Virus???

[Delusion2001]

has anyone heard about the file sulfnbk.exe ???

someone told me about it saying taht it will turn into a virus on june 1, and until then a virus prog won't see it as a virus, and by then it's too late

i think it's something only on WinM3, which makes me think it's only a WinMe file

anyways, have you guys heard anything about this???

if so, what??

 

[JayPatel]

yeah i have...just do a search for the file on your harddisk and then delete and empty the recycle bin. my gf just sent me a heads up about it today and i checked it out and did indeed have the file on my harddisk. the june 1 execution of the file is indeed correct.

 

[palad]

Looks like it may be a hoax. Check it out here.

 

[The Stigenator]

humm..I have it in 98 too..

TIme to some more investigation..

I found it in my C:\windows\command

edit:// its a hoax..

 

[happykitten]

I really wouldn't touch it, if I were you. Here's an e-mail that was distributed to all the students at my college today:


Virus HOAX Alert: Do NOT delete SULFNBK.EXE file!


Smith is currently experiencing a new and malicious form of virus hoax: an email message that encourages people to delete what is actually an essential Windows system file. (The full text of the hoax message is appended at the end of this message.)

Please ignore any messages promoting this hoax and do not pass these messages on to other people. Passing the message on serves only to propagate it further.

According to the hoax message, if you discover that you have a file called Sulfnbk.exe on your Windows computer, then your system is infected with a malicious virus, and the only way to defeat the virus is to delete the file.

However, the Sulfnbk.exe file is actually an essential Windows systems file, and it exists on EVERY Windows computer. If you delete it, your computer will fail to function properly.

There are some twists, however. The real Sulfnbk.exe file should be in the following folder: C:\Windows\Command. To confirm that it's there:

1. Click on the Start button and select Find, then Files or Folders.
2. The Find All Files dialog box will open. Type Sulfnbk.exe in the Named field.
3. In the Look in box, make sure that Fixed disk (C is selected.
4. Click on the Find Now button.

If the system finds another Sulfnbk.exe file in any folder other than C:\Windows\Command, that file may be infected with the "Magistr" virus. Run a virus scan to check for a possible infection:

1. Close all programs.
2. Click on the Start button and select Run.
3. In the Open field, type: vt, then click OK.
4. When the Virus Protection window opens, double-click on Clean C Drive to start the virus scan. This may take a few minutes to complete.
5. If the scanner finds any infected files on your C: drive, please leave the results window open on your screen and call the User Support Center at extension 4487.

Here is the text of the virus hoax message:
............................................................

Subject: FW: VIRUS ALERT !!!!!!!!

I found this in my system, so please check.
Please check your computers -- everybody in the office found it. There is
a virus call SULFNBK. It is a little program that will run on June 1st, 2001.
The antivirus systems don't detect it cause it is not activated yet. It is
put into the computers with an e-mail without being detected and it is
resent using your e-mail address list.

You have to do the following to delete it:
Click START or BEGIN (it is located in left below corner of your screen).
Choose FIND, Files and Folders
Type SULFNBK.EXE (don't open it !!!)

After you found it click the right button of your mouse and choose DELETE.

Then empty your recycle wastebasket. This is very important because if not
the virus will run from this part of your hard disk in June 1st. Please
resend this e-mail to everyone. This is the only way to abolish the
destruction of many hard disk in June 1st, 2001.

[A new version of this hoax has additional text stating the virus will activate on June 1st:]

It was brought to my attention yesterday that a virus is in circulation via email. I looked for it and to my surprise I found it on mine. .. Please follow the directions and remove it from yours TODAY!!!!!!!

No Virus software can detect it. It will become active on June 1, 2001. It might be too late by then. It wipes out all files and folders on the hard drive. This virus travels thru E-mail and migrates to the 'C:\windows\command' folder.

The bad part is: You need to contact everyone you have sent ANY E-mail to in the past few months. Many major companies have found this virus on their computers. Please help your friends !!!!!!!!

DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE and NORTON CANNOT DETECT IT BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST.

WHATEVER YOU DO, DO NOT OPEN THE FILE!!!



Don't do it!!!,
~kitten >O.O<

 

[TuffGuy]

hehehe... sup bro!

 

[JayPatel]

Son of a bitch...i think i deleted the file out of my window/command directory.

 

[Amused]

I was sent this yesterday by my Mom. A simple Internet search brought the truth. Here's our exchange:


My Mom:
<<Is this true or a hoax?>>



IMPORTANT VIRUS INFORMATION......PLEASE CHECK IT OUT BEFORE YOU DELETE THIS

IMPORTANT Virus Information for June 1st


Received the following from a friend. Please follow the and delete the
file. I did find this virus on my hard drive.
Virus software can not detect it. It will not become active until June 1,
2001, at that point it will become active and will be too late. It wipes
out all files and folders on the hard drive. This virus travels through
e-mail and migrates to the C:\windows\command folder. To find it and delete
it off your computer, do the following:

Go to the START button.
Go to FIND or SEARCH
Go to FILES &amp; FOLDERS
Make sure the find box is searching the C drive (The arrow on the rightof
the box will let you choose the drive number
Type in: SULFNBK.EXE Begin search.
If it finds it, highlight it and press the Del key on your keyboard.
Close the find dialog box.
Now open the Recycle Bin.
Find the file and delete it from the Recycle bin. You should be safe.

