immediately. MSIE 6.0 appears not to be affected because the patches for previous versions have been incorporated into it. You can check to see which patches your system needs by going to <http://windowsupdate.microsoft.com/>. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ WINDOWS ME USERS READ THIS! Windows ME utilizes a backup utility that backs up selected files automatically to the C:\_Restore folder. This means that an infected file could be stored there as a backup file, and VirusScan will be unable to delete these files. I have the instructions on how to remove the infected files from the C:\_Restore folder if you need/want them. IDEAS AND COMMENTS FROM THE FIELD (US): 1. Are you concerned about even receiving infected messages? Here's an idea that _might_ work: Set up a special folder specifically for "Infected Mail." Then, use your email program's filter to watch and transfer all messages with the "_" in the header to that "Infected Mail" folder. Make sure this is the first of your filters. 2. Are you emailing people telling them their computer is infected and that person writes back that it's not? This is because of the virus sending out the infected messages without the PC owner's knowledge. The person's machine is "definitely infected, whatever they may say to the contrary. Keep in mind that the virus is only contained in the messages that their computer is sending without their knowledge - not the ones they are sending you legitimately. That is why you are receiving some virus infected messages and some virus free. Unless their virus definitions are up-to-date they could run a virus scan & find nothing. Norton only updated their definitions to include the latest Badtrans virus this weekend." It's important that you impress on these owners that their computer IS indeed, infected and they need to take care of it. 3. "In your address book ADD NEW Contact..... !0000 exactly like this. It puts this address first in your book and STOPS the virus from sending to your list..." This is a hoax, I'm afraid. It doesn't work. You'll find information about the "!0000" hoax at <http://antivirus.about.com/library/weekly/aa082801b.htm>. 4. Have you heard of MailWasher <http://www.mailwasher.net>? Though I haven't tried it, here's a user's comment regarding that FREE program: "I can view, identify and delete the viruses while they are still on the ISP server. They never get to my computer." Hmmm... perhaps it's worth checking out? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ You've done it! You've made it to the end! Once again let's keep this off the list. If you have any questions you're welcome to email me <ladyaudris@earthlink.net>. I wish you a TERRIFIC Tuesday! :) Stay vigilant; stay alert ... keep your computer safe! -------------------------------------------------------------------- For even more info see; You can read about this virus and how to remove it from your system on the Norton Symantec site ... http://www.symantec.com/avcenter/ http://www.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html Also for more info; http://www.antivirus.com/vinfo/ ---------------------------------------------------------------------- ==== OREGON Mailing List ==== Welcome to the OREGON LIST To Search the OREGON-L or leave the lists use this link to the Oregon-L web site http://lists.rootsweb.com/index/usa/OR/misc.html ============================== Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 Source for Family History Online. Go to: http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237