Re: (erielack) New Virus

["Dick Honeyman" <hmanrr_@_rochester.rr.com>]

Careful on this one - I've seen it before.   I believe it's a hoax and the
file they suggest you find and delete is actually a NORMAL Windows 98
operating system file.  This would suck you into deleting it (then you'd
have to restore it from your windows CD).   I don't have Windows 98 so I
didn't get directly involved one way or another but I watched traffic from
some friends.  I'm sure other listers more expert than I am can confirm
whether this is hoax or real.

- -----Original Message-----
From: Rob Piecuch <rpiecuch_@_servtech.com>
To: ANDREW AVERY <AVERY69_@_prodigy.net>; Bob Gongleski
<gongo01_@_attglobal.net>; Bob hopkins <rhopkins@exotrope.net>; Bob Lenz
<RWLenz_@_aol.com>; Bob Pastorkey <RPastorkey@aol.com>; Bowers2, Ed
<ed.bowers2_@_lmco.com>; Bruce Hodges <Bruce101@aol.com>; Christopher R. Hauf
<crhauf_@_frontiernet.net>; Coates, Wes <CoatesW@amtrak.com>; Dan Aloi
<daloi_@_stargazette.com>; Drew Guild <Drewsales@aol.com>; Ed Bowers
<edbowers_@_mail.fc.net>; Ella Rayburn <ella_rayburn@nps.gov>; Erie Lackawanna
List <erielack_@_lists.railfan.net>; Francis MacDowell <FRANMAC1924@aol.com>;
Frank Barry <fb12_@_cornell.edu>; Frank Spena <fspena@stny.rr.com>; Fred
Buchholz <PRR4073_@_aol.com>; George Read <bnsf@twcny.rr.com>; Jack Manarky
<JMANARKY_@_aol.com>; James A. & Martha A. McMullen <jamakm@epix.net>; Jim
Taft <taft_@_mkl.com>; JJ Hults <trainbell@juno.com>; Joe Ogrodowski
<PolWar99_@_aol.com>; John Goodnough <jgoodnoughbmrrs@stny.rr.com>; Karyl Knee
<KarylIcons_@_aol.com>; Launcelot Erickson <IntercityRailPal@netscape.net>;
Leslie Porter <flyeagle_@_epix.net>; Lia Lando <LLando@Ackerley.com>; Marc
Terpolilli <terpstrains_@_aol.com>; Maxine Piecuch
<mpiecuch_@_mail.sctboces.org>; Milt Adams <madams1@stny.rr.com>; Pat McKnight
<Pat_McKnight_@_nps.gov>; Randy Rockwell <RR567591@aol.com>; Rick Kuehner
<NW1218_@_aol.com>; Sam Botts <sjbotts@aol.com>; Scott Gallagher
<gallagher_@_wbngtv.com>; Thom Coates <TJCoates@aol.com>; Wayne Campbell
<WCamp71_@_aol.com>
Date: Wednesday, May 30, 2001 11:54 PM
Subject: (erielack) New Virus


>I just received this, not sure how serious it really is, but everyone
>use your own judgement.... I followed the instructions and found nothing
>on my computer...
>
>> Folks.  I found this virus on my computer!!!   Check yours before the
>> virus is activated on June 1 st! Jay
>> ----- Original Message -----
>> From: Exec Trans Comm
>> To: Jay SchissellSent: Wednesday, May 30, 2001 2:21 PMSubject: Fw: New
>> Virus
>>
>> ----- Original Message -----
>> From: M.Baxter
>>  Sent: Tuesday, May 29, 2001 10:48 PMSubject: Fw: New Virus
>>  Better Safe than sorry......
>> ----- Original Message ----- Sent: Friday, March 23, 2001 2:54
>> PMSubject: Fw: New Virus
>>  URGENTAfter receiving the info below, I checked our computer, found
>> the file and deleted per instructions. Since we may have sent you an
>> e-mail sometime over the past few months,  please check your system.
>> This virus (which McAfee did not detect on our system) may have tagged
>> along. ----- Original Message -----From: Bob Ricks
>> <bricks_@_adrtech.com>To: A. Recipients <"Undisclosed
>> Recipients"@adrtech.com>Sent: Tuesday, May 29, 2001 5:07 PMSubject:
>> New Virus > Dear Friends;
>> >
>> > This was on all of ADR Tech's computers (nothing in the server) even
>> ones we
>> > don't use for e-mail.   Check yours too!
>> >
>> >
>> > C:\windows\command\SULFNBK.EXE
>> >
>> > Bob Ricks
>> >
>> > Subject: New Virus!
>> >
>> > I received this from a friend...It wasn't on my computer but you can
>> never
>> > be too safe..
>> >
>> >
>> >
>> >       THIS IS AN EMAIL THAT I RECEIVED THIS MORNING, AND SURE
>> >       ENOUGH, IT WAS ON MY COMPUTER.
>> >       CHECK YOURS NOW AND KEEP CHECKING IT UNTIL JUNE 1!!
>> >       Subject: RE: Virus, virus
>> >
>> >       It was brought to my attention yesterday that a virus
>> >       was on all of our computers here at work. I do not know how
>> >       long
>> >       it has been on our computers, but Virus software cannot detect
>> it. It
>> > will
>> >       not become active until June 1,
>> >       2001, at that
>> >       point it will become active and will be to late. It
>> >       wipes out all files and folders on the hard drive. This
>> >       virus travels thru
>> >       E-mail and migrates to the 'C:\windows\command'
>> >       folder. To find it and get rid of it off of your computer,
>> >       do the
>> >       following.
>> >
>> >       Go to the "START" button.
>> >       Go to "FIND" or "SEARCH"
>> >       Go to "FILES & FOLDERS"
>> >       Make sure the find box is searching the "C:" drive.
>> >       Type in; SULFNBK.EXE
>> >       Begin search.
>> >       If it finds it, highlight it.
>> >       Go to 'File' and delete it.
>> >       Close the find Dialog box
>> >       Open the Recycle Bin
>> >       Find the file and delete it from the Recycle bin
>> >       You should be safe.
>> >
>> >       The bad part is: You need to contact everyone you
>> >       have sent ANY E-mail to in the past few months. I do not
>> >       know how
>> >       long this has been on our computers. Two computers at
>> >       Midlands Tech. have been found with this virus on it. One I
>> >
>> >       had sent E-mail to, one I have not.
>> >
>> >       DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE NOR
>> >       NORTON CAN DETECT IT BECAUSE IT
>> >       DOES NOT BECOME A VIRUS UNTIL JUNE 1ST. IT WILL BE
>> >       TO LATE THEN. WHATEVER YOU DO, DO
>> >       NOT OPEN THE FILE!!!
>> >
>

------------------------------

End of ErieLack Digest V3 #210
******************************