McAfee.com has seen a large and growing number of systems infected with the W32/magistr.b@mm worm in Europe and South America. Currently, there is a low incidence of this worm in North America. This is a MEDIUM RISK virus that is spread via email. The messages sent by the worm contain varying subject headings, body text and attachments The body of the message is derived from the contents of the victim's computer. It may send more than one attachment and may include non-EXE or non-viral files along with an infectious .EXE file. Five minutes after the virus is activated, it attempts to send copies of itself to email addresses found in the Windows Address Book and in the Outlook Express, Netscape and Eudora mailboxes on the hard drive. The virus payload may also cause the following: 1. Erasure of CMOS/BIOS info 2. Destruction of sectors on the hard drive 3. Deletion of all .NTZ files on the machine 4. Termination of Zone Alarm firewall program 5. Creation of a system.ini (boot) shell value to run itself at startup 6. Overwrites the Win.Com/ntldr AS always...no virus or worm can be spread through rootsweb's servers but it has long been my policy to inform all subscribers on lists that I mind to inform people that possible dangers are "out there". Please be sure to update your virus protection program immediately and remember that if your program can't be updated it will not protect you from newly written virus. If you have question please send them to jreece@icx.net Thanks! Joyce G. Reece, Rootsweb Listminder for South East Tennessee, North East Tennessee, Meigs County, Tennessee. The Mailing Lists and Rootsweb Message Boards of Knuckles, Raper, Gilbreath and Hembree