In a message dated 6/27/2005 7:45:09 P.M. Eastern Daylight Time, doris40@aeroinc.net writes: I'm clean Joan. I use AVG I have it set to automatically run a boot-up scan, daily updates and daily thorough scan. Also, yesterday I ran PCcillian and they also told me I'm clean. Doris ----- Original Message ----- From: <JYoung6180@aol.com> To: <SENIOR-NEWBIE-L@rootsweb.com> Sent: Monday, June 27, 2005 2:23 PM Subject: [SR-NEWBIE] Admin Notice > To all- > > This is something I don't normally do but I felt it important to alert the > list members that in all probability someone who subscribes to this list's > computer is infected with a virus. Here is the situation... > > For the past couple weeks I've been receiving on a pretty regular basis > notices that AOL has intercepted a virus being sent in an email being sent TO an > AOL address FROM: SENIOR-NEWBIE-admin@rootsweb.com . Now, the admin address > for this list is NEVER used to SEND mail but it is quite possible that list > members have placed this address in their address book or someplace on their > computers as being the contact address for contacting the list admin, and the > virus infecting their computer has picked up the list admin address and used > it to forge the FROM address when sending out the virus. This is how many > viruses work. > > I can't identify the actual source of the virus emails from the headers AOL > sends in return, and I can't even be sure that the infected party is a current > list subscriber, but there are clues and possibly you all need to scan your > computers with a current updated anti-virus program to be sure you are not > the one generating these viral emails and that your computer is virus-free. > > AOL has given me the following clue as to the identity of the infected party: > > The original message was received at Mon, 27 Jun 2005 14:59:59 -0400 (EDT) > from 65.107.176.99.ptr.us.xo.net [65.107.176.99] > > The message which contained the virus and said it was coming from the list > admin address at RootsWeb actually originated at the above IP address. There > are no current subscribers to the list at xo.net but if my memory serves me > well the actual subscribed address probably wouldn't be xo.net. I believe > this may well be an upstream provider of service to many ISPs. > > An ARIN WHOIS search on the IP address yields the following results: > > OrgName: XO Communications > OrgID: XOXO > Address: Corporate Headquarters > Address: 11111 Sunset Hills Road > City: Reston > StateProv: VA > PostalCode: 20190-5339 > Country: US > > The name servers for XO communications are all showing concentric.net. We > do have one current list member with Concentric.net and I especially urge that > subscriber to check for viruses. > > If anyone needs help in checking their computer for viruses and making > certain that their AV software is up-to-date--I'm sure the experts on this list > would be happy to advise you if you post any questions to the list. > > One final comment, as always RootsWeb list mail is safe and virus-free--this > is merely a case of someone who may happen to be a list subscriber being > infected on their personal computer and the virus forging the list admin address > as sender. NO ONE on this list or anywhere else should be RECEIVING mail > from SENIOR-NEWBIE-admin@rootsweb.com--it is an address used only for list > members send mail to ME--not vice versa. > > Thanks! > > Joan, admin > SENIOR-NEWBIE-L@rootsweb.com > > > > ==== SENIOR-NEWBIE Mailing List ==== > The focus of this list is on helping Seniors to learn to use computers and the Internet. Tolerance and patience are the watchwords. For help with genealogical research methods and procedures, join ROCKINGCHAIR-ROOTS. Click and send: > mailto:ROCKINGCHAIR-ROOTS-L-request@rootsweb.com?subject=subscribe > > ============================== > Jumpstart your genealogy with OneWorldTree. Search not only for > ancestors, but entire generations. Learn more: > http://www.ancestry.com/s13972/rd.ashx > > > > -- > No virus found in this incoming message. > Checked by AVG Anti-Virus. > Version: 7.0.323 / Virus Database: 267.8.2/29 - Release Date: 06/27/2005 > > ==== SENIOR-NEWBIE Mailing List ==== For Newbie help with computers and genealogy see: http://freepages.genealogy.rootsweb.com/~besley/newbie.htm ============================== Search Family and Local Histories for stories about your family and the areas they lived. Over 85 million names added in the last 12 months. Learn more: http://www.ancestry.com/s13966/rd.ashx Joan I am clean too... My AVG runs every day and it is updated ... and it tells me that I am clean .... gerri