X-Authentication-Warning: delorie.com: mailnull set sender to djgpp-bounces using -f
Newsgroups: comp.os.msdos.djgpp
From: Ed Jezak <ejezak AT cogeco DOT ca>
Subject: Re: VIRUS ALERT and instructions
References: <20011228 DOT 092126 DOT 8894 DOT 0 DOT vmccar AT juno DOT com>
Message-ID: <slrna2v3er.3vvnq9j.ejezak@co217348-a.kico1.on.cogeco.ca>
User-Agent: slrn/0.9.7.3 (Win32)
Lines: 77
Date: Sun, 30 Dec 2001 21:58:37 GMT
NNTP-Posting-Host: 24.226.26.61
X-Complaints-To: abuse AT cogeco DOT ca
X-Trace: read1.cgocable.net 1009749517 24.226.26.61 (Sun, 30 Dec 2001 16:58:37 EST)
NNTP-Posting-Date: Sun, 30 Dec 2001 16:58:37 EST
Organization: Cogeco Cable
To: djgpp AT delorie DOT com
DJ-Gateway: from newsgroup comp.os.msdos.djgpp
Reply-To: djgpp AT delorie DOT com

On Fri, 28 Dec 2001 09:21:23 -0800, Vince D McCarthy <vmccar AT juno DOT com> wrote:
> This e-mail message came from a friend that e-mails me a lot. The virus
> referred
> to I found on my hard drive in "C:\WINDOWS\COMMAND". I followed the below
> instructions and found the virus. It only takes a few minutes to do and
> will
> save a lot of problems
> Vince.....
> 
> To all contacts in my address book:                                      
>     
>    Many apologies for this, but I have picked up a virus that is
> transmitted
> automatically via address books. Because I have your address means that
> you're likely to have the virus.
>    The virus is not detected by McAfee or Norton, and lies dormant for 14
> days before it then closes down your entire system!  THE PROBLEM IS I
> DIDN'T
> CHECK MY EMAIL UNTIL 12/26/01 AND MY FRIEND SENT THIS TO ME 12/18/01. SO
> WE
> ONLY HAVE A COUPLE DAYS LEFT.
>    The attached instructions is simple yet effective method of finding
> and 
> deleting the virus before it can do you any harm. PLEASE ACT PROMPTLY!!! 
>     
>    This is a virus that is spread from address book to address book. It
> is
> apparently undetectable by Norton and Mcafee. It remains dormant for
> about
> 14 days. the activates and wipes out the hard drive data. The directions
> for
> removing it are easy.
>  1. Go to 'start' -then to 'find or search'  (depending on your computor)
>  2. In the 'search for files or folders' type in sulfnbk.exe - this is
> the 
>     virus.
>  3. In the 'look in' make sure your're searching Drive C.
>  4. Hit 'search' button (or find)             
>  5.If this file shows up (it's an ugly blackish icon) that will have the
>     name "sulfnbk.exe")
> 
>                        ******* DO NOT OPEN IT. ********
> 
>   6. Right click on the file - go down to delete and left click.      
>   7. It will ask you if you if you want to send it to the recycle bin,
> say
>      yes.
>   8. Go to your desktop (where all your icons are) and double click on
> the
>      recycle bin.
>   9. Right click on sulfnbk.exe and delete again - or empty the bin. If
> you
>      find it, send this email to all in your address book, because that's
>      how it's transferred.
> 
> 
>                         ALTERNATE METHODS OF DISPOSAL
>   1. After finding the virus through search, go to Windows Explorer and
>      go to the C:hard drive. Then scroll down to the Windows Folder and
>      open it. Then scroll down to the Windows Command folder and scroll
>      down until you find the file "SULFNBK.EXE with icon" and highligh
>      this file. Then click on "FILE" at top of screen, open that window
>      and click on delete. Yes you want to send it to the trash bin!
> 
>                             DOS METHOD 
>    2. Go to the DOS Prompt and cd "C:\WINDOWS\COMMAND" and do a
>       "DIR sulfnbk.exe" if found delete it.
> 
>  Once again, many apologies. The instructions are simple and effective.
> Do 
>  it now.


-- 
Ed Jezak
Kingston, Ontario
Canada