!!VIRUS ALERT!!

P

PattiG

Guest
#1
<HTML>To all my cruise-addict friends:

I was just alerted of a virus - here is what was sent to me, by the way, I followed the instructions and I HAD IT! I DELETED IT!

"Go to the "START" BUTTON
Go to "FIND" or "SEARCH"
Go to 'FILES & FOLDERS"
Make sure the find box is searching the "C:" drive.
Type in; SULFNBK.EXE
Begin Search.

It if finds it, highlight it. (DO NOT OPEN IT)
Go to "File" and delete it.
Close the find Dialog box
Open the Recycle Bin
Find the file and delete it from the Recycle bin
You should be safe.

The bad part is: you need to contact everyone you have sent ANY E-mail to in the past few months. Many major companies have found this virus on their computers. Please help your friends!!
DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. MCAFEE AND NORTON CANNOT DETECT IT BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST.
WHATEVER YOU DO...DO NOT OPEN THE FILE!!!"

Good luck</HTML>
 
P

PattiG

Guest
#2
<HTML>STOP --- DISREGARD MY ABOVE MESSAGE --- someone just alerted me that this was a hoax. Oh brother - someone certainly has too much time on their hands! Very sorry about this ... I only meant well! PattiG</HTML>
 
R

Raven

Guest
#3
<HTML>PattyG -
It is my understanding that this is a hoax. Here is some info I recieved from another person on the same "virus" topic:

Just what is SULFNBK.EXE? It's a utility shipped as part of the Windows
98 operating system that allows users to restore long file names. Thus,
anyone using the Windows 98 operating system would find this file on
their system. If the hoax were received by these users, and believed,
many might delete the file thinking their antivirus software had
somehow
failed to detect the virus. In fact, it wouldn't be the first time
signature-based scanners failed to detect a new virus, making the
entire
hoax even easier to believe.
http://antivirus.about.com/compute/antivirus/library/weekly/aa051601a.htmus":</HTML>
 
G

Gitte

Guest
#4
<HTML>Patti, this is not a virus but a HOAX.
Please don't delete the file because you need it,
More info on
<http://www.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.html>
Gitte</HTML>
 
N

nieciez

Guest
#5
<HTML>Got this message today from our IT folks today:


ADVISORY NOTIFICATION

Advisory

Please inform all of your users that the Virus under the name of "SULFNBK.EXE" is a hoax virus. The virus/worm "W32.Magistr.24876@mm" can arrive as an attachment named Sulfnbk.exe. The Sulfnbk.exe file used by Windows is located in the C:\Windows\Command folder. Anyone receiving this hoax virus should not forward it, they should delete it. It lists a action date as of June 1, 2001. Again no action is required. A complete list of Hoax Viruses can be found on the Anti-Virus web page at the following address, for unclassified "http://sysintegweb.irm.state.gov/antivirus/default.html" , and for classified " http://172.28.65.3 or http://198.77.225.8.


Reported by: Antivirus Team</HTML>
 
P

Priscilla

Guest
#6
<HTML>I'll include some instructions on how to recover from deleting the Windows file:
SULFNBK.EXE Warning

Reported on: April 17, 2001
Last Updated on: May 29, 2001 at 06:22:42 AM PDT




The following hoax email has been reported in Brazil. The original
email is in Portuguese; it is followed by an English translation.

CAUTIONS:

This particular email message is a hoax. The file that is
mentioned in the hoax, however, Sulfnbk.exe, is a
Microsoft Windows utility that is used to restore long file
names, and like any .exe file, it can be infected by a virus
that targets .exe files.
The virus/worm W32.Magistr.24876@mm can arrive as an
attachment named Sulfnbk.exe. The Sulfnbk.exe file used
by Windows is located in the C:\Windows\Command
folder. If the file is located in any other folder, or arrives as
an attachment to a email message, then it is possible that
the file is infected. In this case, if a scan with the latest
virus definitions and with NAV set to scan all files does not
detect the file as being infected, quarantine and submit the
file to SARC for analysis by following the instructions in
the document How to submit a file to SARC using Scan
and Deliver.
If you have deleted the Sulfnbk.exe file from the
C:\Windows\Command folder and want to know how to
restore the file, you should contact your computer
manufacturer or Microsoft for assistance. As an alternative,
If you are running Windows 98 or Windows Me, see the
document How to extract files in Safe Mode under
Windows 98 or Windows Millennium.
NOTE: The instructions in this document are
provided for your convenience. The extraction of
Windows files uses Microsoft programs and
commands. Symantec does not provide warranty
support for or assistance with Microsoft products.


