RootsWeb.com Mailing Lists
Previous Page      Next Page
Total: 40/54
    1. [SUTTIE] Re: Suttie from Fife Scotland
    2. This is a Message Board Post that is gatewayed to this mailing list. Classification: Query Message Board URL: http://boards.ancestry.com/mbexec/msg/an/mkQBAIB/3.5 Message Board Post: My G. Grandfather had a brother called Thomas Suttie. He had a brother named James who married a woman named Elizabeth Borthwick in 18??. Thomas would have won a sharpshooting medal in Ireland. This is all I know. If this sounds like it could be a link, please reply to me. Thank you T.J.

    12/31/2002 05:04:22
    1. [SUTTIE] Re: Family of James Agustus Suttie
    2. This is a Message Board Post that is gatewayed to this mailing list. Classification: Query Message Board URL: http://boards.ancestry.com/mbexec/msg/an/mkQBAIB/2.1.1 Message Board Post: Any help would be deeply appreciated. My James A. Suttie originates from Yarmouth, Nova Scotia.

    10/21/2002 10:53:17
    1. [SUTTIE] Re: Family of James Agustus Suttie
    2. This is a Message Board Post that is gatewayed to this mailing list. Classification: Query Message Board URL: http://boards.ancestry.com/mbexec/msg/an/mkQBAIB/2.1 Message Board Post: Hi I read your query on ancestry.com from Sept 2000 concerning James A Suttie. I may be able to help a little if you are still still looking.

    10/21/2002 09:54:06
    1. [SUTTIE] Re: Suttie Link to Longstaff 1846 to 1930.
    2. This is a Message Board Post that is gatewayed to this mailing list. Classification: Query Message Board URL: http://boards.ancestry.com/mbexec/msg/an/mkQBAIB/6.2 Message Board Post: Yes I am a Link to this Longstaff

    08/06/2002 12:08:33
    1. [SUTTIE] List Admin Opportunity
    2. John A Hansen
    3. Dear All: Now's your chance!! For those who have been waiting for the opportunity to administer this list. I've decided to retire from public life and enjoy my grandchildren and do some traveling with my wife. Here are some guidelines for winning the List Admin title. A: Be Creative in your letter. Humor sells. B: Decision in one week ( next sat July 20 at 5pm PDT) C: Mention if you have any special qualities ( manage the message boards), won genealogy awards etc etc D: I will take a look at the archives to see what posting have been made. So if you've been a flamer then I would forget applying. If you've posted several hundred messages on the surname then you're probably the winner. E: Attempts to bribe ( chocolate, lattes, pies etc) are turned over to Piglet for decision on what the related punishment will be. F: Private Email only. Do not post to the list. Posting to the list will be an automatically disqualifier. Best Regards John A Hansen List Admin pro tem [email protected]

    07/13/2002 01:44:45
    1. [SUTTIE] Rootsweb Rebuild Status ( June 29-2002)
    2. John A Hansen
    3. Dear All: As you all know, Rootsweb is under a major reconstruction and upgrading program. New servers are being installed etc. >From time to time, there are problems accessing various parts of the sites. Here is the latest information from Tim Pierce as of last night. It looks like another week or so to finally get it all done. The lists that he refers to is primarily the mailing lists but also some of the search engines etc. Should be faster, better etc when it's all done. There are more details posted on the Rootsweb home page. Best Regards John A Hansen List Admin At 09:51 PM 6/28/02 , Tim Pierce wrote: >I can only speak first-hand for the mail-related systems. The >following machines have been moved to new hardware in the new >facility: > >mail.rootsweb.com >pml.rootsweb.com >lists2.rootsweb.com >lists3.rootsweb.com >lists7.rootsweb.com > >Still to go: > >lists5.rootsweb.com >archiver.rootsweb.com >listsearches.rootsweb.com > >These will get done next week, hopefully to finish by the middle of >the week. > >Randy has been working feverishly on the other machines. I know that >www.rootsweb.com has been moved, am pretty sure that homepages is done >and that freepages is in process, but I don't know their status.

