[Ravensfort] LOOK FOR THIS FILE & DELETE IT

[Berta Allen]

This is a multi-part message in MIME format.
--
Sorry for the bandwidth, but check your files for this... I found it on
ours & I am sending it to every email addy I have. I apologize. If you have
already received this message, sorry for the reduncency. Read the attached &
do the steps & it takes it off. I'd rather be redundent than sorry.
Thanks,
Chrystal/Berta

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
--
X-Stn-Info: 

[ Converted text/html to text/plain ]

Hi folks,

Just read this today and found it on my friends computer as I have been
checking my e-mail there lately.  Don't know much more than the following.
Sorry for the inconvenience.  Hazard of the computer age I guess.

Katie
>From: Barlcana at aol.com
>To: Barlcana at aol.com
>Subject: You guys might want to read this...VIRUS ALERT FROM MY COMPUTER
>Date: Tue, 29 May 2001 08:23:42 EDT
>
>Yes, folks, it appears that my Brother-in-law has given me a "sleeper", and
>it is due to "awaken" on June 1st. I KNOW I have it, and have deleted it.
>PLEASE check your computers. I am sorry if I gave it to you, but at least
>now I have warned you!
>
>Rachel

--
From: Hedg12 at aol.com
Full-name: Hedg12
Date: Mon, 28 May 2001 23:37:31 EDT
Subject: You guys might want to read this...
To: BHe7418101 at aol.com
CC: tharpo at socencom.net, sed at southwind.net, ghedges at dns1.sjcoe.net,
    Barlcana at aol.com, teresah99 at hotmail.com, macelind2914 at hotmail.com,
    pklindquist at hotmail.com, BeckyLitch at aol.com
X-Plaintext: Picked text/plain from multipart/alternative

--
[ Picked text/plain from multipart/alternative ]
I read this in a newsletter I subscribe to.  I normally don't freak out about
these things, but this newsletter is from a reputable source so I checked all
my machines.  Sure enough, the file was in them all.  It was created on Kim's
laptop back on April 10th, and our desktops and my laptop on the 11th.

>
I received this virus warning Sunday morning, May
27.
I followed the instructions and sure enough, my
computer was infected. I've got anti-virus software
and it did not pick it up! As a backup, I
contacted 8 other people to see if they had it, 6
did and 2 didn't. The 2 who did NOT have it were
'isolated' machines and did not have internet email
access.

Additionally, our EZine does not have the ability
to send this virus to you as it is mailed through a
CGI Script on a LINUX machine, and this is a
Windows based virus.

I followed the below instructions, with 1 (one)
exception:

I copied the file to a diskette prior to emptying
the Recycle Bin. You never know, may need to
forward it to one of the virus companies to
analyze.

Ok, here is goes...

Please read the following carefully.

URGENT. A VIRUS could be in your computer files
now, dormant but will become active on June 1.
FOLLOW DIRECTIONS BELOW TO CHECK IF YOU HAVE IT AND
TO REMOVE IT NOW.

It was brought to my attention yesterday that a
virus is in circulation via email. I looked for it
and to my surprise I found it on mine. ..

Please follow the directions and remove it from
yours TODAY!!

No Virus software can detect it. It will become
active on June 1, 2001.

It might be too late by then. It wipes out all
files and folders on the hard drive. This virus
travels through E-mail and migrates to the

'C:\windows\command' folder. To find it and get
rid of it off of your computer, do the following.

Go to the "START" button.
Go to "FIND" or "SEARCH"
Go to "FILES & FOLDERS"
Make sure the find box is searching the "C:" drive.
Type in; SULFNBK.EXE
Begin search.

If it finds it, highlight it.
Go to 'File' and delete it.
Close the find Dialog box
Open the Recycle Bin
Find the file and delete it from the Recycle bin
You should be safe.

The bad part is: You need to contact everyone you
have sent ANY E-mail to in the past few months.
Many major companies have found this virus on their
computers. Please help your friends !!!!!!!!

DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE and
NORTON CANNOT DETECT IT BECAUSE IT DOES NOT BECOME
A VIRUS UNTIL JUNE 1ST.

WHATEVER YOU DO, DO NOT OPEN THE FILE!!!


I would imagine that there's another file somewhere in our machines that
causes this file to become active on a certain date.  If you find and remove
the SULFNBK.EXE  file, you may get a "windows cannot find..." error the first
time you start your computers after June 1st, but at least the virus won't do
any harm.

Of course, this only applies to you more sensible of my siblings who use
PC's.  You Mac users are on your own!  (You Mac guys may have the virus, but
I don't know how to go about getting rid of it on a Mac.) (Sorry.)

J
--

--part1_9c.ea3d78d.2844eece_boundary--