Virus hoax

[Guest guest]

Hi - what I think is referring to is the sulfnbk.exe " virus " which is

actually a hoax (as is mentioned in a later email). This hoax tells you to look

for a file called sulfnbk.exe, which is a real Windows operating system file,

and then to delete the file, which you should not do. This one is a bit

confusing since you *can* get a real virus if a file with the name sulfnbk.exe

arrives as an email enclosure - but if you get a forwarded message telling you

to delete this particular file (no enclosure), then it's the hoax. Clear as

mud?! Guess that's what keeps me in business....

I've included text from Symantec (http://www.sarc.com - then click virus hoaxes)

on this issue.

Happy new year, everyone!

Barbara

**********

* This particular email message is a hoax. The file that is mentioned in the

hoax, however, Sulfnbk.exe, is a Microsoft Windows 95/98/Me utility that is used

to restore long file names, and like any .exe file, it can be infected by a

virus that targets .exe files.

NOTE: The Sulfnbk.exe file is not required to run Windows. It may be necessary

if you need to restore long file names if the file names become corrupted. For

additional information, read the Microsoft Knowledge Base article Description of

Sulfnbk.exe and How to Replace the Program File (Q301316)

* The virus/worm W32.Magistr.24876@mm can arrive as an attachment named

Sulfnbk.exe. The Sulfnbk.exe file used by Windows is located by default in the

C:\Windows\Command folder.

NOTE: The C:\Windows\Command folder is the usual default location for this file.

It is possible that if you have a custom installation, or a special

configuration that was installed by the computer manufacturer, the file could be

in a different location.

If the file is located in any other folder (except as noted), or arrives as an

attachment to a email message, then it is possible that the file is infected. In

this case, if a scan with the latest virus definitions and with NAV set to scan

all files does not detect the file as being infected, quarantine and submit the

file to SARC for analysis by following the instructions in the document How to

submit a file to SARC using Scan and Deliver.

* If you have deleted the Sulfnbk.exe file from the C:\Windows\Command folder

and want to know how to restore the file, see the How to restore the Sulfnbk.exe

file section at the end of this document.

--- wrote:

This virus was found on our computer - not sure if it attacked our

address book yet. Please read below and follow the instructions. Hope you

don't find it. It was in

our C;\WINDOWS\COMMANDS\ folder.

--- end of quote ---