    06/29/2002 03:38:25
    1. [SUTTIE] List Admin Hints & Guidelines
    2. John A Hansen
    3. Welcome: It's been awhile since I've posted some hints and guidelines for this mailing list. This memo has been a joint effort with Sue Swiggum from the The Ships List. She has a creative writing ability and creates these really wonderful posts every 3 months or so. . I've modified the memo to cover our particular situation as compared to her list and added some other tidbits that I've accumulated over the years. I'd like to see her publish a book on the subject of Internet Mailing Lists quirks. Hope it's useful for you. Best Regards John A Hansen List Admin ++ Gateways I've set up gateways from most of the message boards. This increases the amount of messages to this list. The usage pattern on the message boards is much more informal than here. However, I've seen many cases where people are tracking the same brick walls for obvious reasons. An elusive ancestor is the same on the mailing list and the message boards. But while the post from the message boards comes this way. the posts from the mailing list do NOT go back to the board. You need to click on the URL in the message and reply "over there" Then your reply will also come back here to this mailing list. ++Subject Lines -- Subject Lines -- Subject Lines -- Subject Lines -- plus ... a few tidbits and gentle reminders which you might find useful. Regarding "Subject Lines" .... you'll see my other comments for Digest members below. Do include your surnames ( in Caps) in the subject line > location > dates and then include them again in the body of your message where you give the full details of your ancestor. If your details are sketchy at this point, then just put what ever you do have; sometimes the most minor of details can often provide the breakthrough. Subject lines such as "HELP" may not get you any HELP ... "NEW SUBSCRIBER" may only get you a HELLO if you are lucky. The reason is not because you are being intentionally ignored, but rather because our wonderful members with the resources to help you are VERY busy, so they scan the subject lines looking for a subject about which they have knowledge. Sometimes they have no time to open every message and peek to see if they can help, so do yourselves a big favor by drawing the right kind of attention to yourself and giving an assist to those with the resources and knowledge who are able to help. If you are making a general or other emigration/immigration inquiry, take a moment to read your own subject line first, to check if it is meaningful for your query. Put as much info in the subject line as can be reasonably done. Try not to _begin_ your subject line with numbers, as the robot handling the list mail sometimes rejects those. ps. A list member (who is one of our big helpers) has also suggested that when any of us respond to a message with an inappropriate subject line, that we alter it slightly. I do this sometimes, but on a busy day I sometimes overlook this step. ++ AOL and SPAM filters There has been a new trend for subscribers to set up filters to screen out unwanted emails. Unfortunately, it sometimes also restricts the receipt of messages from Rootsweb. When the message is rejected, it automatically triggers a auto bounce counter here at Rootsweb. "After 4 there is no more" to plagiarize an old advertising theme :-). ++ Answering: If you able to answer another member's query, then please share that answer with other list members ... UNLESS, the reply is very specifically directed to the poster [such as, "we have a Bill Smith living next door ... could he be yours?"] If your answer will be of interest to other list members, such as immigration, marriages, dates, ports, microfilm numbers, "how-to" research immigration/emigration related sources etc., etc., then please share that with the list. ++ Quoting: When responding to a query on the list, by all means quote the original message so that we ALL know what you are talking about. BUT, edit <snip> the original message to just illustrate the part which you have answered. On the recent roll call for instance, the actual post for the roll call should have been snipped. ++ <snip>'s: As mentioned above, "snipping" [editing] is recommended, to save from excessive "quoting" and wasting band-width by filling up the Digests. List Mode members, also <snip> the 'tag-lines' from the original post, and refrain from sending any "piggy-backed" messages with your post unless they follow the thread. ++ Forwarding Mail: When forwarding mail [Fwd:] because you may have mis-addressed the original or you are sending a repeat of an earlier query, take a moment to edit all the unnecessary 'headers' and taglines etc. They take up too much room, and serve no purpose. Some may just "delete" rather than paging down to find your message. Consider copy/paste into a new message, rather than "Fwd:". ++ CAPS: Do not write your message in "CAPS" [Capital letters]. Messages/Queries written ALL in CAPS tend to be difficult to read, for most of us. In the "world" of cyber-space, CAPS are considered the equivalent of SHOUTING! Save CAPS for ship names, surnames, or anything else you wish to stress. (CAPS are okay from vision-impaired members) ++ WebPages: Do not "quote" an entire web page, rather, POST the URL and give a brief description of the site, and an explanation of why you found it useful. ++ Citing: When quoting any information found elsewhere, eg. ... a web page, a book, a document .. always cite (give credit) to the website, and/or the author, the publication etc. Apart from being common courtesy, it can also cover many possible copyright infringements when you quote an excerptfrom an original document/publication. Content from a public document is not copyright, but the compilation of those facts can be. ++ Subject Lines: These are SO important as this is your "headline" to attract the attention of those who may be able to help you. Digest members ..... remember to change the subject line to reflect the topic. If you send a subject which says ... Re: Surname-D Digest V02 #xx ... then this is meaningless, and may go unread. Also, include your year of interest. ++ Thank you: Please NEVER forget to send a thank you to someone who has answered your query. It is so nice to send some appreciation to those who have helped you. These should be in the form of a PRIVATE message, but I won't mind if you have been totally overwhelmed by the number of responses, and you wish to thank everyone by means of the list. :-) It only takes a moment, and shows that you don't take any contribution for granted. ++ Reply Most often any info request etc should be posted to the list [email protected] Do not reply to me as list admin because I then just forward to the list..later..maybe :-) Please reply to the List even if you are on the Digest as in [email protected] ++ Not A Subscriber. You will sometimes get a "Not A Subscriber" notice. These are posts that get bounced to me because the poster is sending from a different address than they are subscribed with. I usually forward these to the list. The address that you are registered with can be just slightly different, sometimes the ISP inserts a extra server or other identification in the email id. To check your own address, send your self a email and