SULFNBK.EXE Warning
Type: HOAX
Description: The following hoax email was first reported in Brazil. The original email is
in Portuguese; it is followed by several other
versions.
Original Portuguese version Voc�s acreditam que uma amiga da lista enviou um alerta e os procedimentos que deveriam ser tomados para a poss�vel detec��o do maledeto SULFNBK.EXE. e eu fui conferir s� por desencargo de consci�ncia. Pois �...O bichinho tava l�, escondidinho at� da McAfee e do Norton, talvez esperando algum gatilho pr� come�ar a trabalhar, n�? A� v�o, mo�ada, as orienta��es que eu segui � risca e que me levaram ao tal coisinha ru�m: 1 - Iniciar/Localizar Pastas. Digite o nome do "mardito": SULFNBK.EXE 2 - Se for encontrado, abra o Windows Explorer, v� at� a pasta onde ele se encontra alojado e delete-o de l� ou do pr�prio ambiente do Localizar; - N�o click com o bot�o esquerdo sobre ele e n�o abra o arquivo nem em caso de inc�ndio, ok? 3 - Apenas delete o bichinho. 4 - O meu estava em Windows/Command. 5 - O v�rus da pessoa que passou o aviso estava em Windows/Config. Sim, o Norton e nem o McAfee n�o detectou. N�o sabemos se ele faz algum estrago na m�quina, mas acho que ningu�m aqui vai querer testar para saber, n�? Gente, sem brincadeiras, j� tirei o meu daqui.... E nem imaginava que tivesse h�spedes no PC. Minha vacina est� super-atualizada!!! Fa�am o mesmo, ok? Danish version Virusen er programmeret til at aktivere sig p� et senere tidspunkt, derfor vil den ikke blive opdaget af et standard virusbeskyttende program, s�som Mcafee eller Norton. Ingen ved, hvor l�nge den har v�ret i oml�b - muligvis i flere m�neder. N�r den aktiverer sig vil den slette alle filer og dokumenter p� jeres harddisk. Den spreder sig via e-mail og placerer sig i C.WINDOWS/COMMAND. For at finde den og slette den skal I g�re f�lgende: 1. Klik p� start 2. V�lg S�g efter 3. V�lg filer eller mapper 4. G� til S�g alle filer og v�lg lokale hardiske - i de fleste tilf�lde er det C:. 5. I feltet Navn skrives SULFNBK.EXE 6. Hvis filen findes, marker den, men �BN DEN IKKE !!!!!!!!! 7. H�jreklik p� filen og v�lg SLET 8. Luk dialogboksen S�g alle filer 9. T�m papirkurven S� er I smittefri og computeren reddet. Den d�rlige nyhed er, at man muligvis har smittet alle, som man har sendt mail til i mange m�neder. Derfor b�r man kontakte alle personer i ens adressekartotek og straks sende dem denne meddelelse. Og det har jeg ogs� gjort PS.: Og jeg havde alts� ogs� denne luskede virus Dutch "het is mogelijk dat je computer besmet is met een virus dat erop geprogrammeerd is om actief te worden gemaakt. door de "activeer vertraging" die er in gebouwd zit , wordt het niet ontdekt door o.a. mcafee en norton . niemand weet hoe lang het virus al circuleert. mogelijk al enkele maanden. als het virus geactiveerd wordt, verwijdert het alle bestanden en mappen van de harde schijf. het virus verbreidt zich via e-mail en infiltreert het dossier "c:/windows/command". er zal dus "grote schoonmaak" moeten worden uitgevoerd indien je het virus detecteerd op je computer en op de computers van diegenen waarmee je de laatste tijd per e-mail in contact hebt gestaan, anders blijft het een eeuwig durende cirkel. om het te vinden en te verwijderen: - klik op start - vervolgens op zoeken - kies bestanden of mappen - ga naar zoeken en kies lokale vaste schijven of "c" - typ op de regel "naam" : SULFNBK.EXE - als het bestand wordt gevonden selecteer het, doch open het niet - klik op bewerken - vervolgens op alles selecteren - klik op bestand - vervolgens op verwijderen. - sluit het venster en leeg de prullebak. na deze operatie zit je in principe goed. maar je hebt waarschijnlijk zelf mensen besmet aan wie je e-mails hebt verzonden. mocht je dus het virus hebben waarschuw ze dan , zodat ook zij hun schijven kunnen opschonen." ] English versions Version 1 Do you believe that a friend of mine sent me an alert and the procedure that we have to follow for the possible infection of SULFNBK.EXE. And I had checked, just to make sure. An then... the file was there, hidden even of McAfee and Norton, maybe waiting something to start work. Well, see bellow the procedure that I followed step by step, and I found the file: 1. Start/Find Folders. Type the file name: SULFNBK.EXE 2. If it find, open Windows Explorer, browse into the folder where the file is and delete it. Do not click with left button on the file and do not open it. 3. Just delete it 4. Mine was on Windows/Command 5. The virus from the person who gave the alert was on Windows/Config Yes, Norton and McAfee do not detect it. We do not know if it makes some damage on the machine, but I think that anybody will not want to test it to know, will it? Folks, this is not fun, I deleted it from my computer. And my definitions are updated. Do the same, ok? Version 2 This one has additional text stating that the virus will activate on June 1st. It was brought to my attention yesterday that a virus is in circulation via email. I looked for it and to my surprise I found it on mine. .. Please follow the directions and remove it from yours TODAY!!!!!!! No Virus software can detect it. It will become active on June 1, 2001. It might be too late by then. It wipes out all files and folders on the hard drive. This virus travels thru E-mail and migrates to the 'C:\windows\command' folder. The