From: "Gail Meyer Kilgore" <>
Subject: Virus's
Date: Thu, 26 Apr 2001 21:05:44 -0700
Boy as many times as you have patiently read my griping about posting virus
information to a list....here goes....I figured that if I just got warned by
one of the State Coordinator's for the USGenWeb Project then maybe I had
better pass the word...
So here goes.....
Folks,
I think that it would be wise to pass information about this virus on to
any lists you own.
The worm virus W32.Badtrans.13312@mm was just discovered April 11th of
this year. If you have not updated your anti-virus definitions since
then, you need to do so.
What this bad boy does is reply to all unread emails in your email
message folders, and passes on the infecting virus in attachments called
any of the following:
Pics.ZIP.scr
images.pif
README.TXT.pif
New_Napster_Site.DOC.scr
news_doc.scr
hamster.ZIP.scr
YOU_are_FAT!.TXT.pif
searchURL.scr
SETUP.pif
Card.pif
Me_nude.AVI.pif
Sorry_about_yesterday.DOC.pif
s3msong.MP3.pif
docs.scr
Humor.TXT.pif
fun.pif
If you have tried to open any of these attachments, you are infected and
must "disinfect" your system. If you are not comfortable handling this
yourself, contact your computer support person right away.
Since the worm only responds to unread mail, after waiting 5 minutes,
until you are "cured," quickly open or mark all your currently unread
mail as having been read. If you have no unread mail, the worm cannot
send out any messages. (Note: This is not a fix. It is only a work
around to protect all the folks who contact you by email.)
If you receive an email with this attachment, DO NOT OPEN IT. However,
please advise the sender that they are infected. Instructions about
what to do can be found at:
http://www.symantec.com/avcenter/venc/data/ type="text/javascript">DisplayMail('mm.html','w32.badtrans.13312');
Remember: The key is UNREAD messages.
It can appear that you are receiving the message from the list, if the
worm is replying to an unread list message. Since no attachements can
be posted to the list, thankfully everyone on the list will not receive
the worm carrying emails. However, list members are vulnerable, if
another list member, who is infected, leaves leaves unread list messages
in their message folders. Consequently, I believe it is important to
warn you about this worm virus.
As always, I request that we not discuss the situation on the list. If
you have any questions, please contact me directly. Be sure to notify
anyone from whom you have received the attachments named above. That is
the only way they can know they are infected.
And, then added by another..
Also, if you receive any complaints from posters to your GenConnect boards
that they have received the virus in response to their post, please explain
to them that the virus isn't being sent by RootsWeb or GenConnect--it is
being sent by someone on the board notices list whose computer is infected
with the virus.
Sorry about this but if you get mega email's be prepared... I have just
found it best not to open any attachments....
Thanks for your time...
Gail
List Hostess