BRADSHAW-L Archives

Archiver > BRADSHAW > 2001-04 > 0988572928


From: Jim Young <>
Subject: [BRADSHAW] ADMIN: Virus: W32/Badtrans@MM
Date: Sun, 29 Apr 2001 14:37:30 -0500


Dear Fellow Subscribers,

Discussing viruses on a genealogy surname discussion list is normally
"OFF-TOPIC".

However, W32/Badtrans@MM is a unique virus in that it sends itself from an
infected Microsoft mail program computer using email addresses found in the
"In-Box". This means that if you send a query to a RootsWeb surname list
and your query is distributed to a list subscriber who uses Microsoft mail
programs and whose computer is infected with the virus, the virus will
respond to your message returning the virus "README.TXT.pif" and other
file names as an attached file.

If you receive a response to your email, DO NOT OPEN THE ATTACHED
FILE UNLESS YOUR ARE EXPECTING AN ATTACHED FILE.

If each list subscriber does not have an antivirus program or updated their
Virus definition file since about 18 April 2001, please take action
immediately to either update the Virus definition file or purchase an
antivirus software program.

I'm not attempting to alarm anyone, only to inform. Please continue to
post queries to genealogy discussion list... but be careful of any response
having an attached file. The infected subscriber does not know that they
have the virus or that the virus is using their computer to send the virus
to every everyone that they have received a message from.

If anyone on this list receives a response with an attached virus from this
list as a result of posting a query on this list, please kill the virus
(deleting the attached file) and forward the message to me. I will work
with the subscriber in removing the virus from their infected computer.

Regards,

Jim Young
List Admin


This thread: