THIS IS NOT A DRILL!!!!! VERY BAD VIRUS ALERT!
Blusette
***********************************************
Dear Friends,
My apologies, but I may have passed a serious virus on to you via
e-mail.
Copied below is an e-mail I received this morning regarding this virus
programmed to become active June 1, 0001
Because of the delay in activation,
it does NOT show up on virus detection software such as McAffe or Norton.
I checked my computer this morning and found the virus, and so did
several others on my e-mail address list. No one knows how long the virus
has been in the system. It may have been there for several months already.
On June 1, this virus will become active and wipe out all files and
folders on the hard drive of your computer.
The virus travels through e-mail and migrates to the
C:\windows\command' folder.
To find it and get rid of it from your computer do the following:
Go to the "START" button
Go to "FIND" or "SEARCH"
Go to "FILES & FOLDERS"
Make sure the find box is searching the "C" drive.
Type in: SULFNBK.EXE
Begin search
If it finds this file, highlight it, but DO NOT OPEN IT
Go to "File" and delete it.
Close the FIND dialog box
Open the Recycle Bin
Find the file and delete it from the Recycle bin.
The GOOD NEWS is you should now be safe.
The BAD NEWS is that if you detect the virus, you in turn need to
contact everyone you have sent ANY e-mail to in the past few months, and
share this warning with them.
Do not rely on your anti-virus software. Neither McAffe nor Norton can
detect this virus because it does not become a virus until June 1. On that
date, it will be too late. Whatever you do, do not open the file!
Sorry for the inconvenience--I hope that's all it will be.
Sincerely,
Patricia Monteleone
Web Seraph
************************************************
I hope no one has this virus. But you should check NOW if you do and follow
instructions.
Loki
Thank you for the heads up. Even though I had not received any e-mails
from you, I did the search and found the program.
Loki
KennyP380
AND ON GOOGLE AND YOU'LL COME UP WITH THE SAME READ BELOW
The following hoax email has been reported in Brazil. The original email is in
Portuguese; it is followed by an English translation.
CAUTIONS:
This particular email message is a hoax. The file that is mentioned in the
hoax, however, Sulfnbk.exe, is a Microsoft Windows utility that is used to
restore long file names, and like any .exe file, it can be infected by a virus
that targets .exe files.
The virus/worm W32.Magistr.24876@mm can arrive as an attachment named
Sulfnbk.exe. The Sulfnbk.exe file used by Windows is located in the
C:\Windows\Command folder. If the file is located in any other folder, or
arrives as an attachment to a email message, then it is possible that the file
is infected. In this case, if a scan with the latest virus definitions and with
NAV set to scan all files does not detect the file as being infected,
quarantine and submit the file to SARC for analysis by following the
instructions in the document How to submit a file to SARC using Scan and
Deliver.
If you have deleted the Sulfnbk.exe file from the C:\Windows\Command folder and
want to know how to restore the file, you should contact your computer
manufacturer or Microsoft for assistance. As an alternative, If you are running
Windows 98 or Windows Me, see the document How to extract files in Safe Mode
under Windows 98 or Windows Millennium.
NOTE: The instructions in this document are provided for your convenience. The
extraction of Windows files uses Microsoft programs and commands. Symantec does
not provide warranty support for or assistance with Microsoft products.
Original Portuguese version:
Vocês acreditam que uma amiga da lista enviou um alerta e os procedimentos que
deveriam ser tomados para a possível detecção do maledeto SULFNBK.EXE. e eu fui
conferir só por desencargo de consciência. Pois é...O bichinho tava lá,
escondidinho até da McAfee e do Norton, talvez esperando algum gatilho prá
começar a trabalhar, né?
Aí vão, moçada, as orientações que eu segui à risca e que me levaram ao tal
coisinha ruím:
1 - Iniciar/Localizar Pastas. Digite o nome do "mardito": SULFNBK.EXE
2 - Se for encontrado, abra o Windows Explorer, vá até a pasta onde ele se
encontra alojado e delete-o de lá ou do próprio ambiente do Localizar; - Não
click com o botão esquerdo sobre ele e não abra o arquivo nem em caso de
incêndio, ok?
3 - Apenas delete o bichinho.
4 - O meu estava em Windows/Command.
5 - O vírus da pessoa que passou o aviso estava em Windows/Config.
Sim, o Norton e nem o McAfee não detectou.
Não sabemos se ele faz algum estrago na máquina, mas acho que ninguém aqui vai
querer testar para saber, né?
