Joan: I am afraid that I did not understand all you were saying about the virus. I ran a virus scan on my Norton and it says that I am clean and no viruses found. Is this all that I need to do? Ruth in IN ----- Original Message ----- From: <JYoung6180@aol.com> To: <SENIOR-NEWBIE-L@rootsweb.com> Sent: Monday, June 27, 2005 2:23 PM Subject: [SR-NEWBIE] Admin Notice > To all- > > This is something I don't normally do but I felt it important to alert the > list members that in all probability someone who subscribes to this list's > computer is infected with a virus. Here is the situation... > > For the past couple weeks I've been receiving on a pretty regular basis > notices that AOL has intercepted a virus being sent in an email being sent > TO an > AOL address FROM: SENIOR-NEWBIE-admin@rootsweb.com . Now, the admin > address > for this list is NEVER used to SEND mail but it is quite possible that > list > members have placed this address in their address book or someplace on > their > computers as being the contact address for contacting the list admin, and > the > virus infecting their computer has picked up the list admin address and > used > it to forge the FROM address when sending out the virus. This is how > many > viruses work. > > I can't identify the actual source of the virus emails from the headers > AOL > sends in return, and I can't even be sure that the infected party is a > current > list subscriber, but there are clues and possibly you all need to scan > your > computers with a current updated anti-virus program to be sure you are not > the one generating these viral emails and that your computer is > virus-free. > > AOL has given me the following clue as to the identity of the infected > party: > > The original message was received at Mon, 27 Jun 2005 14:59:59 -0400 > (EDT) > from 65.107.176.99.ptr.us.xo.net [65.107.176.99] > > The message which contained the virus and said it was coming from the list > admin address at RootsWeb actually originated at the above IP address. > There > are no current subscribers to the list at xo.net but if my memory serves > me > well the actual subscribed address probably wouldn't be xo.net. I > believe > this may well be an upstream provider of service to many ISPs. > > An ARIN WHOIS search on the IP address yields the following results: > > OrgName: XO Communications > OrgID: XOXO > Address: Corporate Headquarters > Address: 11111 Sunset Hills Road > City: Reston > StateProv: VA > PostalCode: 20190-5339 > Country: US > > The name servers for XO communications are all showing concentric.net. > We > do have one current list member with Concentric.net and I especially urge > that > subscriber to check for viruses. > > If anyone needs help in checking their computer for viruses and making > certain that their AV software is up-to-date--I'm sure the experts on this > list > would be happy to advise you if you post any questions to the list. > > One final comment, as always RootsWeb list mail is safe and > virus-free--this > is merely a case of someone who may happen to be a list subscriber being > infected on their personal computer and the virus forging the list admin > address > as sender. NO ONE on this list or anywhere else should be RECEIVING mail > from SENIOR-NEWBIE-admin@rootsweb.com--it is an address used only for > list > members send mail to ME--not vice versa. > > Thanks! > > Joan, admin > SENIOR-NEWBIE-L@rootsweb.com > > > > ==== SENIOR-NEWBIE Mailing List ==== > The focus of this list is on helping Seniors to learn to use computers and > the Internet. Tolerance and patience are the watchwords. For help with > genealogical research methods and procedures, join ROCKINGCHAIR-ROOTS. > Click and send: > mailto:ROCKINGCHAIR-ROOTS-L-request@rootsweb.com?subject=subscribe > > ============================== > Jumpstart your genealogy with OneWorldTree. Search not only for > ancestors, but entire generations. Learn more: > http://www.ancestry.com/s13972/rd.ashx > >