Everyone! I think this is the solution: The w32.badtrans.b@mm virus apparently is the one putting the underscore "_" in the addresses. I actually had it a couple of days ago, and removed it using the tool Donna mentions below. At the time, I was not aware that the virus used the underscore in the various addresses it is using with the bogus messages. Anyway, the latest scan I did (mentioned below and in earlier messages) didn't catch the virus because I HAD ALREADY REMOVED IT! For those of you who have not yet removed the virus, Donna's advice re using the Symantec removal tool is right. It is not hard to use.... just a bit time consuming and certainly annoying. AND, beware of the new virus "goner". Apparently it has "Hi" in the subject line. DON'T attempt to open it. Just delete, and update your anti-virus definitions. I'm going to do it again right away. Good Luck! And a POX on all these internet terrorists! Dave Strong ====================================== Dave, Norton is aware of the _in the email address they have a removal tool at this address: http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b @mm.re moval.tool.html there is a brand new virus out today called goner, it is on the norton site. So be careful everyone! Donna ============================= ----- Original Message ----- From: juanita To: Dave Strong & Marilynn Dunne Sent: Tuesday, December 04, 2001 7:51 PM Subject: Re: virus? > Have you tried contacting the person with the virus by sending an e-mail to > his address, eliminating the underscore @ the beginning? I was told I > could contact a sender that way but I've not tried it. I received one e-mail > that was infected and Norton's quarantined it and I deleted without trying to > contact the sender. Leaving the underline in the address, the message will > bounce as invalid. > > juanita ================================= > > To All... > > > > I just received the following as part of a separate message from Gord > > Stronge: > > > > "Just 10 minutes ago I received a VIRUS warning from Kelly Velasquez > > about this and another Strong researcher warning that these message > > addresses have an underscore prefix to the name; his showed up in my > > admin's rejected message only as "<_pbstrong>". My address book shows > > his address is <_pb.strong@deleted.com> (Note: I changed his > > address for purposes of this message) He probably is unaware his name > > is being used to send messages out. > > > > To be safe don't try to open anything else from him and scan your > > system for viruses. I'll forward the warnings from Kelly. " > > > > I then checked my own address book and found that unknown to me, the > > following address has been inserted into my address book > > "<_jhdame@erols.com>" > > > > Again, this did not get caught by the Norton Antivirus scan I ran... > > we may have a real problem here. > > > > Dave > > =================================== > > > > ----- Original Message ----- > > From: Dave Strong & Marilynn Dunne <dbsandmd@nhb.com> > > To: <STRONG-L@rootsweb.com> > > Sent: Tuesday, December 04, 2001 4:19 PM > > Subject: Re: virus? > > > > > > > Yes... > > > > > > I noticed a different one coming in the other day with a _ before > > the > > > address... I deleted it so I can't go back and check it just now. > > > However, I just ran a Live Update from Norton and then scanned the > > > hard-drive with a negative report as to any virus. > > > > > > Can one of you who has a message from someone with a _ before the > > > address please report the incident to Norton or McAfee to see if > > this > > > has been identified as a worm, virus, or whatever? And, let us all > > > know. > > > > > > Regards > > > Dave Strong > > > ========================== > > > ----- Original Message ----- > > > From: Gord Stronge <gstronge@home.com> > > > To: <STRONG-L@rootsweb.com> > > > Sent: Tuesday, December 04, 2001 3:44 PM > > > Subject: Re: virus? > > > > > > > > > > I received something similar this morning from _pbstrong with an > > > > attachment that contained nothing and when I replied the mail > > admin. > > > > said server rejected my mail. PB Strong is Philip Strong from > > > Belfast I > > > > believe. > > > > > > > > Gord Stronge > > > > > > > > Lynda Lindsey wrote: > > > > > > > > > > this has been happening > > > > > > > > > > if you notice the senders email > > > > > > > > > > it usually will have a _' > > > > > > > > > > before the name, that is how I was finally able to notitify some > > > yesterday > > > > > > > > > > At 06:09 PM 12/4/2001 +0000, Kerry Velazquez wrote: > > > > > >Hi, > > > > > > > > > > > >I just got a blank reply from my query from Helen > > > > > >Strange - it contained 2 attachments called readme and > > > > > >file, or something similar. > > > > > > > > > > > >When I scanned one of them it told me it contained a > > > > > >virus, and so I've deleted the message from my system > > > > > >without opening anything. I've tried contacting Helen > > > > > >to let her know but apparently her e-mail address > > > > > >isn't valid? > > > > > > > > > > > >Just in case this happens to anyone else, I'm letting > > > > > >the list know - Helen if you are on here let me know > > > > > >if you mailed anything to me or whether it was > > > > > >automatically generated somehow. > > > > > > > > > > > >Regards, > > > > > >Kerry > > > > > > > > > > > > > > > > > > > > > > > > > >________________________________________________________________ > > > > > >Nokia 5510 looks weird sounds great. > > > > > >Go to http://uk.promotions.yahoo.com/nokia/ discover and win > > it! > > > > > >The competition ends 16 th of December 2001. > > > > > > > > > > > > > > > > > >==== STRONG Mailing List ==== > > > > > >======================================================== > > > > > >"Welcome to my World": Martha F. (Brani) Strong's web site > > > > > >http://www.geocities.com/Heartland/Prairie/7905/ > > > > > > > > > > > >Ancestors of "Elder" John Strong, Margery Deane, and > > > > > >Abigail Ford in England. Children of "Elder" John > > > > > >Strong of MA & CT. Historical documents of England & > > > > > >U.S.A.; historical Strong(e) homes and buildings. New > > > > > >genealogical research findings concerning families in > > > > > >"The West Country" of England: Somerset, Dorset, and > > > > > >Devon counties. Memorial to John Richard Mayer, Strange > > > > > >descendant and researcher. Other research aids and links. > > > > > >========================================================== > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > God bless you, Lynda > > > > > > > > > > ==== STRONG Mailing List ==== > > > > > ======================================================== > > > > > THE STRONG QUEST (including The Strong Mail List web site) > > > > > http://ro.com/~rts2/quest > > > > > http://members.tripod.com/~RTStrong/Quest/index.html > > > > > > > > > > Policies and procedures for the Strong Mail List. > > > > > Ancestor / Descendancy Charts of subscribers and visitors. > > > > > Repository for Strong data and documents. > > > > > Links to Strong websites, research tools, etc. > > > > > ========================================================== > > > > > A STRONG HERITAGE: The Strong-Gossage Ancestral Database > > > > > http://ro.com/~rts2/ancestry > > > > > http://members.tripod.com/~RTStrong/Ancestry > > > > > > > > > > Ancestors of Robert T. (Bob) Strong, Jr., and Velma > > > > > (Gossage) Strong. Earliest Strong ancestor: John > > > > > Strong, Sr., of St. Peter's Parish, VA, circa 1700. > > > > > Notes, containing sources, included. > > > > > ======================================================== > > > > > > > > > > > > ==== STRONG Mailing List ==== > > > > ======================================================== > > > > Address for online searchers of STRONG MAIL LIST ARCHIVES: > > > > http://newsearches.rootsweb.com/cgi-bin/listsearch.pl > > > > > > > > MAISER ARCHIVES (1996-1997): Messages Cross Indexed: > > > > http://www.geocities.com/Heartland/Ranch/9881 > > > > > > > > MAISER ARCHIVES (1996-1997): Messages not indexed: > > > > http://www.geocities.com/Heartland/Ranch/9853 > > > > ========================================================== > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ==== STRONG Mailing List ==== > > > ======================================================== > > > Descendants of Alexander Strange, immigrant from Devon, > > > England, to New Kent County, VA, including the Ancestry > > > of John Richard Mayer, d. 1998, San Francisco, CA. > > > http://www.familytreemaker.com/users/m/a/y/John-R-Mayer > > > ========================================================== > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >