Date: Sat, 9 Feb 2002 13:45:46 -0800
Reply-To: Jere Hawn <jbrschawn@EARTHLINK.NET>
Sender: Vanagon Mailing List <vanagon@gerry.vanagon.com>
From: Jere Hawn <jbrschawn@EARTHLINK.NET>
Subject: Re: virus?
In-Reply-To: <000d01c1b1ad$77b20ae0$66b318c8@WINDOWS>
Content-Type: text/plain; charset="iso-8859-1"
According to Symantec:
Type: Hoax
Description:
The following hoax email was first reported in Brazil, and the original
email was in Portuguese. Other language versions are in circulation.
Currently, the English language versions are most common.
CAUTIONS:
This particular email message is a hoax. The file that is mentioned in the
hoax, however, Sulfnbk.exe, is a Microsoft Windows 95/98/Me utility that is
used to restore long file names, and like any .exe file, it can be infected
by a virus that targets .exe files.
NOTE: The Sulfnbk.exe file is not required to run Windows. It may be
necessary if you need to restore long file names if the file names become
corrupted. For additional information, read the Microsoft Knowledge Base
article Description of Sulfnbk.exe and How to Replace the Program File
(Q301316)
The virus/worm W32.Magistr.24876@mm can arrive as an attachment named
Sulfnbk.exe. The Sulfnbk.exe file used by Windows is located by default in
the C:\Windows\Command folder.
NOTE: The C:\Windows\Command folder is the usual default location for this
file. It is possible that if you have a custom installation, or a special
configuration that was installed by the computer manufacturer, the file
could be in a different location.
If the file is located in any other folder (except as noted), or arrives as
an attachment to a email message, then it is possible that the file is
infected. In this case, if a scan with the latest virus definitions and with
NAV set to scan all files does not detect the file as being infected,
quarantine and submit the file to SARC for analysis by following the
instructions in the document How to submit a file to SARC using Scan and
Deliver.
If you have deleted the Sulfnbk.exe file from the C:\Windows\Command folder
and want to know how to restore the file, see the How to restore the
Sulfnbk.exe file section at the end of this document.
go to Symantec to see procedures
Jere
-----Original Message-----
From: Vanagon Mailing List [mailto:vanagon@gerry.vanagon.com]On Behalf
Of Javier Zavala
Sent: Saturday, February 09, 2002 1:00 PM
To: vanagon@GERRY.VANAGON.COM
Subject: virus?
I may have infected your PC´s with a virus called "sulfnbk.exe" which will
be inactive for 14 days and then will destroy files.
Sorry...
Javier
