Re: yes, it was a real virus -- Procedure

["Frank St. Claire" <fstclair@airmail.net>]

Upon discovering the virus before anything was posted in the list-serve, I 
sent you an e-mail at owner-sinclair@mids.org in hopes that that e-mail 
would come to you without propagating it to the entire group. My questions are:

1. Was this appropriate?
2. Did you receive it?

I tend to lurk here since most of my genealogy back to Alexander Sinclair 
[with Wayman Sinckler (c. 1708-1762) as son in Louden County VA. USA] is in 
Jean Grigsby's Volume 1 of Sinkler/Sinclair/St.Clair. (My family is at p. 
233 of the book). I am sure if this were possible to trace back further, 
Jean would have done it during the last 12 years!  Any leads would be 
greatly appreciated.

Frank St. Claire
(the "e" was added by my grandfather).

At 04:28 PM 3/6/00 -0600, you wrote:
> >Does any one of you know how to remove this virus as I was stupid enough
> >to open it... I thought our list was secure.....
>
>There is nothing the list can do to prevent people from executing files
>they receive in the mail.
>
>However, I will look into having the list software remove all executable
>attachments.
>
> > and why did my virus guard not warn me???
>
>No idea.  This particular virus is so well known that even I recognized it
>by name.
>
> >What damage am I about to experience?
> >
> >Help!
>
>This text has been in
>  http://www.mids.org/sinclair/list.html
>for some time:
>
>Viruses
>
>    Do not send virus reports to this list. Most virus reports turn out to
>    be hoaxes, so forwarding a virus report without examination is like
>    shouting fire in a crowded theater. To find out which are real and
>    which are hoaxes, myths, and urban legends, try these URLs. But do not
>    send virus reports to this list.
>
>    real viruses [58]http://www.datafellows.com/virus-info/
>
>    hoaxes [59]http://www.datafellows.com/virus-info/hoax/
>
>    myths [60]http://kumite.com/myths/index0.htm
>
>    urban legends [61]http://www.urbanlegends.com/
>
>Since for once this actually was a real virus, I will not enforce the
>rule about not discussing viruses on this list.
>
>If you follow the first link, you will find a listing of viruses, and
>among them Pretty Park.  Here's an extract from
>  http://www.datafellows.com/v-descs/prettyp.htm
>
>  The 'PrettyPark' also known as 'Trojan.PSW.CHV' is an Internet worm, a
>  password stealing trojan and a backdoor at the same time. It was reported
>  to be widespread in Central Europe in June 1999.
>
>In other words, just because you don't see any damage doesn't mean it
>isn't doing any.  The original message with the virus wasn't sent by
>the person in its From: line; it was sent by the virus.  That's how
>a worm like this works.
>
>So any of you who opened the message need to clean your systems.
>How?  See the above links.  If you need more assistance than that, I'm
>afraid you'll have to ask somebody else (maybe Milamba), because I don't
>use Microsoft software.
>
> >Lena
>
>John
>[ This is the Sinclair family discussion list, sinclair@mids.org
>[ To get off or on the list, see http://www.mids.org/sinclair/list.html

---------------------------
Frank St. Claire
fstclair@airmail.net
----------------------------

[ This is the Sinclair family discussion list, sinclair@mids.org
[ To get off or on the list, see http://www.mids.org/sinclair/list.html