RootsWeb.com Mailing Lists
Total: 1/1
    1. Admin Notice
    2. To all- This is something I don't normally do but I felt it important to alert the list members that in all probability someone who subscribes to this list's computer is infected with a virus. Here is the situation... For the past couple weeks I've been receiving on a pretty regular basis notices that AOL has intercepted a virus being sent in an email being sent TO an AOL address FROM: SENIOR-NEWBIE-admin@rootsweb.com . Now, the admin address for this list is NEVER used to SEND mail but it is quite possible that list members have placed this address in their address book or someplace on their computers as being the contact address for contacting the list admin, and the virus infecting their computer has picked up the list admin address and used it to forge the FROM address when sending out the virus. This is how many viruses work. I can't identify the actual source of the virus emails from the headers AOL sends in return, and I can't even be sure that the infected party is a current list subscriber, but there are clues and possibly you all need to scan your computers with a current updated anti-virus program to be sure you are not the one generating these viral emails and that your computer is virus-free. AOL has given me the following clue as to the identity of the infected party: The original message was received at Mon, 27 Jun 2005 14:59:59 -0400 (EDT) from 65.107.176.99.ptr.us.xo.net [65.107.176.99] The message which contained the virus and said it was coming from the list admin address at RootsWeb actually originated at the above IP address. There are no current subscribers to the list at xo.net but if my memory serves me well the actual subscribed address probably wouldn't be xo.net. I believe this may well be an upstream provider of service to many ISPs. An ARIN WHOIS search on the IP address yields the following results: OrgName: XO Communications OrgID: XOXO Address: Corporate Headquarters Address: 11111 Sunset Hills Road City: Reston StateProv: VA PostalCode: 20190-5339 Country: US The name servers for XO communications are all showing concentric.net. We do have one current list member with Concentric.net and I especially urge that subscriber to check for viruses. If anyone needs help in checking their computer for viruses and making certain that their AV software is up-to-date--I'm sure the experts on this list would be happy to advise you if you post any questions to the list. One final comment, as always RootsWeb list mail is safe and virus-free--this is merely a case of someone who may happen to be a list subscriber being infected on their personal computer and the virus forging the list admin address as sender. NO ONE on this list or anywhere else should be RECEIVING mail from SENIOR-NEWBIE-admin@rootsweb.com--it is an address used only for list members send mail to ME--not vice versa. Thanks! Joan, admin SENIOR-NEWBIE-L@rootsweb.com

    06/27/2005 09:23:20