Gente, sem brincadeiras, já tirei o meu daqui....
E nem imaginava que tivesse hóspedes no PC.
Minha vacina está super-atualizada!!!
Façam o mesmo, ok?
Translated English version:
Do you believe that a friend of mine sent me an alert and the procedure that we
have to follow for the possible infection of SULFNBK.EXE. And I had checked,
just to make sure. An then... the file was there, hidden even of McAfee and
Norton, maybe waiting something to start work.
Well, see bellow the procedure that I followed step by step, and I found the
file:
1. Start/Find Folders. Type the file name: SULFNBK.EXE
2. If it find, open Windows Explorer, browse into the folder where the file is
and delete it. Do not click with left button on the file and do not open it.
3. Just delete it
4. Mine was on Windows/Command
5. The virus from the person who gave the alert was on Windows/Config
Yes, Norton and McAfee do not detect it.
We do not know if it makes some damage on the machine, but I think that anybody
will not want to test it to know, will it?
Folks, this is not fun, I deleted it from my computer.
And my definitions are updated.
Do the same, ok?
A new version of this hoax has additional text stating the virus will activate
on June 1st:
It was brought to my attention yesterday that a virus is in circulation via
email. I looked for it and to my surprise I found it on mine. ..
Please follow the directions and remove it from yours TODAY!!!!!!!
No Virus software can detect it. It will become active on June 1, 2001.
It might be too late by then. It wipes out all files and folders on
the hard drive. This virus travels thru E-mail and migrates to the
'C:\windows\command' folder.
The bad part is: You need to contact everyone you have sent ANY
E-mail to in the past few months. Many major companies have found this virus on
their computers. Please help your friends !!!!!!!!
DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE and NORTON CANNOT
DETECT IT BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST.
WHATEVER YOU DO, DO NOT OPEN THE FILE!!!
Category: Hoax
Please ignore any messages regarding this hoax and do not pass on messages.
Passing on messages about the hoax only serves to further propagate it.
Lord_Thanatos
This is a HOAX!! The file is a windows utility.
Loki <cubby...@aol.com> wrote in message
news:d11bhtgb7sg2f0jb7...@4ax.com...
Furrygoat
Loki
<thana...@yahoo.com> wrote:
Fortunately, before I deleted it, I looked for it on my other two
computers, including a lap-top that I have never received e-mail of
any type on. Finding the program there I did nothing figuring that it
was something important and most likely benign.
Loki
Blusette
>The Sulfnbk.exe file used by Windows is located in the
>C:\Windows\Command folder. If the file is located in any other folder, or
>arrives as an attachment to a email message, then it is possible that the
>file
>is infected.
I did not find it in the C:\Windows\Command folder.
I found it in Drive C.
The instructions specifically states:
Make sure the find box is searching the "C" drive.
>In this case, if a scan with the latest virus definitions and
The person I received this from Is a well known and respected professional in
the boxing community.
I'm sure he has no intention of staining his name to propagate a hoax.
Senne
DON"T DELETE SULFNBK.EXE. Its all bulls**t.
Here is some info:
Here is a snip and a link:
Hoaxes
Please ignore any messages received regarding the supposed
"viruses" or "promotional gimmicks" listed below. They all contain
bogus information, and are intended only to frighten or confuse
users. The list below is a reproduction of the messages. Please refer
to the list whenever you receive what appears to be a bogus
message regarding a new virus, promotion, or the like.
One of the names on the list is is Sulfnbk.exe.
http://www.symantec.com/avcenter/hoax.html
If you don't have a virus checker; do yourself a favor and install one.
This is Inoculate IT Personal Edition; its free and its rated pretty
high.
http://antivirus.cai.com/
Senne
mal
file
names.
So, if you have a system running Windows 9x software, you will certainly
find it!
This file is not usually found on an NT system.
WHAT TO DO
1) Ignore the message and do not forward it on!
2) Do not delete the file.
3) Advise anyone sending you the warning that it is a hoax
THE FIX
If you have already deleted the Sulfnbk.exe.
Follow the instructions below to restore Sulfnbk.exe to your drive.
Important Note:
If Sulfnbk.exe arrives as an email attachment you should consider it
infected until proven otherwise - Magistr has been spreading under this
name via email.
1) Locate Precopy1.cab on the Windows 98 CD in the Win98 directory
or from a Windows 98 DMF floppy disk (disk 1).
2) Use a program like WinZip to extract the CAB file contents to the hard
drive. Personally, I like to copy the file to my hard drive and then
right-click
and drag the file to a new location on the desktop to unzip it to a new
directory, using WinZip.
