Re: [unrev-II] Fwd: VIRUS ALERT - HOAX?

From: N. C a r r o l l (ncarroll@hastingsresearch.com)
Date: Tue May 29 2001 - 10:45:22 PDT

  • Next message: Jack Park: "[unrev-II] Re: [topicmapmail] Fwd: VIRUS ALERT"

    ----- Original Message -----
    From: Jack Park <jackpark@thinkalong.com>

    >X-Mailer: Microsoft Outlook Express 5.50.4133.2400
    >Date: Tue, 29 May 2001 10:47:53 -0500
    >Reply-To: VCU Complexity Research Group <COMPLEXITY-L@VENUS.VCU.EDU>
    >Sender: VCU Complexity Research Group <COMPLEXITY-L@VENUS.VCU.EDU>
    >From: Pat Yeary <patyeary@QUIK.GUATE.COM>
    >Subject: VIRUS ALERT
    >To: COMPLEXITY-L@VENUS.VCU.EDU
    >
    >I discovered a new kind of virus in my computer. It is a time delayed
    >one. This one is scheduled to go to work on the first of June. Itīs name
    >is SULFNBK.EXE. Click on Start and then on Search. Under archives or
    >files write the above na
    me. If you find it, donīt open it. Eliminate or
    >Delete and then go to the recycle bin and clean it out because it can
    >still activate from there. If you do not remove it, it will destroy your
    >hard disk. Hope none have it, but if you do, I hope you read this in
    >time. Pat

    I found this puppy on my hard drive as well. As it's an exe file, windows
    only.

    Jack:

    Well, I found it alright, in c:\windows\command\. Hmm....

    Created: unknown
    Last Modified: Friday, April 23, 1999 10:22:00 PM
    Last Accessed: Tuesday, May 29, 2001

    Googling:
    http://www.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.html
    "SULFNBK.EXE Warning

                          "Reported on: April 17, 2001
                          Last Updated on: May 15, 2001 at 05:28:25 PM PDT

                         "The following hoax email has been reported in
                         Brazil. The original email is in Portuguese; it is
                         followed by an English translation.

                         "CAUTION: This particular email message is a
                         hoax. The file that is mentioned in the hoax,
                         however, Sulfnbk.exe, is a Microsoft Windows
                         utility that is used to restore long file names, and
                         like any .exe file, it can be infected by a virus that
                         targets .exe files.

    [snip]

    "Translated English version:

                         "Do you believe that a friend of mine sent me an
                         alert and the procedure that we have to follow for
                         the possible infection of SULFNBK.EXE. And I had
                         checked, just to make sure. An then... the file was
                         there, hidden even of McAfee and Norton, maybe
                         waiting something to start work.
                         Well, see bellow the procedure that I followed step
                         by step, and I found the file:

                         "1. Start/Find Folders. Type the file name:
                         SULFNBK.EXE
                         2. If it find, open Windows Explorer, browse into
                         the folder where the file is and delete it. Do not
                         click with left button on the file and do not open it.
                         3. Just delete it
                         4. Mine was on Windows/Command
                         5. The virus from the person who gave the alert
                         was on Windows/Config

                         "Yes, Norton and McAfee do not detect it.
                         We do not know if it makes some damage on the
                         machine, but I think that anybody will not want to
                         test it to know, will it?
                         Folks, this is not a fun, I delete it from my
                         computer.
                         And my definitions are updated.
                         Do it the same, ok?"

    So just a hoax?

    Nicholas

    --
    ________________________________
    Nicholas Carroll
    ncarroll@hastingsresearch.com
    Travel: ncarroll@iname.com
    http://www.hastingsresearch.com
    ________________________________
    

    Community email addresses: Post message: unrev-II@onelist.com Subscribe: unrev-II-subscribe@onelist.com Unsubscribe: unrev-II-unsubscribe@onelist.com List owner: unrev-II-owner@onelist.com

    Shortcut URL to this page: http://www.onelist.com/community/unrev-II

    Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/



    This archive was generated by hypermail 2b29 : Tue May 29 2001 - 10:58:46 PDT