The bad part is: You need to contact everyone you have sent ANY e-mail to
in
the past few months. I do not know how long this has been on our computers.

DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE NOR NORTON CAN DETECT IT
BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST. IT WILL BE TO LATE THEN.
WHATEVER YOU DO, DO NOT OPEN THE FILE!!!
------------

Me:

HOAX!!!

SULFNBK.EXE is a Windows 9x setup file.

Microsoft.com support refers to it many times.

It's on these two sites:

http://support.microsoft.com/support/kb/articles/Q238/6/64.ASP

Here, you see it's listed under the Contents of the Precopy1.cab File

Sulfnbk exe 45,056 4/23/1999 10:22:00p

And here:

http://support.microsoft.com/support/kb/articles/Q190/4/18.asp

A page that Microsoft tells you to run SULFNBK.EXE to correct a problem with instalation in Win98.

This is a Win 9X file that will exist on EVERY Win 9X system.

DON'T DELETE IT!!! Send this to ALL your friends, and have THEM send it to ALL their friends. This time, let's make the TRUTH spread faster than a @#$%&amp; Internet HOAX!
------------------------
Do I get a cookie?

 

[Delusion2001]

<< hehehe... sup bro! >>



suppers! i got a bad &quot;hang-over&quot;. slept only 2.5 hours last night. been up since 3. LOL! and I fell asleep at 12:30. HAHAHAHA

 

[Yo Ma Ma]

This one is really making the rounds.. someone else posted here in OT yesterday, and I rec'd a couple other &quot;warnings&quot; from e-mails lists.

 

[Infidelity]

sulfnbk.exe is not a virus and do not delete it, will damage your os

 

[Cougar]

Geez, if deleting this file is going to screw up windows then I'm going to have a butt-load of phone calls this week from my family and everyone that I have built a computer for that nuked the file. I think these virus hoax's are worse than actual virus'.

 

[isekii]

it is infact a hoax... it is a file that handles you long file name extensions...

DO NOT DELETE~!!!

 

[DaveJ]

Actually, it really doesn't matter whether you delete the file or not, it won't screw up anything. SULFNBK restores long filenames after you have backed them up in DOS. It's totally harmless and won't do a THING to your system if you delete it...

Dave

 

[ggavinmoss]

I heard it on the Internet... it MUST be true. :frown:

jeez.

-geoff

 

[Mork]

SH!T Can someone send me that file? Ignorant me deleted it b4 it was revealed as a hoax

 

[IcemanJer]

do SFC and restore it from your Windows CAB files.

Or just read DaveJ's post.

 

[RU482]

Dumbass, I just fired up a drive for the first time tonight, with a fresh WIN98SE load. Honestly, this is even the first site I have visited. It is on my harddrive with the last modified date of 4/23/99 @ 10:22 PM. SAME AS MY OTHER PC...HMMM, must be a virus alrighty

 

[TuffGuy]

<<

<< hehehe... sup bro! >>



suppers! i got a bad &quot;hang-over&quot;. slept only 2.5 hours last night. been up since 3. LOL! and I fell asleep at 12:30. HAHAHAHA >>


that's still 2.5hrs more than i got...

 

[DannyLove]

<< Son of a bitch...i think i deleted the file out of my window/command directory. >>

i guess we wont be hearing from him in a while

danny~!

 

[DaLeroy]

Here is the description referenced from the Trend site:

This hoax warns against a virus contained in a file called SULFNBK.EXE, that arrives hidden in an email message.
SULFNBK.EXE is a Windows System file that is installed with the Windows Operating System. SULFNBK.EXE is a utility used to restore long file names on the Start menu, when it is replaced with MS-DOS-compatible (short) file names in 8.3 format. For example, the Accessories folder on the Start menu may be displayed as &quot;Access~1&quot; if the SULFNBK utility is not installed. This file is not destructive, but it can be infected by a virus.
Trend Micro requests that all email users not propagate this email, which is a hoax.
The original message starting out the hoax was in Portuguese.

 

[BarbeQueGuy]

This sounds just like an email I recieved call the &quot;Amish Virus&quot;.

 

[Phunktion]

Thanks for the heads up Kitten

I generally never freak when I have a virus tho because all my important stuff is written to CDRW's whenever I get the chance..

 

[Sugadaddy]

My mom got this message yesterday on her FirstClass account saying to delete the file. Since it's my comp, she told me about it. I just put in the file name in Yahoo and it brought back a link to Symantec saying it was a hoax... I don't even have the file on my system anyways, maybe it's just win98/me?

 

[Danball1976]

This is so funny, why do people believe everything they hear?