Country Coach Owners Forum

Country Coach Restoration, Repair & Parts Forums => Country Coach Archive => Topic started by: Carol Tiberi on December 02, 2001, 10:07:09 am

Title: Virus alert - please read
Post by: Carol Tiberi on December 02, 2001, 10:07:09 am
Yahoo Message Number: 838 (http://groups.yahoo.com/neo/groups/Country-Coach-Owners/conversations/messages/838)
THIS IS URGENT!!!
 
I received an e-mail today from someone saying that she had been sent a virus and it showed up on her computer.  The virus was sent to everyone that she e-mailed in the past month.  I found that I DID, IN FACT, HAVE THE VIRUS, so I am now e-mailing you to tell you how you can check for and delete the virus.  It's very simple.
 
This virus is programmed to activate after being on your Hard Drive for a while.  Because of the delay in activation, it may not get picked up by anti-virus programs (McAfee, Norton, Trend Micro, etc.)  There's no way of knowing how long this virus has been on the system.  It is possible that it has been around for several months.  When it does become active, IT WILL DESTROY ALL FILES AND FOLDERS on your hard drive!!!  The virus spreads when you send out emails and places itself into C:\WINDOWS\COMMAND.  In order to find this virus, follow these instructions:
 
- Click on "Start"
- Choose "Search" or "Find"
- Choose "For Files or Folders..."
- Name of file to search for: SULFNBK.EXE
- Set to Look In: Local Hard Drives (C:)
- Select "Find" or "Search Now"
 
If you find this file, DO NOT OPEN IT!  Select it by right clicking it with your mouse and DELETE it.  Go to your RECYCLE BIN and permanently delete it from there.  The good news is that YOU HAVE ELIMINATED THE VIRUS on YOUR computer.  The bad news is that YOU HAVE TRANSMITTED this virus to anyone you may have e-mailed in the last month or more.  Thus the reason for this message.  I am truly sorry.  Please contact everyone in your address book and pass this message along.
Title: Re: Fw: Virus alert - please read
Post by: George W Becker on December 02, 2001, 01:17:59 pm
Yahoo Message Number: 839 (http://groups.yahoo.com/neo/groups/Country-Coach-Owners/conversations/messages/839)
Not questioning the accuracy of the warning but before deleting this file go to

SULFNBK.EXE Warning | Symantec (http://www.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.html) and read.
Title: Re: Fw: Virus alert - please read
Post by: Fred And Grace Johnson on December 02, 2001, 01:26:41 pm
Yahoo Message Number: 840 (http://groups.yahoo.com/neo/groups/Country-Coach-Owners/conversations/messages/840)
Carol,

According to Symantec (Norton) - this is very probably a hoax - SULNBK.EXE is a Windows utility that is properly attached to C:Windows/Command folder - Symantec posted an alert about the hoax on 4/17/01 and updated it on 10/29/01 - Windows can live without the utility, according to Symantec: it is used to restore long file names - if you want to restore SULFNBK, the process depends on the Windows version you are using
I got my info regarding this from http://securityresponse.symantec.com (http://securityresponse.symantec.com)
Hopefully not everyone has deleted the utility file

Regards

Fred Johnson
Title: Re: Fw: Virus alert - please read
Post by: Linda Robey on December 02, 2001, 06:57:40 pm
Yahoo Message Number: 841 (http://groups.yahoo.com/neo/groups/Country-Coach-Owners/conversations/messages/841)
I scanned it and the file icon is initals on the one on my machine I get email, like childrens writing. On one of my other machines the icon is the normal windows logo for this file. SO I am wondering if the file could have gotten a virus. What does everyone else's file icon look like?

Linda
Title: Re: Fw: Virus alert - please read
Post by: FSage on December 02, 2001, 07:04:28 pm
Yahoo Message Number: 842 (http://groups.yahoo.com/neo/groups/Country-Coach-Owners/conversations/messages/842)
I think I erred on the side of caution, and deleted that file.
However, I am not a computer guru, I went ahead and restored it back into my computer. When I first searched for that file it has been in my computer since April of 1999. I think if there was going to be a problem it would have shown up by now...no prblems.