Re: Possible virus

[Barb <pbnj@xxxxxxxxxx>]

At 02:02 AM 5/30/2001 -0500, you wrote:
> Okay, I just got this email from one of my other mailing lists, and I
> followed the instructions, and I did find this file it's talking about on my
> hard drive. Anybody know anything about this thing? Is it really a virus
> or am I about to delete something I need? And if it is a virus, everybody
> might want to check for it, because I certainly have it.
>
>
> tater (Vegetables of the world unite!)
>
>
> ***************************************************
>
> Ok, sorry for the OT guys but I was made aware of this virus in another
> group and checked my computer for it and found it in my hard drive. It
> spreads through e-mails without people knowing so I thought I'd send all the
> groups I'm in a message since I don't know who all I sent e-mails to or how
> long it's been on my computer. I'll just copy and paste what I read:
>
>
> Virus software can not detect it. It will not become active until June 1,
> 2001, at that point it will become active and will be too late. It
> wipes out all files and folders on the hard drive. This virus travels
> through e-mail and migrates to the C:\windows\command folder. To find it and
> delete it off your computer, do the following:
>
> Go to the START button.
> Go to FIND or SEARCH
> Go to FILES & FOLDERS
> Make sure the find box is searching the C drive.
> Type in: SULFNBK.EXE
> Begin search.
> If it finds it, highlight it and press the Del key on your keyboard.
> Close the find dialog box. open the Recycle Bin. Find the file and delete it
> from the Recycle bin. You should be safe.
>
> The bad part is: You need to contact everyone you have sent ANY e-mail to in
> the past few months. I do not know how long this has been on our computers.
>
> DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE NOR NORTON CAN DETECT IT
> BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST. IT WILL BE TO LATE
> THEN.
>
> WHATEVER YOU DO, DO NOT OPEN THE FILE!!!
>
>
> Sorry again for the OT :)
>
> Later!
>
> Actrez

Just checked this out at the Symantec Antivirus Information Center 
(www.symantec.com -- makers of norton) and it's a hoax. The only reason you 
might need to worry about that file name is if you were to find it 
somewhere other that your Windows Command Subdirectory, which could mean it 
had come in as an attachment. The following is from the Anti Virus Center 
and tells more. I snipped the Portugese version.

Barb

************ From Norton Anti Virus ****************


The following hoax email has been reported in Brazil. The original
email is in Portuguese; it is followed by an English translation.

CAUTIONS:

This particular email message is a hoax. The file that is
mentioned in the hoax, however, Sulfnbk.exe, is a
Microsoft Windows utility that is used to restore long file
names, and like any .exe file, it can be infected by a virus
that targets .exe files.
The virus/worm W32.Magistr.24876@mm can arrive as an
attachment named Sulfnbk.exe.

*** Really important part of this notice in the following paragraph******

<<<<<<<The Sulfnbk.exe file used
by Windows is located in the C:\Windows\Command
folder. If the file is located in any other folder, or arrives as
an attachment to a email message, then it is possible that
the file is infected.>>>>>>>>>>


In this case, if a scan with the latest
virus definitions and with NAV set to scan all files does not
detect the file as being infected, quarantine and submit the
file to SARC for analysis by following the instructions in
the document How to submit a file to SARC using Scan
and Deliver.
If you have deleted the Sulfnbk.exe file from the
C:\Windows\Command folder and want to know how to
restore the file, you should contact your computer
manufacturer or Microsoft for assistance. As an alternative,
If you are running Windows 98 or Windows Me, see the
document How to extract files in Safe Mode under
Windows 98 or Windows Millennium.
NOTE: The instructions in this document are
provided for your convenience. The extraction of
Windows files uses Microsoft programs and
commands. Symantec does not provide warranty
support for or assistance with Microsoft products.

Original Portuguese version:
<deleted for length>

Translated English version:
Do you believe that a friend of mine sent me an alert and the
procedure that we have to follow for the possible infection of
SULFNBK.EXE. And I had checked, just to make sure. An then...
the file was there, hidden even of McAfee and Norton, maybe
waiting something to start work.
Well, see bellow the procedure that I followed step by step, and I
found the file:

1. Start/Find Folders. Type the file name: SULFNBK.EXE
2. If it find, open Windows Explorer, browse into the folder where
the file is and delete it. Do not click with left button on the file and
do not open it.
3. Just delete it
4. Mine was on Windows/Command
5. The virus from the person who gave the alert was on
Windows/Config

Yes, Norton and McAfee do not detect it.
We do not know if it makes some damage on the machine, but I
think that anybody will not want to test it to know, will it?
Folks, this is not fun, I deleted it from my computer.
And my definitions are updated.
Do the same, ok?

******* A new version of this hoax has additional text stating the
*******virus will activate on June 1st:

It was brought to my attention yesterday that a virus is
in circulation via email. I looked for it and to my surprise I found it
on mine. ..
Please follow the directions and remove it from yours TODAY!!!!!!!

No Virus software can detect it. It will become active on June
1, 2001.
It might be too late by then. It wipes out all files and folders on
the hard drive. This virus travels thru E-mail and migrates to the
'C:\windows\command' folder.

The bad part is: You need to contact everyone you have sent ANY E-mail to 
in the past few months. Many major companies have found this virus on their 
computers. Please help your friends !!!!!!!!

DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE and NORTON CANNOT DETECT IT 
BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST.

WHATEVER YOU DO, DO NOT OPEN THE FILE!!!

Category: Hoax

Please ignore any messages regarding this hoax and do
not pass on messages. Passing on messages about the
hoax only serves to further propagate it.

--"If I was all that fond of real life, I would never have majored in theater"

For f/f related fanfiction, art, and a little bit of everything else
Visit The Pink Rabbit Consortium Homepage:
http://www.altfic.com