look at the headers to look at your "from" address. Make sure your email program inserts this address in your post and then subscribe to the mailing lists of your choice. Some ISP ( MSN especially) adds "hotmail"or "email" on some kind of random basis to your "from" address. The Rootsweb computer sees that as a totally different address and will bounce that to me. I usually forward when I can , but there is a delay. ++ Virus alerts Please just send these directly to me and keep the discussion off the mailing list. There is a really good Virus mailing list here at Rootsweb Join by sending an email to [email protected] with subscribe in the body of message. I can also refer you to any number of good Virus sites and sites for Free Anti-Virus software. For the first time, if you do get infected, then I delete your account and send a notice message to you. The second time results in a reject notice on your account. I will send out Virus Alerts from time to time after verifying with several Virus web sites. I do subscribe to several newsletters and "honey pots" to get early warnings about upcoming Viruses. There is a wide difference of opinion about the question of even the List Admin sending out Virus Alerts. I will be happy to debate the point off line but I can declare now that in my opinion, the possibility of saving even one person the pain of losing their work is worth one delete message. The virus industry has changed dramatically over the last two years and that changed my opinion. ++ Virus Updates to the software There is a separate and important fact that everyone needs to know. The AntiVirus software program is out of date when you purchase and install it. The Software Programs work on checking a pattern of words against a known database of viruses. There are new viruses introduced each day of each week. So your AV program needs to be updated very often ( at least once a week) I update mine every night. Most programs have an auto update feature. I've set mine to update at 2 AM. Now it also goes that don't lean back and sigh if you have you've got AV software. The AV software is your last line of defense ; not your first. Don't open attachments etc etc. Some of the new viruses are really tricky in their descriptions ( warning from Microsoft come to mind) and double extensions etc etc. There are viruses now being seen at some of the test sites, that are sent in the pure text messages. Currently you can not get a virus from the message from Rootsweb. It's your friends, family and people that you correspond with that do you in :-). ++ Signature Blocks Signature Blocks and Lines are your address at the bottom of your message. No signatures lines over 4 lines. The VLF will automatically put anybody on moderate that can't seem to get their sig line down. Large sig lines clog up the search engine and the archives. "VLF is a patented system from Piglet (the Listowners admin) and she rents it out for a royalty fee per use. VLF = Very Large Flyswatter to keep posters in line :-) ++ Bounces We all get bounced from time to time. It's not a signal that we don't love you. The Rootsweb email server keeps track of how many times a message to you has bounced back. Most times it'd due to you exceeding a limit at your email service. Most of the free Email servers ( Yahoo, Hotmail Netzero ) have very low limits , usually 2 meg of mail. In today's world of big messages that happens very fast. A weekend away can fill your email box pretty fast. So the post from these lists then gets returned. "After 4 there is no more" and the "bouncer" steps in and removes your address. Don't get upset, merely resubscribe and go on. You might want to check the archives to see if there is any missed messages to you. ++ Archives. Every message ever posted is archived here at Rootsweb. So if you're joining because you now found that this surname or topic is hot on your priority list, then check the archives to see what has already been posted. You can go to the home page at www.rootsweb.com and pick up the archives from there. The archives are located at www.archiver.rootsweb.com if you want to bypass home and go direct :-) ++ Contact the List Admin You can always contact any list admin by sending an email to [email protected] XXXX = name of the list. My email is below for direct reference. ++ Unsubscribe Please send an email directly to the request server at [email protected] and merely put unsubscribe in the body of the message. To get on this list you had sent a message with subscribe. So to get off, you merely just tell the computer unsubscribe. Remember this is HAL. Remember this is HAL, Remember this is HAL etc etc. ++ Address Changes We all have address changes in our life. It's a fact of life in this Internet world we live in. So to update your address: A: Send an email to unsubscribe. Please note that you need to use the original email address to do so. On almost every email software program, you can install or keep the original email address. It's there in the from box of the message. You might have to call up the "options" tab to see it. B: Then send an email to subscribe the new address. Please use the new address as it looks in your email server when you created your new account. ++ Posting to the Mail List. All Inquires and mail should only go directly to the mail list. The address to post to is [email protected] Messages sent to to the [email protected] will bounce back to me. Since most of those bounces are misc. they wind up getting deleted. So your pleas to get help to find that one elusive ancestor is gone into the ether someplace. Any other address will bounce to me and then be deleted. There are many ways that various spam artists are trying to post to the list and wind up bouncing to the admin. They are all deleted. So your important message regarding an ancestor line or a response to someone will probably be deleted. ++ USE your one and only Official Subscribed Address Most of the problems regarding posting, unsubscribing etc are due to a difference in the "from" address in your email program and the "reply to". You were subscribed to the "reply to" address automatically. The computer ( HAL) looks only at your "from" address. That "from" address must match the subscribed address. So if you changed the "from" address for some reason then no message. The computer will only accept mail from registered subscribed users. When the address doesn't match exactly, it bounces. I sometimes get a copy but not always. Take a look at the welcome message that you received for this list. Please keep that message. It tells you exactly what address was subscribed and will be accepted for posting. Make sure all email you send is "from" that address. The Rootsweb computer "Hal" just never sleeps and never lets a message get by with an "almost correct" address. Remember this is HAL, Remember this is HAL ++ Be Nice No Flames, No Selling, No Religion, No Politics These are all interesting and emotional items. Trying to admin a list under those circumstance just takes too much time from my own Genealogy and my Grandchildren :-) Hope all this helps. Best Regards John A Hansen [email protected] List Admin BTW: From time to time I get some questions about my own background etc. There is a summary at: http://www.rootsweb.com/rootsweb/spotlight/hansen_j.html

