VA-ROOTS Archives

December 2001

VA-ROOTS@LISTLVA.LIB.VA.US

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Michael Flanagan <[log in to unmask]>
Reply To:
Michael Flanagan <[log in to unmask]>
Date:
Mon, 17 Dec 2001 12:14:07 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (40 lines)
In re: Virus SULFNBK.EXE reported on this list on the 15th - I followed the
link to Symantic and found that it is indeed a HOAX:

"Reported on: April 17, 2001
Last Updated on: December 13, 2001 at 04:37:44 PM PST
Symantec Security Response encourages you to ignore any messages regarding
this hoax. It is harmless and is intended only to cause unwarranted concern.
Type: Hoax
Description:
The following hoax email was first reported in Brazil. The original email is
in Portuguese; it is followed by several other versions.

CAUTIONS:
- This particular email message is a hoax. The file that is mentioned in the
hoax, however, Sulfnbk.exe, is a Microsoft Windows utility that is used to
restore long file names, and like any .exe file, it can be infected by a
virus that targets .exe files.
- The virus/worm W32.Magistr.24876@mm can arrive as an attachment named
Sulfnbk.exe. The Sulfnbk.exe file used by Windows is located in the
C:\Windows\Command folder. If the file is located in any other folder, or
arrives as an attachment to a email message, then it is possible that the
file is infected. In this case, if a scan with the latest virus definitions
and with NAV set to scan all files does not detect the file as being
infected, quarantine and submit the file to SARC for analysis by following
the instructions in the document How to submit a file to SARC using Scan and
Deliver.
- If you have deleted the Sulfnbk.exe file from the C:\Windows\Command
folder and want to know how to restore the file, see the How to restore the
Sulfnbk.exe file section at the end of this document."
. . .
As a McAfee user of many years, I have come to respect the speed at which
they identify and fix these things generated by nasty little people.
Therefore, the warning that "Norton and McAfee have not listed it yet.",
though presumably well-intended, rang hollow.

Michael

To subscribe, change options, or unsubscribe please see the instructions at
http://listlva.lib.va.us/archives/va-roots.html

ATOM RSS1 RSS2