Original Portuguese version:

Vocês acreditam que uma amiga da lista enviou um alerta e os
procedimentos que deveriam ser tomados para a possível
detecção do maledeto SULFNBK.EXE. e eu fui conferir só
por desencargo de consciência. Pois é...O bichinho tava lá,
escondidinho até da McAfee e do Norton, talvez esperando
algum gatilho prá começar a trabalhar, né?
Aí vão, moçada, as orientações que eu segui à risca e que me
levaram ao tal coisinha ruím:

1 - Iniciar/Localizar Pastas. Digite o nome do "mardito":
SULFNBK.EXE
2 - Se for encontrado, abra o Windows Explorer, vá até a
pasta onde ele se encontra alojado e delete-o de lá ou do
próprio ambiente do Localizar; - Não click com o botão
esquerdo sobre ele e não abra o arquivo nem em caso de
incêndio, ok?
3 - Apenas delete o bichinho.
4 - O meu estava em Windows/Command.
5 - O vírus da pessoa que passou o aviso estava em
Windows/Config.

Sim, o Norton e nem o McAfee não detectou.
Não sabemos se ele faz algum estrago na máquina, mas acho
que ninguém aqui vai querer testar para saber, né?
Gente, sem brincadeiras, já tirei o meu daqui....
E nem imaginava que tivesse hóspedes no PC.
Minha vacina está super-atualizada!!!
Façam o mesmo, ok?


Translated English version:

Do you believe that a friend of mine sent me an alert and the
procedure that we have to follow for the possible infection of
SULFNBK.EXE. And I had checked, just to make sure. An
then... the file was there, hidden even of McAfee and Norton,
maybe waiting something to start work.
Well, see bellow the procedure that I followed step by step,
and I found the file:

1. Start/Find Folders. Type the file name: SULFNBK.EXE
2. If it find, open Windows Explorer, browse into the folder
where the file is and delete it. Do not click with left button on
the file and do not open it.
3. Just delete it
4. Mine was on Windows/Command
5. The virus from the person who gave the alert was on
Windows/Config

Yes, Norton and McAfee do not detect it.
We do not know if it makes some damage on the machine, but
I think that anybody will not want to test it to know, will it?
Folks, this is not fun, I deleted it from my computer.
And my definitions are updated.
Do the same, ok?

A new version of this hoax has additional text stating the
virus will activate on June 1st:

It was brought to my attention yesterday that a virus is
in circulation via email. I looked for it and to my surprise I
found it on mine. ..
Please follow the directions and remove it from yours
TODAY!!!!!!!

No Virus software can detect it. It will become active on June
1, 2001.
It might be too late by then. It wipes out all files and folders on
the hard drive. This virus travels thru E-mail and migrates to the
'C:\windows\command' folder.

The bad part is: You need to contact everyone you have sent
ANY
E-mail to in the past few months. Many major companies have
found this virus on
their computers. Please help your friends !!!!!!!!

DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE.
McAFEE and NORTON CANNOT
DETECT IT BECAUSE IT DOES NOT BECOME A
VIRUS UNTIL JUNE 1ST.

WHATEVER YOU DO, DO NOT OPEN THE FILE!!!

Category: Hoax

Please ignore any messages regarding this hoax and do
not pass on messages. Passing on messages about the
hoax only serves to further propagate it.</HTML>
 
S

sunset

Guest
#7
<HTML>Well here's one computer klutz who received this "alert" earlier today. I did indeed find that file in Start and Find etc., and was unsure whether or not to delete it. I went into "My Computer", Windows, and then the command folder and saw the file in there. However, it was quite unlike any other files and icons on the system. The only way to describe it, is it looked like someone had written the name in heavy black magic marker. Thinking it was THE virus, I deleted it!!!!.

I'm so confused now, as I talked to Microsoft, who referred me to IBM, who then told me someone had indeed written something that went on top of my real SULFNBK.EXE file. In order to get that file back, IBM will step me through it for $49.00. Before I go that route, is there anyone out there who knows the steps to put that file back? Sure would appreciate any help. (And yes, I did delete from the recycle bin too).

Also anyone who's received this e-mail may want to check in the Windows Command folder to ensure the original .exe file has not been tampered with.

I am absolutely steaming about this. Do people have nothing better to do with their time?</HTML>
 
G

Gitte

Guest
#8
<HTML>You find more info on:
<http://www.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.html>
Good luck!
Gitte</HTML>
 
T

tomc

Guest
#9
They're always hoaxes

<HTML>With rare exceptions (which you will see on CNN or cnn.com), you can take it to the bank that all internet chain-letter virus warnings are hoaxes. No matter what "authority" backs them up. There are excellent debunker sites online which i can list if anyone doesn't have them. I don't, at the moment.</HTML>
 

Top