In re: Virus SULFNBK.EXE reported on this list on the 15th - I followed the
link to Symantic and found that it is indeed a HOAX:
"Reported on: April 17, 2001
Last Updated on: December 13, 2001 at 04:37:44 PM PST
Symantec Security Response encourages you to ignore any messages regarding
this hoax. It is harmless and is intended only to cause unwarranted concern.
Type: Hoax
Description:
The following hoax email was first reported in Brazil. The original email is
in Portuguese; it is followed by several other versions.
CAUTIONS:
- This particular email message is a hoax. The file that is mentioned in the
hoax, however, Sulfnbk.exe, is a Microsoft Windows utility that is used to
restore long file names, and like any .exe file, it can be infected by a
virus that targets .exe files.
- The virus/worm W32.Magistr.24876@mm can arrive as an attachment named
Sulfnbk.exe. The Sulfnbk.exe file used by Windows is located in the
C:\Windows\Command folder. If the file is located in any other folder, or
arrives as an attachment to a email message, then it is possible that the
file is infected. In this case, if a scan with the latest virus definitions
and with NAV set to scan all files does not detect the file as being
infected, quarantine and submit the file to SARC for analysis by following
the instructions in the document How to submit a file to SARC using Scan and
Deliver.
- If you have deleted the Sulfnbk.exe file from the C:\Windows\Command
folder and want to know how to restore the file, see the How to restore the
Sulfnbk.exe file section at the end of this document."
. . .
As a McAfee user of many years, I have come to respect the speed at which
they identify and fix these things generated by nasty little people.
Therefore, the warning that "Norton and McAfee have not listed it yet.",
though presumably well-intended, rang hollow.
Michael
To subscribe, change options, or unsubscribe please see the instructions at
http://listlva.lib.va.us/archives/va-roots.html
|