    05/18/2002 03:51:30
    1. [SUTTIE] Any family heritage rerlated to Suttie
    2. This is a Message Board Post that is gatewayed to this mailing list. Classification: Query Message Board URL: http://boards.ancestry.com/mbexec/msg/an/mkQBAIB/10 Message Board Post: Mother (unmarried) Magaret 'Peggy' Suttie of Dunfermline area borm 1911-12 Surmame 'Craigie' features, William Pike also features 1945-6 . Any information as to heritage , relationships would be welcome

    05/13/2002 10:56:47
    1. [SUTTIE] Hints on Message Boards > better Sig Lines > Brick walls
    2. John A Hansen
    3. Dear All: Some of you have posted really nice and comprehensive descriptions of your brick walls on the roll call. There is also an very interesting method to utilize the combined benefits of the message boards and the mailing lists that could be of use to everyone. We can use of the archiving capability of the message board and the address of the URL of that message to keep your information available and easy to reach for viewers. The process is: A: Most genealogy software programs will allow you to segment a specific portion of the family tree. So create the descendants tree or ancestry tree in your program or from your ancestry files and then copy that to the clipboard. B: Open the message board at www.rootsweb.com for the specific surname and or Clan. C: Create a new post and copy the material of the ancestor from above into that post. D: Go to Tools or other options on your email program and open the sig lines feature option E: Create the Sig Line block in your email program Insert the name of the brick wall or person at the top of the chart along with the highlights of location and time etc. This is effectively your subject lines so make it eye catching and complete. Then copy the message URL into the next line just below the subject line. E: You now have a 2 line sig line! It lets a viewer go to the same reference point by merely clicking on the URL. If they reply, then you will get that reply automatically. It also gathers all the information on that ancestor in one location so you have a stream of replies for all to see and comment on. That URL becomes a universal locator for you to add to all your outgoing messages and other messages. Especially if you have a lot of documentation etc it will help to confirm to other viewers that this is the right tree. F: Then when you post to the [email protected] "insert" and select the appropriate sig line in that message instead of merely the long line of surnames that nobody really looks at. It will then be a sig line of interest to people in that mailing list with a really easy way to check to see if it fits their family lines. This allows you to post your SPECIFIC brick wall on every post to that specific surname list! That way the more help you give others by posting , the more visibility your brick wall receives and thence the more chances you have of getting help in return :-) G: It will also benefit the new search engines that are coming on stream here at Rootsweb. That search engine will then find your messages that relate to that specific ancestor you are researching. You are now using the message boards as an online archiving and retrieval system. Most people will not go to the threaded archives etc but a simple click on the url below an interesting subject line will likely get their attention. It has the added benefits of: A: always visible forever. B: easier to find than the archives list. C: keeps the threads across many months and years D: there will be an auto reply to you whenever a reply is given. E: New search engine will find related messages. Let's use the combined benefits of the message boards and the mailing lists to our mutual advantage. Please feel free to pass this email to anyone of interest. Best Regards John A Hansen List Admin [email protected] BTW: Example below for one of my brick walls :-) Isaac Brownell > Mass > 1772 ( My ALDEN Line) http://boards.ancestry.com/mbexec?htx=message&r=rw&p=surnames.brownell&m=324