Note: When unzipping this file you may encounter prompts to extract other
CAB files linked to Precopy1.cab. Cancel out other extractions and ignore
the
warnings unless this entire process fails for some reason.
3) Locate Sulfnbk.exe within the newly extracted set of archives.
Move it to the C:WindowsCommand location of your computer.
4) If you are unable to obtain Sulfnbk.exe using the instructions above
contact your local vendor
or
5) try to obtain a copy of the file off another virus free computer that
is running the same version of Windows as the machine that had the
Sulnbk.exe file
deleted on.
"Blusette" <blus...@aol.com> wrote in message
news:20010530212900...@ng-fi1.aol.com...
о ўhилhыеhъе
i cheehuahua
--
Doghouse Boxing...Your Last Resort, For The Sport.о ўhилhыеhъе
http://sites.netscape.net/icheehuahuachee/homepage
Gene
off..
http://www.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.html
That took me all of 10 seconds with a simple google search on "SULFNBK"
sheesh.. gullible indeed..
"Blusette" <blus...@aol.com> wrote in message
news:20010530192319...@ng-fi1.aol.com...
The Sanity Cruzer @ Mindspring
news:3B15B8...@home.com...
> What happens if you delete that file?
The next time you do a "file search", the computer won't find it.
TSC
Blusette
>Please do a bit of homework before acting like a chicken with it's head cut
>off..
It came from a very trusted source.
To make sure, I coppied and posted to RSB where I knew the thread would settle
it.
>That took me all of 10 seconds with a simple google search on "SULFNBK"
>sheesh.. gullible indeed..
Ohhh your'e so Smaaart !
But a bit slow.
KennyP380, "mal", "Lord_Thanatos", Furrygoat & Senne had allready settled it.
Look at it this way, Mr Hindsight,
If It made you feel better than,
something good came out of it.
You obvious need the boost, ;o)
Rich Davis
to function properly. If you delete it you'll be screwed.
"Loki" <cubby...@aol.com> wrote in message
news:d11bhtgb7sg2f0jb7...@4ax.com...
Blusette
>Windows needs that file
>to function properly. If you delete it you'll be screwed.
What will happen ?
Gene
I visited the newsgroup, saw the post and replied. You're the stupid fuck
that is so damned moronic to bite on this.
Your trusted source is simply another moron.
Let me guess.. you just "upgraded" to AOL from webtv...
"Blusette" <blus...@aol.com> wrote in message
news:20010531023014...@ng-fc1.aol.com...
Melanie Ley
however he's the valid word to lay this particular hoax to rest,
forever.
---------------
Hoax works better than a virus
By Matt Loney
ZDNet (UK)
May 30, 2001 11:01 AM PT
A hoax e-mail warning people that their PCs may contain a virus called
sulfnbk.exe--that will be triggered on 1 June--seems to be propagating
as a result of mass hysteria.
The e-mail, which was originally written in Portugese and was reported
to be doing the rounds in Brazil last month, has now been translated
and appears to be appearing throughout the UK, advising people to
delete a harmless Microsoft Windows utility--called sulfnbk.exe--from
their hard disks. Antivirus experts were quick to point out that the
e-mail does not contain a worm, and is being passed around simply by
well-meaning people alarmed at its contents.
"This is social engineering on a grand scale," said Symantec
spokesperson Lucy Bunker. "Whereas e-mail worms mass mail themselves
and cause destruction, this hoax message simply asks you to mass mail
it yourself, and then delete the information on your computer. In
essence, you're doing the work of a destructive virus yourself."
The hoax message indicates that the virus was found on every PC in
somebody's office, and that it was not detectable with virus software.
In fact, the file is on every PC that has Windows installed, and is
not detected by antivirus software because it is not--and does not
normally contain--a virus.
"The file that people are being asked to delete is a legitimate file
that is part of the Windows operating system," said Bunker. "We are
working with Microsoft to find out what people should do if they have
deleted this file; it is a useful file and you shouldn't delete it."
Sulfnbk.exe is a Microsoft Windows utility that is used to restore
long file names, according to Symantec, and deleting it could cause
that feature to cease working properly.
Bunker said that Symantec received a handful of enquiries about the
e-mail message yesterday, and more today--probably triggered by the
warning that the virus would activate on 1 June, she said. An earlier
variant warned that the virus would activate on 25 May.
