Sulfnbk Hoax

Richard Brekne Richard.Brekne@grieg.uib.no
Fri, 21 Dec 2001 17:51:06 +0100


Carl,,, this is a hoax. The following information was taken
directly from Nortons hoax side. You really should check out
these things before getting others to delete windows system
files, which the hoax creator wanted you to do of course.

I never send out a warning anymore without being very
certain to check hoax sites about the socalled virus.

READ FIRST !!
RicB


Symantec Security Response encourages you to ignore any
messages regarding this hoax. It is
                     harmless and is intended only to cause
unwarranted concern.

                     Type: Hoax

                     Description:

                     The following hoax email was first
reported in Brazil, and the original email was in
Portuguese.
                     Other language versions are in
circulation. Currently, the English language versions are
most
                     common.


                     CAUTIONS:

                          This particular email message is a
hoax. The file that is mentioned in the hoax, however,
                          Sulfnbk.exe, is a Microsoft
Windows utility that is used to restore long file names, and
like
                          any .exe file, it can be infected
by a virus that targets .exe files.
                          The virus/worm
W32.Magistr.24876@mm can arrive as an attachment named
                          Sulfnbk.exe. The Sulfnbk.exe file
used by Windows is located in the
                          C:\Windows\Command folder. If the
file is located in any other folder, or arrives as an
                          attachment to a email message,
then it is possible that the file is infected. In this case,
if a
                          scan with the latest virus
definitions and with NAV set to scan all files does not
detect the
                          file as being infected, quarantine
and submit the file to SARC for analysis by following the
                          instructions in the document How
to submit a file to SARC using Scan and Deliver.
                          If you have deleted the
Sulfnbk.exe file from the C:\Windows\Command folder and want

                          to know how to restore the file,
see the How to restore the Sulfnbk.exe file section at
                          the end of this document.


                     English versions

                     Version 1
                     This is very real, and I may have
passed it on to you. Check it out as below right now. Your
                     drive may crash!!
                     "I had a virus which apparently
attaches itself to everyone in my address book. I deleted it

                     successfully. you may have it as well.
Follow these instructions to see if you have it. It
transfers to
                     whomever is in your address book. It
lies dormant for 14 days, then kills your hard drive. If
                     you've got it send these instructions
to everyone in you address book. Otherwise, it may be sent
                     back to you by somebody else.
                     1. go to start-then to "find or search"
2. in the "search for files or folders" type in sulfnbk.exe
-
                     this is the name of the virus. 3. in
the "look in" make sure you're searching drive C
                     4. hit "search" button ))or find_
                     5. if this file shows up (it's an ugly
blackish icon that will have the name sulfnbk.exe) DON'T
                     OPEN IT
                     6. right click on the file - go down to
delete and left click
                     7. It will ask if you want to send it
to the recycle bin - yes
                     8. go to your desktop (where all your
icons are) and double-click on the recycle bin
                     9. right click on sulfnbk.exe and
delete again or just empty the recycle bin
                     IF YOU FIND THIS.....SEND IT TO
EVERYONE IN YOUR ADDRESS BOOK,
                     BECAUSE THAT'S HOW IT IS TRANSFERRED.

--
Richard Brekne
RPT, N.P.T.F.
Bergen, Norway
mailto:rbrekne@broadpark.no





This PTG archive page provided courtesy of Moy Piano Service, LLC