bad part is: You need to contact everyone you have sent ANY E-mail to in the past few months. Many major companies have found this virus on their computers. Please help your friends !!!!!!!! DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE and NORTON CANNOT DETECT IT BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST. WHATEVER YOU DO, DO NOT OPEN THE FILE!!! French Bonjour � tous, Hello everyone! Ceci est une alerte au VIRUS assez s�rieuse. This is a serious VIRUS alert. Comme je vous ai envoy� des courriels dans les 3 derniers mois, je vous invite � v�rifier s'il n'y aurait pas un dossier intitul� SULFNBK.EXE quelques part dans votre ordinateur. Since I have emailed you in the last couple of month I invite you to read the following text carefully. Please note that, against all odds, I had it exactly where it was mentionned it would be... Prenez note que ce VIRUS ( SULFNBK.EXE )est ind�tectable et qu'il doit �tre activ� le 1er JUIN donc, v�rifier imm�diatement, Ne l'ouvrez PAS et jetter le directement � la poubelle; VIDER LA POUBELLE PAR LA SUITE. How to restore the Sulfnbk.exe file If you have deleted this file, restoration is optional. Sulfnbk.exe is a Microsoft Windows utility that is used to restore long file names. It is not needed for normal system operation. If you want to restore it, there is more than one way to do this. See the information that follows. NOTE: The instructions in this document are provided for your convenience. The extraction of Windows files uses Microsoft programs and commands. Symantec does not provide warranty support for or assistance with Microsoft products. If you have any questions, please see your Windows documentation or contact Microsoft. Windows Me If you are using Windows Me, you can restore the file using the System Configuration Utility.
2. Type msconfig and then press Enter. 3. Click Extract Files. The "Extract one file from installation disk" dialog box appears. 4. In the "Specify the system file you would like to restore" box, type the following, and then click Start: c:\windows\command\sulfnbk.exe NOTE: If you installed Windows to a different location, make the appropriate substitution. The Extract File dialog box appears. 5. Next to the "Restore from" box, click Browse, and browse to the location of the Windows installation files. If they were copied to the hard drive, this is, by default, C:\Windows\Options\Install. You can also insert the Windows installation CD in the CD-ROM drive and browse to that location. 6. Click OK and follow the prompts. Windows 98 If you are using Windows 98, you can restore the file using the System File Checker.
2. Type sfc and then press Enter. 3. Click "Extract one file from installation disk." 4. In the "Specify the system file you would like to restore" box, type the following, and then click Start: c:\windows\command\sulfnbk.exe NOTE: If you installed Windows to a different location, make the appropriate substitution. The Extract File dialog box appears. 5. Next to the "Restore from" box click Browse, and browse to the location of the Windows installation files. If they were copied to the hard drive, this is, by default, C:\Windows\Options\Cabs. You can also insert the Windows installation CD in the CD-ROM drive and browse to that location. 6. Click OK and follow the prompts. Windows 95 (or alternative method for Windows 98/Me) If you are using Windows 95, you need to use the extract command. This can also be used on Windows 98/Me.
2. Make sure that "Look in" is set to (C:) and that Include subfolders is checked. 3. In the "Named" or "Search for..." box, type: precopy1 4. Click Find Now or Search Now. If it does not exist on the hard drive, then insert the Windows installation CD and repeat the search on that drive. 5. When you find the file, write down the location of Precopy1, for example, C:\Windows\Options\Cabs. This is your Source Path. 6. The general form of the Extract command is: extract <Source Path>\precopy1.cab sulfnbk.exe /L c:\windows\command So if the source path is C:\Windows\Options\Cabs, then the Extract command becomes: extract c:\windows\options\cabs\precopy1.cab sulfnbk.exe /L c:\windows\command NOTE: If you installed Windows to a different location, make the appropriate substitution. 7. Click Start and then click Run. 8. Type the following, making the appropriate substitutions as previously noted extract <Source Path>\precopy1.cab sulfnbk.exe /L c:\windows\command 9. Click OK. For more information on how to use the Microsoft Extract command, see the Microsoft Knowledge Base document, How to Extract Original Compressed Windows Files, Article ID: Q129605
Write-up by: Patrick Martin ------ To unsubscribe, send a blank message to [EMAIL PROTECTED] Club Office: [EMAIL PROTECTED], (613) 230-1064 Web/mailing list: [EMAIL PROTECTED] http://www.cyberus.ca/~obcweb Newsletter: [EMAIL PROTECTED] http://www.cyberus.ca/~obcweb/Newsletter ==^================================================================ This email was sent to: [email protected] EASY UNSUBSCRIBE click here: http://topica.com/u/?aVxiDo.a2i8p1 Or send an email to: [EMAIL PROTECTED] T O P I C A -- Register now to manage your mail! http://www.topica.com/partner/tag02/register ==^================================================================ |
black.gif
Description: GIF image