Experts believe the propagation of the Sulfnbk.exe e-mail is caused
mainly by confusion. Vmyths.com, a Web site that debunks spurious
virus warnings, said the confusion may have been heightened by the
fact that e-mails were surfacing that contained a copy of the
Sulfnbk.exe file that was infected with a virus. But this virus,
called W32.Magistr.24876@mm, is well-known and easily removed with any
good antivirus software.
Vmyths.com believes the new e-mail was begun by somebody who was
forwarded a message by a colleague whose PC did actually have the
Magistr worm. This person, suggests the site, searched for the
Sulfnbk.exe file, found and deleted it (after discovering that
antivirus software failed to recognize the file), and sent out a
warning to other users. The site calls this the "False Authority
Syndrome".
Symantec's Bunker said there are several easy clues to detect bogus
virus warnings. "Anything that has lots of capital letters saying
things like VIRUS WARNING should be treated with scepticism," said
Bunker. Also, phrases warning that a supposed virus will absolutely
destroy everything on a hard disk should be taken with a pinch of
salt, as should those suggesting there is no known fix.
"Hoax e-mails also often attribute information to MSN, AOL, Microsoft,
CNN to give them credibility," Bunker added, "but these companies
don't usually issue virus warnings."
The hoax e-mail reads as follows:
"URGENT. A VIRUS could be in your computer files now, laying dormant
but will become active on June 1, 2001."
"FOLLOW DIRECTIONS BELOW TO CHECK IF YOU HAVE IT AND HOW TO REMOVE IT
NOW."
"It was brought to my attention that this virus is in circulation via
e-mail. I looked for it and to my surprise I found it on my computer
as well as everyone else's in my office. Please follow the directions
and remove it from yours TODAY!!!!!!!"
"Virus software cannot detect it. It will become active on June 1,
2001 and it might be too late by then. It wipes out all files and
folders on the hard drive. This virus travels thru e-mail and migrates
to the 'C:windowscommand' folder. To find it and get rid of it off of
your computer, do the following:"
The e-mail then goes on to give a detailed list of instructions on how
to delete the sulfbnk.exe file, and continues:
"The bad part is: You need to contact everyone you have sent ANY
e-mail to in the past few months. Many major companies have found this
virus on their computers. Please help your friends !!!!!!!!"
"--DO NOT RELY ON YOUR ANTIVIRUS SOFTWARE. McAFEE and NORTON CANNOT
-- DETECT IT BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST.
-- WHATEVER YOU DO, DO NOT OPEN THE FILE!!!"
Mel
Amateur Boxing News at
www.amateurboxing.com
Melanie Ley
forever - and a definition of the sulfnbk.exe file.
SkippyPB
enlightened us:
You should tell the whole story. Yes the email the original poster
mentioned could be a scam and probably is. BUT the MS Windows
Sulfnbk.exe could be infected with a virus. The virus/worm
W32.Magistr.24876@mm can arrive as an attachment named Sulfnbk.exe.
So, if you receive an email that has an attachment name Sulfnbk.exe,
delete this attachment. However, do not go searching your hard drive
looking for a file called Sulfnbk.exe. If you delete it, you will
lose the ability to handle file names with more than 8 characters.
For the complete story on this hoax, go to:
http://www.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.html
Regards,
////
(o o)
-oOO--(_)--OOo-
In the United States we have the most divided
government we have ever had:
The House is controlled by the Republicans,
The Senate is controlled by the Democrats and,
The White House is controlled by Exxon-Mobile.
DON'T DRILL in the Artic National Wildlife Refuge
Read the real facts at:
http://www.worldwildlife.org/arctic-refuge/
also
http://www.savepolarbears.org/
Remove nospam to email me.
Steve
SpaceProg
> I realize there has been quite a bit posted on the subject,
> however here's the valid word to lay this particular hoax to rest,
> forever - and a definition of the sulfnbk.exe file.
> ---------------
> Hoax works better than a virus
>
as I've been sent several in the past and haven't been taken in.
However this one fooled me hook, line, and sinker because it was sent to me by
a friend who'd more than likely also had been fooled. I managed to put the
file back on my computer via my windows 98 file extractor. However, it was still
very embarassing for me to have been taken in like that. I think it was mainly
because I trusted (and still do, for It wasn't her fault) my friend and thought
that the Sulfnbk.exe file was actually a virus.
Ah well. we learn from out mistakes.
SpaceProg
Blusette
This is my last post with you as your opinion means little to me. :op
Gene whined,
Gene
"Blusette" <blus...@aol.com> wrote in message
news:20010531182838...@ng-md1.aol.com...