It appears the virus that has been up for discussion is being sent via Genealogy mailing lists; similar to the one that had been passed on last spring.. I too was infected, but have been able to remove it. Following is a portion of an E-mail I sent to resent correspondents that I may have inadvertently passed the virus on to. It may be helpful to those who are having trouble understanding the virus and what to do about it............ A new variant of the BadTrans virus, which was first detected in the spring, emerged on November 24, 2001. It does not require the email receiver to open the attachment for it to execute. It uses a known vulnerability in Internet Explorer-based email clients (Microsoft Outlook and Microsoft Outlook Express) to automatically execute the file attachment. This is also known as Automatic Execution of Embedded MIME type. RECENT UPDATE NOTE: it appears it is affecting more than Microsoft Outlook and Outlook Express clients. The problem with this VIRUS is that even if your virus protection software does detect it, it may not be able to clean it (some software programs). The below link is the best explanation of this virus I found and ALSO gives detailed instructions on how to clean it from your computer if you have been infected. http://antivirus.about.com/library/weekly/aa112401a.htm?iam=spkask&terms=wha t%20is%20kernel32.exe%20file If you haven't updated your virus definitions and/or patterns in the last week or so, I URGE you to do so immediately. If your virus protection software is out-of-date, you might want to run the following FREE program to check your computers. TREND MICRO offers this free detection service. It is the best and most up-to-date out there on the Internet. It is and EXCELLENT site to bookmark and run occasionally. http://housecall.antivirus.com/housecall/start_corp.asp Carole Haas cjhaas@msn.com ----- Original Message ----- From: <WIMILWAU-D-request@rootsweb.com> To: <WIMILWAU-D@rootsweb.com> Sent: 30 November, 2001 5:12 AM Subject: WIMILWAU-D Digest V01 #138