Hal, when you quarantine something, then send it to Norton for them to work with. They will clean the file and return it to you as well as prepare a virus definition for the culprit. Tnx, Herb ----- Original Message ----- From: Hal Stitt <hal@deltanet-consultants.com> To: <PENNA-DUTCH-L@rootsweb.com> Sent: Monday, May 21, 2001 12:25 PM Subject: [PADutch] Virus Alert > I hate use the list for virus stuff, but Badtrans is still with us. Here are the details of my reception of an attachment containing Badtrans about an hour ago. > > From: Ralph Tewksbury > Subject: Re: Re: [PENNA-DUTCH] GRAY surname (Note the double Re:) > Attachment: README.TXT.pif > Action: Stored a file named "W32.Badtrans.13312@mm" in my Local Settings folder. > > Infected file was recognized immediately by Norton Antivirus. The message did not even appear in my inbox. But Norton was unable to repair it. Instead I chose to quarantine it and deleted the infected file. > > Important: This had the list name in the Subject line, but it did not come through the list. (List Owner please confirm that the listserver will not distribute attachments.) If you get what looks like a Rootsweb message with an attachment, you may have a virus attached. We cannot go through life deleting all attachments, but we certainly can delete attachments on messages from Rootsweb. Also be 100% suspicious of attachments made to look like a document (README.TXT) but with an additional executable extension--pif in this case. > > Hal Stitt > KNAUFF/WALLIS/WALLACE > > > ==== PENNA-DUTCH Mailing List ==== > You have a friend in Pennsylvania... > > > ============================== > Search over 1 Billion names at Ancestry.com! > http://www.ancestry.com/rd/rwlist1.asp >