    04/29/2002 12:36:26
    1. [SUTTIE] Email & other duplicates ( Apology for duplicates) & Roll Call
    2. John A Hansen
    3. Dear All: Sorry about the two emails on the Virus Alert . Our "friends" at Qwest decided to do two of each email that I sent on Wed. The only good thing was that I didn't get charged for the duplicates :-). Unfortunately you got twice the posts as well. In addition it appears that Rootsweb is doing something strange this week with email from the gateways as well < sigh> Now if we can only get more posts on genealogy .....? Perhaps it's time for a Roll Call again. Please post one inquiry ( brick wall) per post. The subject line should cover: SURNAME ( in caps) > Locations > dates This subject line is crucial to getting attention from the rest of the group. The message body should include any information at all that appears relevant to the inquiry. Sometimes the smallest clue can mean the difference between a contact and a delete button :-) Best Regards John A Hansen [email protected] List Admin . -----Original Message----- From: Shirley [mailto:[email protected]] Sent: Tuesday, April 23, 2002 12:46 PM To: [email protected] Subject: Re: [FTM] I think Rootsweb has the hiccups right now. Some mail with the gateways (between message boards and the lists) is coming through that's a few weeks old. shirley Peg Rampling wrote: > How come Johnnie got his thank you before Jim???? I sent Jim's > first....seems I might be missing a bit of mail from other lists as > well..........mmmmm???

    04/26/2002 04:42:12
    1. [SUTTIE] VIRUS ALERT = W32.Klez. H = Level 3 ( One time Advisory by List Admin)
    2. John A Hansen
    3. Dear All: A new level 3 Virus Alert was issued this week by most of the Major Anti Virus Test Sites and Software Programs The names of the virus will vary but it is generally a form of [email protected] There is a couple of clever things that this virus does that makes it deceptive. While you will not get the virus from Rootsweb you may well get a email from a subscriber or a friend that you have corresponded with and it will look like a legit response to the email or post that you made. The Virus has two files attached. One will have a random file from the sending computer and the other will be the virus with a double extension with ******.txt.exe etc. So it appears to be a real and innocent attachment. As a result, the email message would have 2 attachments, the first being the worm and the second being the randomly-selected file with a "normal" extensions such as *.doc or *.txt etc Payload and Damage: This worm infects executables by creating a hidden copy of the original host file and then overwriting the original file with itself. The hidden copy is encrypted, but contains no viral data. The name of the hidden file is the same as the original file, but with a random extension. Large scale e-mailing: This worm searches the Windows address book, the ICQ database, and local files for email addresses. The worm sends an email message to these addresses with itself as an attachment. Releases confidential info: Worm randomly chooses a file from the machine to send along with the worm to recipients. So files with the extensions: ".mp8" or ".txt" or ".htm" or ".html" or ".wab" or ".asp" or ".doc" or ".rtf" or ".xls" or ".jpg" or ".cpp" or ".pas" or ".mpg" or ".mpeg" or ".bak" or ".mp3" or ".pdf" would be attached to e-mail messages along with the viral attachment All the normal reference sites are carrying details on how to remove if you do get infected and more technical details on how to identify the incoming virus. Please do not create any posts on the mailing lists. Best Regards John A Hansen List Admin

    04/25/2002 04:27:45
    1. [SUTTIE] VIRUS ALERT = W32.Klez. H = Level 3 ( One time Advisory by List Admin)
    2. John A Hansen
    3. Dear All: A new level 3 Virus Alert was issued. The names will vary but it is generally a form of [email protected] While you will not get the virus from Rootsweb you may well get a email from a subscriber or a friend that you have corresponded with and it will look like a legit response to the email or post that you made. The Virus has two files attached. One will have a random file from the sending computer and the other will be the virus with a double extension with ******.txt.exe etc. So it appears to be a real and innocent attachment. As a result, the email message would have 2 attachments, the first being the worm and the second being the randomly-selected file. Payload and Damage: This worm infects executables by creating a hidden copy of the original host file and then overwriting the original file with itself. The hidden copy is encrypted, but contains no viral data. The name of the hidden file is the same as the original file, but with a random extension. Large scale e-mailing: This worm searches the Windows address book, the ICQ database, and local files for email addresses. The worm sends an email message to these addresses with itself as an attachment. Releases confidential info: Worm randomly chooses a file from the machine to send along with the worm to recipients. So files with the extensions: ".mp8" or ".txt" or ".htm" or ".html" or ".wab" or ".asp" or ".doc" or ".rtf" or ".xls" or ".jpg" or ".cpp" or ".pas" or ".mpg" or ".mpeg" or ".bak" or ".mp3" or ".pdf" would be attached to e-mail messages along with the viral attachment All the normal reference sites are carrying details on how to remove if you do get infected and more technical details on how to identify the incoming virus. Please do not create any posts on the mailing lists. Best Regards John A Hansen List Admin

