STEWART-L Archives

From: Jean Snow <>
Subject: [STEWART-L] Viruses
Date: Wed, 28 Nov 2001 09:00:56 -0800

I've been attacked 4 times* in the last few days (fortunately, I'd just
updated Norton Anti-Virus and it caught them immediately). They seem to
have come not from a RootsWeb list, but from members of the lists and are
proliferating like crazy (one poster got 400!)
1. Be sure to update and use your virus scanning software (I'm using it now
every time I download mail or go on the Internet)
2. The attachment the virus/worm rides on may be invisible, but a clue is a
letter from someone whose return address begins with an underline (for
example: _snowstaretc.) The message will be empty (that surprised me, but
though I trashed them, Norton had picked up and quarantined the virus.
3. Someone wrote that only MS email users are vulnerable, but I use Eudora
and was hit.
4. You need to write the person who sent you the virus (empty message) and
of course, delete the underline from the address (or it won't be sent) to
tell them their computer is infected.

One, at least, is a new strain of the virulent BadTrans. virus. Many have
suffixes like .scr, .pif, and one I received came as a .exe file (.exe is a
program, and I never, NEVER open one). Good luck. Jean

*DDMNLPDD.exe, infected with W95.Hybris.worm
*Humor.MP3.scr, infected with W32.BadTrans.B@mm
*S3MSONG.doc.scr
*Hamster.doc.pif

This thread:

• [STEWART-L] Viruses by Jean Snow <>