----- Original Message ----- From: "Pam" <par3@sccoast.net> To: <VAWISE-L@rootsweb.com> Sent: Monday, May 07, 2001 8:08 PM Subject: Re: [VAWISE] Virus > help us out here: what was the name of the virus? > ----- Original Message ----- > From: "Billy Sykes" <bgoat@bright.net> > To: <VAWISE-L@rootsweb.com> > Sent: Monday, May 07, 2001 7:57 PM > Subject: [VAWISE] Virus > > > > Someone is sending a virus on rootsweb,McAfee detected this last night on > incoming mail from VAWISE-Lrootsweb,be careful! > > Billy > > > > > W32.BADtrans.13312@mm MOOSE\INBOX >

Here is a little information about this virus BADTRANS,, which has been hitting Rootsweb lists in many places....again, the list is not passsing it to anyone...read below. John RootsWeb lists are virus-free and you won't receive any viruses through the lists. However, there is a virus going around currently called Bad Trans that can "trick" you into thinking it is coming from a list. A list subscriber has informed me that at least one subscriber to [insert list name here] is or was infected by this virus. Here is how it works so that you can recognize it and avoid it. A list subscriber posts a message to the list and the message is then sent out to everyone on that list (no viruses involved). Someone who is a list subscriber is already infected with the virus (their computer is that is). When the list message arrives in that infected person's inbox the virus works by sending a reply to the person whose address is in the FROM line of the message (i.e. the list poster). The Bad Trans virus works in this manner and it tricks the recipient into thinking that the list is involved when it is only the means by which the poster's address arrived on the infected person's computer--the virus never came through the list. The reply with the list message quoted and the attachment with the virus included is then sent to the original poster. That is why so many folks are fooled into opening the attachment. They think it is ia legitimate response to their query. Anyone who clicked on the attachment would have gotten a message saying that the file was corrupted but that is the virus sending that message, and seeing that message indicates that your computer *has* been infected with the virus. If you think you might be infected with this virus please obtain updated anti virus software and scan and clean your system. BE VERY CAUTIOUS ABOUT: Opening mail from any address you don't know!