    04/23/2002 09:36:23
    1. [SUTTIE] Virus Alert from List Admin ( Update your AV software Now) ( march 11-2002)
    2. John A Hansen
    3. Dear All: Here is the latest alert issued today. It's a Level Three Alert. Note that this worm looks like it's coming from Microsoft with instructions to install. One of the Security houses also found that a version of this could be executed without activating the attachment. So download your AV patches ASAP. If the virus can activate without execution of the attachment then the thought that you are protected by not executing attachments is false. Note that these virus are not being transmitted through Rootsweb but are coming from people that you know and have your address in their email program. Best Regards John A Hansen List Admin [email protected] Discovered on: March 4, 2002 Last Updated on: March 11, 2002 at 07:17:27 AM PST Due to an increased rate of submissions Symantec Security Response has upgraded the threat rating of [email protected] from Category 2 to Category 3 as of March 11, 2002. [email protected] is a worm that uses Microsoft Outlook and its own SMTP engine to spread. This worm arrives in an email message--which is disguised as a Microsoft Internet Security Update--as the attachment Q216309.exe. Also Known As: W32/[email protected], WORM_GIBE.A, W32/Gibe-A Type: Trojan Horse, Worm Infection Length: 122,880 bytes Virus Definitions (Intelligent Updater): March 5, 2002 Virus Definitions (LiveUpdateTM): March 6, 2002 Threat Assessment: Damage: Payload: Large scale e-mailing: Sends to addresses found in Microsoft Outlook Address book and by searching of .htm, .html, .asp, and .php files. Compromises security settings: Installs a Backdoor Trojan which allows remote access to the infected system Distribution: Subject of email: Internet Security Update Name of attachment: Q216309.exe Size of attachment: 122,880 bytes Ports: 12378 Technical description: The fake message, which is not from Microsoft, has the following characteristics: From: Microsoft Corporation Security Center Subject: Internet Security Update Message: Microsoft Customer, this is the latest version of security update, the update which eliminates all known security vulnerabilities affecting Internet Explorer and MS Outlook/Express as well as six new vulnerabilities . . . How to install Run attached file q216309.exe How to use You don't need to do anything after installing this item. . . . Attachment: Q216309.exe The attached file, Q216309.exe, is written in Visual Basic; it contains other worm components inside itself. When the attached file is executed, it does the following: It creates the following files: \Windows\Q216309.exe (122,880 bytes). This is the whole package containing the worm. \Windows\Vtnmsccd.dll (122,880 bytes). This file is the same as Q216309.exe. \Windows\BcTool.exe (32,768 bytes). This is the worm component that spreads using Microsoft Outlook and SMTP. \Windows\GfxAcc.exe (20,480 bytes). This is the Backdoor Trojan component of the worm that opens port 12378. \Windows\02_N803.dat (size varies). This is the data file that the worm creates to store email addresses that it finds. \Windows\WinNetw.exe (20,480 bytes). This is the component that searches for email addresses and writes them to 02_N803.dat. NOTE: Norton AntiVirus detects all of these files as [email protected] except the 02_N803.dat. file, which contains only data. Finally, BcTool.exe attempts to send the \Windows\Q216309.exe file to email addresses in the Microsoft Outlook address book, and to addresses that it found in .htm, .html, .asp, and .php files and wrote to the 02_N803.dat file.

    03/11/2002 10:51:44
    1. [SUTTIE] Scottish Clan DNA Test Program Status Report march 1 2002
    2. John A Hansen
    3. Dear All: A Status Report on the Scottish Clan DNA program was emailed this morning to all the registered parties that had expressed interest. If I somehow overlooked you and: A: You are interested and and had sent a email to me B: You didn't send an email and are interested now C: And you did not receive a email today then please send an email to : [email protected] This is the address that the DNA testing program will use for their future communications. Brief Status: A: GeneTree was selected as the Testing Lab. Contract will be posted on the web site next week. B: A private web site is up to show status and discussion on results. C: Volunteers are still needed to run this program. The full report is available now on the web site. Best Regards John A Hansen

    03/02/2002 01:45:43
    1. [SUTTIE] Corrections from Hugh Wallis and one more search hint
    2. John A Hansen
    3. Dear All: Here are the corrections to my previous post regarding the search engine by Hugh Wallis. A: The index searches the LDS index.It is not a separate database. B: The index is North America ( with Canada first :-) C: Europe is limited to the UK at this time. The other search hint comes from one of the users. If you insert the batch number in the marriage index, it will list all the surnames in alphabetical order. A nice touch if there are potential spelling variations. My apologies to Hugh for the errors. Best Regards John A Hansen List Admin -----Original Message----- From: Hugh Wallis [mailto:[email protected]] Sent: Friday, March 01, 2002 1:31 PM To: 'John A Hansen' Subject: RE: Hugh Wallis Updates his IGI Database ! Thanks John but here is a very important correction: I have not "compiled those records into a database by Parish that allows searching all the surnames on all the particular film in that entire Parish" as that would be a violation of LDS's copyright. What I have done is created an index to the LDS's index and presented it in a way that enables you to go to the LDS site in an easy to use manner, directly from my site, without doing a lot of guesswork about what batch numbers are valid, searching for and retyping of batch numbers. Could you correct that point wherever you may have sent your original message please Many thanks Hugh -----Original Message----- From: Hugh Wallis [mailto:[email protected]] Sent: Friday, March 01, 2002 1:36 PM To: 'John A Hansen' Subject: RE: Hugh Wallis Updates his IGI Database ! Importance: High A further correction - not just the USA but all of North America (and I put Canada first you notice!!) Also I haven't done Europe - just the British Isles Thanks Hugh

    03/01/2002 07:43:10
    1. [SUTTIE] Hugh Wallis Updates his IGI Database !
    2. John A Hansen
    3. Dear All: The IGI parish database has now been extended to the USA as well as UK and Europe "So whats the big deal"? As many of you know and can correct my mis statements below :-) The IGI from the LDS has several components: A: The microfilm of the parish vital records took many hours to convert to digital format. There are of course still errors. There are also the normal errors from the basic data at the parish. These raw data errors on birth, baptisms, marriages, deaths etc are compounded by trying to interpret the handwriting of the local person and in the case of church records, the local priest or pastor. The conversion to digital format was then undertaken and so some more errors were introduced, however, the input was carefully reviewed and the translation from the handwriting was checked and double checked. So it's "pretty good". So the ability to quickly search these records in the parish provides a decent chance of finding a ancestor and the high quality of those records is valuable to all of us! Hugh has compiled those records into a database by Parish that allows searching all the surnames on all the particular film in that entire Parish. B: A second source of the IGI records was the submission by many people who submitted records. These records had some errors of fact and handwriting. Hugh has not included those as yet. Many people were becoming skeptics of the IGI due to the mixture of Class A and Class B records. In my view, while errors exist in all vital records, the Class A source should always be at least checked. The overall picture is one of a valuable source of records ( IGI) that are now available in a database that allows faster and more searching for records of the Class A. While people often moved, most did not move far. So a combination of searching a local parish and then moving to other nearbye local parish by using a parish map should reveal family connections. Then combine that with a census search and some brick walls may reveal some clues. So the original database is here and hope some of those hidden ancestors are found :-). Best Regards John A Hansen BTW: The original and complete database from the LDS is at www.familysearch.org. This database is organized by surname. There is also several other databases that provides lists of the films by parish and other books etc that are available. New records and information is constantly being added so check back often. http://freepages.genealogy.rootsweb.com/~hughwallis >From Hugh Wallis: <My first lot of North American numbers are up on the site - you can <get to them from the same page as before - http://freepages.genealogy.rootsweb.com/~hughwallis/ - there will be more to come if folks can tell me what ranges to look <in!! Please pass the word around All the very best Hugh Wallis Ontario, Canada Formerly of Surrey, UK>>

    03/01/2002 06:18:55
    1. [SUTTIE] Updated Clans Listing from Electric Scotland ( March 1 -2002)
    2. John A Hansen
    3. Dear All: Alastair MacIntyre is the editor and publisher of Electric Scotland website. He has been working to clarify the status of the Clans. The note below is from his Newsletter published today. The revised web site is now up and has referrals to the various clans and some of the related septs are also shown on another section. There is also a link to the Burkes Peerage that gives a free thumb nail sketch of many prominent Scottish people. This site is now the closest that I know of that takes into account the legal status from the Lord Lyon court, the approval of the Scottish Council of Scottish Chiefs and the pending status of the others. Here is the latest Clan review from Alastair at www.electricscotland.com. You can also subscribe to his weekly email magazine here as well.. Please forward to other lists and groups that may be interested. Best Regards John A Hansen Board and List Admin CLANS ----- Done another update on our Clan Menu. I've now classified the clans as... ***** = Officially registered clans, with Clan Chiefs, that are registered with the Lord Lyon Court. **** = Officially registered clans, without Clan Chiefs, that are registered with the Lord Lyon Court and hence are described as armigerous. *** = These are clans that are in the process of applying for registration. ** = These names are ones that we have some information on and may be septs of other clans or simply a name where several have got together to try and form a clan society. We may further sub divide this classification if we find a means of doing so. I will be doing some ongoing work on this classification business and am commencing a search for information on clans that we don't yet have information on. You can see the updated clan listings at http://www.electricscotland.com/webclans/clanmenu.htm

