Thanks, Jon! You are a lifesaver. I'm glad I didn't do anything yet, 
and I'll also cc this to Rae. If she has already deleted this file on 
her computer, is there any way she can easily restore it, and does 
she need to?
    Take care, -- Valerie

To:                     [EMAIL PROTECTED]
From:                   Jonathan Falk <[EMAIL PROTECTED]>
Subject:                Re: [folkschool-list] (Fwd) Fwd: Rae's address book received a
        virus READ NOW
Date sent:              Mon, 17 Dec 2001 07:38:19 -0500
Send reply to:          [EMAIL PROTECTED]

> Valerie-
> 
> This is a hoax, designed to get you to delete a legitimate Windows
> file -- just ignore it.  The file it mentions, sulfnbk.exe, is a
> Microsoft Windows utility that is used to restore long file names. 
> You can read all about it at:
> <http://securityresponse.symantec.com/avcenter/venc/data/sulfnbk.exe.w
> arning.html>
> 
> Jon
> 
> 
> At 10:27 PM 12/16/2001 -0500, you wrote:
> >Hi, Jon --
> >    I wonder if you can verify that the procedure suggested
> >below is an acceptable way to check for, and delete, the apparent
> >virus described in the email I received below, from my friend Rae
> >Wren. I have no evidence that I've gotten the virus, and I do have an
> >updated Protector Plus protection software on my computer. There were
> >not any attachments involved or weird file names, so I assume this
> >was a legitimate email from her personally. Is there any risk to
> >following these directions? I have not done so yet. Please advise!
> >Thanks, Valerie C.
> >
> >------- Forwarded Message Follows -------
> >Date:          Sun, 16 Dec 2001 22:17:22 -0500
> >Subject:       Fwd: Rae's address book received a virus READ NOW To: 
> >          [EMAIL PROTECTED] From:          "Valerie Carter"
> ><[EMAIL PROTECTED]>
> >
> >I was on an email list that received a virus that's being passed via
> >address books.  I did have the virus and I'm sending you this because
> >you are in my address book.  Sorry!  The virus is easy to remove. 
> >Follow the directions below.  If you find it, just be sure to use the
> >RIGHT click on the mouse when you are about to send it to the recycle
> >bin.
> >
> >This is a virus that is spread from address book to address book.  It
> >is apparently undetectable by Norton and McAfee.  It remains dormant
> >for about 14 days then activates and wipes out the hard drive data.
> >
> >The directions for removing it are easy.
> >1. Go to "start" - then to 'find or search' (depending on your
> >computer). 2. In the "search for files or folders" type in
> >sulfnbk.exe -- this is the virus. 3. In the "look in" make sure
> >you're searching Drive C. 4. Hit "search" button (or find) 5. If this
> >file shows up (it's an ugly blackish icon that will have the name
> >"sulfnbk.exe")
> >
> >DO NOT OPEN IT.
> >
> >6. Right click on the file -  go down to delete and left click.
> >7. It will ask you if you want to send it to the recycle bin, say
> >yes. 8. Go to your desktop (where all your icons are) and double
> >click on the recycle bin. 9. Right click on sulfnbk.exe and delete
> >again - or empty the bin.
> >
> >If you find it send this email to all in your address book, because
> >that's how it's transferred.
> >
> >**Folkschool-list archives are at:
> ><http://www.mint.net/folkschool/helpnet/archives.htm>
> >        Sponsored by Pine Tree Folk School
> >
> 
> Jonathan Falk
> Pine Tree Folk School
> RR 2, Box 7162
> Carmel, ME  04419
> (207)848-2433
> <http://www.ptfolkschool.org>
> 
> 
> 
> **Folkschool-list archives are at:
> <http://www.mint.net/folkschool/helpnet/archives.htm>
>        Sponsored by Pine Tree Folk School
> 
> 

**Folkschool-list archives are at:
<http://www.mint.net/folkschool/helpnet/archives.htm>
       Sponsored by Pine Tree Folk School

==^================================================================
This email was sent to: [email protected]

EASY UNSUBSCRIBE click here: http://topica.com/u/?a84vzQ.a9gqS3
Or send an email to: [EMAIL PROTECTED]

T O P I C A -- Register now to manage your mail!
http://www.topica.com/partner/tag02/register
==^================================================================


Reply via email to