I hate use the list for virus stuff, but Badtrans is still with us. Here are the details of my reception of an attachment containing Badtrans about an hour ago. From: Ralph Tewksbury Subject: Re: Re: [PENNA-DUTCH] GRAY surname (Note the double Re:) Attachment: README.TXT.pif Action: Stored a file named "W32.Badtrans.13312@mm" in my Local Settings folder. Infected file was recognized immediately by Norton Antivirus. The message did not even appear in my inbox. But Norton was unable to repair it. Instead I chose to quarantine it and deleted the infected file. Important: This had the list name in the Subject line, but it did not come through the list. (List Owner please confirm that the listserver will not distribute attachments.) If you get what looks like a Rootsweb message with an attachment, you may have a virus attached. We cannot go through life deleting all attachments, but we certainly can delete attachments on messages from Rootsweb. Also be 100% suspicious of attachments made to look like a document (README.TXT) but with an additional executable extension--pif in this case. Hal Stitt KNAUFF/WALLIS/WALLACE
Thanks for your e-mail on the virus.I got the Halph Tewsbury and "bit", my McAfee caught it, but said that I had to delete "C:\Windows\HKK32.Exe" and replace it from a back up. Since you appear to much more computer literate, where can I find out what that site was/is? Thanks in advance for your help; Al and Margaret Does this mean that we have to stay away form PENNA-DUTCH-L Site? --- Original Message ----- From: "Hal Stitt" <hal@deltanet-consultants.com> To: <PENNA-DUTCH-L@rootsweb.com> Sent: Monday, May 21, 2001 1:25 PM Subject: [PADutch] Virus Alert > I hate use the list for virus stuff, but Badtrans is still with us. Here are the details of my reception of an attachment containing Badtrans about an hour ago. > > From: Ralph Tewksbury > Subject: Re: Re: [PENNA-DUTCH] GRAY surname (Note the double Re:) > Attachment: README.TXT.pif > Action: Stored a file named "W32.Badtrans.13312@mm" in my Local Settings folder. > > Infected file was recognized immediately by Norton Antivirus. The message did not even appear in my inbox. But Norton was unable to repair it. Instead I chose to quarantine it and deleted the infected file. > > Important: This had the list name in the Subject line, but it did not come through the list. (List Owner please confirm that the listserver will not distribute attachments.) If you get what looks like a Rootsweb message with an attachment, you may have a virus attached. We cannot go through life deleting all attachments, but we certainly can delete attachments on messages from Rootsweb. Also be 100% suspicious of attachments made to look like a document (README.TXT) but with an additional executable extension--pif in this case. > > Hal Stitt > KNAUFF/WALLIS/WALLACE > > > ==== PENNA-DUTCH Mailing List ==== > You have a friend in Pennsylvania... > > > ============================== > Search over 1 Billion names at Ancestry.com! > http://www.ancestry.com/rd/rwlist1.asp >