Hi Folks,
While I don't normally send out virus warnings and DO thoroughly check them
out before saying anything, this one almost got me this weekend and has been
received 10 times again since. Before I continue, let me tell you two
things to reassure you. #1: Rootsweb lists are incapable of sending or
receiving attachments and/or HTML mail, so you will not get this worm from a
Rootsweb list. #2: Please note that as far as we currently know this worm
only affects those using Outlook Express and Netscape Mail as their email
programs, but it is a clever worm that is constantly morphing so please be
aware. Now, several of you may have received mail that LOOKS like it is
from a Rootsweb list that is carrying the virus, but the important thing
here is that this worm is capable of "forging" it's to AND from lines so
that while it is not actually coming from a Rootsweb list, it looks like it
is. Rootsweb has posted information on this particular worm here:
http://helpdesk.rootsweb.com/virus1.html that explains the "forging" and
Symantec (the makers of Norton Antivirus) has information about the worm and
how to remove it as well at
http://www.symantec.com/avcenter/venc/data/worm.newapt.html Basically the
best rule of thumb is NEVER open an attachment you know nothing about and if
in doubt, email the "sender" to make sure that they are actually trying to
send you something. ALWAYS update your virus software (i.e.. once a week is
best) and ALWAYS scan any files before opening. Below is the post that was
sent on to us on the listowners list by
MessageMates.com. Thanks Carole for
the info!
Christi
Visit our homepage at:
http://users.idworld.net/brogan
Visit our genealogy pages at:
http://homepages.rootsweb.com/~cbrogan
Join us for Y2KCountry!
http://www.onelist.com/subscribe/y2kcountry
-----Original Message-----
From: Carole Rohrings [mailto:rohrbach@jnb.com]
Sent: Saturday, December 18, 1999 11:25 AM
To: listowners-L(a)rootsweb.com
Subject: re: the virus of yesterday
IMPORTANT NOTICE:
We have just learned that an email worm has been found circulating the
web referencing
MessageMates.com. This worm file is in no way connected
with
MessageMates.com. If you have received an email with a message that
reads:
he, your lame client cant read HTML, haha. click attachment to see some
stunningly HOT stuff
or
http://stuart.messagemates.com/index.html
Hypercool Happy Year 2000 funny programs and animationsÖ.
We attached our recent animation from this site in our mail! Check it
out!
Then you have been passed the Worm in question. It is a worm that
was created and set loose by someone who ís trying to spoil all of our
Holiday fun. Do not run the attachment included in the email and please
delete the email message immediately! What we know about this Worm so
far:
1. Symantec has named this worm: W32.NewApt.Worm.
2. Once opened/launched the worm will email itself out and reply to
messages in your mailbox.
3. The file being passed as an attachment is approximately 68K.
4. The subject line of this message will vary and may appear to be
a reply to something youíve previously sent.
5. The attachment is no way related to any
MessageMates.com
products.Ý
What you can do:
1. Read the details of this worm virus by checking with Symantec
at:
http://www.symantec.com/avcenter/index.html
2. If you receive a suspect email with an .exe attachment from
someone, first email them back and confirm that theyíve intended to send
you a MessageMate.
What we can tell you about
MessageMates.com:
1. Our millions of loyal users are our number one priority and we
are fully committed to providing software programs that are safe and
fun.
2. We never send out any unsolicited emails.
3. We never send out attachments.
4. Our files are 100% safe when downloaded directly from our web
site.
Please know that we at
MessageMates.com have worked tirelessly to earn
your trust and respect. We take great pride in our products and only
want our users to have a positive and entertaining experience with them.
Thank you for taking the time to read this very important notice. If you
have any questions or comments, please email me directly at
cheitmann(a)adtoolsinc.com
Chris Heitmann
Chief Operating Officer
Carole Rohrings
rohrbach(a)jnb.com