    03/01/2002 02:27:28
    1. [SUTTIE] Scottish History and Events From a web site in a Lighthouse in the shetland Islands
    2. John A Hansen
    3. Dear All: Here is another interesting web site. >From a web site in a Lighthouse on the West Coast of the Shetland Islands. The Shetland Island are about 60 degrees north ( about equal to Anchorage Alaska. They are above the Orkney Islands. This has to be one of the most northern web sites :-) Must be an interesting view to work from ! Complete History of Scotland http://claymore.wisemagic.com/scotradiance/scothistory.htm Lots of other Scottish Background and maps http://www.scottishradiance.com/index.htm Please foward to other sites and boards that may be interested. Best Regards John A Hansen Rootsweb Clan Admin

    02/28/2002 06:28:22
    1. [SUTTIE] IGI Database search for the UK
    2. John A Hansen
    3. Dear All: There is a IGI search program for the UK. This has been introduced yesterday. I checked it out today and it works fine. It allows you to search the IGI by parish and returns ALL the IGI records for that surname in that Microfilm. It covers both birth and marriages. It obviously took a lot of work to develop and cross\ index the IGI records by Parish in a database. http://freepages.genealogy.rootsweb.com/~hughwallis/IGIBatchNumbers.htm#Page Best Regards John A Hansen Admin

    02/16/2002 03:41:05
    1. [SUTTIE] FW: New MSN Messenger Worm > Not Cool
    2. John A Hansen
    3. Dear All: Here is a real early warning of a new Virus fresh from the testing Labs. You already know about not opening attachments etc from people you don't know etc etc. The format of this new worm has been in development for some time and you have all heard me talk and write about it. So don't open any URL's that you don't know. The AV software programs may be late as well in getting updates out quick enough. But at least update your AV software 2 to 3 times a week for the next few weeks. I do mine daily. There is a scheduler on most AV software and I just have it set to automatically download the latest every night at 3 am. While the first pass here may only be a "show off" piece I have seen vicious programs with deadly payloads that really do some damage and obtain key info that is then forwarded to foreign locations. The first wave will probably be labeled xxxxx.cool.html So watch for the "cool" part first. Later the url will carry other words or links that are designed to appeal to you in some way. Our genealogy hobby will be wide open. Be suspicious. Just because you're paranoid doesn't mean that there isn'tsomeone out to get you. Being paranoid about virii may keep you out of trouble.. This wave of virus attempts may be around for awhile. Best Regards John A Hansen -----Original Message----- From: Drew Smith [mailto:[email protected]] Sent: Wednesday, February 13, 2002 5:10 AM To: [email protected]; [email protected] Subject: New MSN Messenger Worm Heya folks, Ok, let's try this again, with a little more time spent on my side. ;) Tried to submit this earlier today, but got bounced for attaching the worm source to the message. So, this time, I'm attaching a URL instead, where you can go get the source if you want to see it. This worm *ripped* through our office today - it's one part flaw in Microsoft's security model and one part social engineering; it is a NON-MALICIOUS worm, but it effectively proves the concept, and I don't foresee more than a week or two before there's a nasty version. We've been calling it the "cool worm", after the original filename, "cool.html". I said *ripped*. I meant it. 40 people affected/infected in under 30 seconds. That's the dangerous part, I didn't even have time to go to the other room to let coworkers know what was up. The worm shows up as an MSN Messenger message that says "Go To http://www.masenko-media.net/cool.html NoW !!!". The user, obviously, clicks the URL, which takes them to the site, where the malicious code sits. The code opens the MSN Contacts list, then messages every contact with the message "Go To http://www.masenko-media.net/cool.html NoW !!!". Think about that for a second. Anyhow - the worm does nothing nasty, but the source to the (now down) masenko-media.net site also mails the hostname and user agent of the connecting host to "[email protected]". Looks to me like an experiment that got loose from the lab, but it demonstrates a *dangerous* flaw. Why can a webpage open the contacts list in the first place? What other hooks does MSN Messenger provide? Can you harvest email addresses from a contact list? Too many scary implications. Worm source (with a few important lines removed, so that it doesn't start popping up *everywhere*), available at: http://riotnrrd.com/cool-source.zip Cheers, - Drew. ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

    02/13/2002 01:35:23