Hi folks, As everyone must know by now there is a virus problem going around called Badtrans B. You can look at the viruseye page and learn that it is already the third worst computer virus ever and a few other interesting things. http://www.messagelabs.com/viruseye/ On the one hand, I can and will encourage everyone to take appropriate precautions. But on the other hand, remember we went through Badtrans A last spring and the only list mail that I remember about it was a warning I posted. We really had few problems and I think I only temporarily unsubbed one or two people.So its not the end of the world by any means. The other day I encouraged folks that wanted more info on viruses and precautions to subscribe to the virus list at http://lists.rootsweb.com/index/other/Internet_Help/ and still believe that is the most appropriate forum. However, it is so busy right now (300-600 posts a day) and there are a few on that list posting misleading info that it really is not a good forum right now. So since viruses are usually off topic for genealogy list but given the situation on the virus list and the fact that the members of this list have always shown good judgement on postings, I'm not going to complain about virus posts being off topic if the list members feel it is important. There is a bit of a false rumor that this virus inspires and that is that subscribers receive the virus from the list at Rootsweb. Rootsweb does not have the ability to email attachments or html (fancy) email. That prevents Rootsweb from emailing a virus or any type of attachment. However, a computer that is infected with the Badtrans virus will automatically and without the knowledge of the computer owner, reply to any email it receives by sending back an email with a virus. So if you post to the list with a subject line [WiMilwau]"Joe Smith", and someone else has an infected computer, it will respond with a message subject line "Re:[WiMilwau] Joe Smith" It will be about 40k in size. It is very deceiving and very effective in that regard. That is why I feel with this virus only, it is necessary to unsub infected computers. A note on that as well: It appears that I can change infected computers over to the digest form of this list temporarily rather than unsubbing. The address is a bit different and the virus will respond by replying to the list address which will bounce to me. I have mountains of antivirus protection it is a trivial concern then. The folks most vulnerable to this virus use MS Outlook, and Outlook Express Email, Windows operating systems, Internet Explorer browsers, lack or haven't updated their antivirus within the last week, lack a firewall, and lack a virus filtered ISP. Hopefully I covered most of the points and we can go on, but ask questions if there are any. Everytime there is a significant virus it is kind of a learning process. Bob Fay List Admin On 30 Nov 2001, at 12:08 cjhaas <cjhaas@email.msn.com> wrote: > It appears the virus that has been up for discussion is being sent via > Genealogy mailing lists; similar to the one that had been passed on last > spring.. I too was infected, but have been able to remove it. > Following is a portion of an E-mail I sent to resent correspondents that > I may have inadvertently passed the virus on to. It may be helpful to > those who are having trouble understanding the virus and what to do > about it............ > > > > A new variant of the BadTrans virus, which was first detected in the > spring, emerged on November 24, 2001. It does not require the email > receiver to open the attachment for it to execute. It uses a known > vulnerability in Internet Explorer-based email clients (Microsoft > Outlook and Microsoft Outlook Express) to automatically execute the file > attachment. This is also known as Automatic Execution of Embedded MIME > type. RECENT UPDATE NOTE: it appears it is affecting more than > Microsoft Outlook and Outlook Express clients. > > The problem with this VIRUS is that even if your virus protection > software does detect it, it may not be able to clean it (some software > programs). The below link is the best explanation of this virus I found > and ALSO gives detailed instructions on how to clean it from your > computer if you have been infected. > > http://antivirus.about.com/library/weekly/aa112401a.htm?iam=spkask&terms > =wha t%20is%20kernel32.exe%20file > > If you haven't updated your virus definitions and/or patterns in the > last week or so, I URGE you to do so immediately. > > If your virus protection software is out-of-date, you might want to run > the following FREE program to check your computers. TREND MICRO offers > this free detection service. It is the best and most up-to-date out > there on the Internet. It is and EXCELLENT site to bookmark and run > occasionally. > > http://housecall.antivirus.com/housecall/start_corp.asp > > Carole Haas > cjhaas@msn.com > > > > ----- Original Message ----- > From: <WIMILWAU-D-request@rootsweb.com> > To: <WIMILWAU-D@rootsweb.com> > Sent: 30 November, 2001 5:12 AM > Subject: WIMILWAU-D Digest V01 #138 > > > > > ==== WIMILWAU Mailing List ==== > For subscribe/unsubscribe and other general list information, please see > http://freepages.genealogy.rootsweb.com/~sewis/wimilwau.htme > > ============================== > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > Source for Family History Online. Go to: > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 > >