This is a hoax Re: I had it and you probably do too

[Guest guest]

http://antivirus.about.com/compute/antivirus/library/weekly/aa051601a.htm

this is a hoax

in Seattle

Sulfnbk.exe

When hoaxes harm

Related Resources

• Glossary of Terms• Hoax Encyclopedia• The Hoax That Cried Virus

Elsewhere on the Web

• Urban Legends site • Infoguerra Article (in Portuguese)

Hoaxes. Many people believe them. Others aren't so sure but forward them anyway "just in case". No matter how you slice them, hoaxes are a problem and now they've taken a new tack. Originating in Brazil, a new hoax alleges the file SULFNBK.EXE is in fact a virus and urges users to search their system for the presence of the file. The hoax warns, even "Norton did not discover it". Perhaps this is because the file is not infected. A word of caution. Any executable file has the potential to be infected. Worse, viruses like Magistr can pick certain files at random, infect it, and send it off via email to others. So the potential also exists for the file SULFNBK.EXE to be plucked by Magistr. Of course, any portable executable (PE EXE) file up to 132K in length could just as easily be sent, so there's no special distinction to the SULFNBK.EXE file. Just what is SULFNBK.EXE? It's a utility shipped as part of the Windows 98 operating system that allows users to restore long file names. Thus, anyone using the Windows 98 operating system would find this file on their system. If the hoax were received by these users, and believed, many might delete the file thinking their antivirus software had somehow failed to detect the virus. In fact, it wouldn't be the first time signature-based scanners failed to detect a new virus, making the entire hoax even easier to believe. If you aren't confused yet, you should be. Hoaxes survive simply by causing confusion. They provide just enough real sounding information to guarantee a pretty high degree of faith. The more believable, the more users willing to pass it along. Hence hoaxes are very much like a manually driven virus, relying on the user to deliberately pass along the "infection". In the case of the SULFNBK.EXE warning there's a double whammy: as users pass it along, it clogs email servers and drains resources; and those who delete it may need the file at some point. Worse, this could be a stepping stone to a new trend in hoax writing - targeting necessary system files, warning of dire consequences and instructing users to immediately delete them. If the right files were targeted, users following the warning's instructions could find themselves worse off than if a "real" virus had hit. In other words, hoaxes may soon be featuring malicious payloads deliberately executed by the gullible and unsuspecting user. Common sense provides the best cure. If you aren't sure, don't forward it. Forget the "just in case" excuse - it's downright dangerous. Unless the warning comes from a known and reputable source, send it to the Recycle Bin and not to your friends and co-workers. Special thanks to Giordani Rodrigues, editor of InfoGuerra.com for providing details regarding this hoax. His article, in Portuguese, can be found at: http://www.infoguerra.com.br/infonews/viewnews.cgi?newsid988228057,26932,.

http://antivirus.about.com/compute/antivirus/library/weekly/aa051601a.htm

[Welker OSSG] I had it and you probably do too

This message is real I found this virus dormant on my computer. It did not come in on an attachment but I want to warn everyone about it. Evidently it will not show up on the normal virus checks.

Sorry for the inconvenience.

FROM ONE OF OUR MEMBERS: >I received this virus warning Saturday morning, May 26. I followed the = >instructions and sure enough, my computer was infected. I've got = >anti-virus software and it did not pick it up! Please read the following = >carefully. > >URGENT. A VIRUS could be in your computer files now, dormant but >will become active on June 1. FOLLOW DIRECTIONS BELOW TO CHECK >IF YOU HAVE IT AND TO REMOVE IT NOW. > >It was brought to my attention yesterday that a virus is in circulation = >via email. I looked for it and to my surprise I found it on mine. .. >Please follow the directions and remove it from yours TODAY!!!!!!! > >No Virus software can detect it. It will become active on June 1, 2001. >It might be too late by then. It wipes out all files and folders on >the hard drive. This virus travels thru E-mail and migrates to the >'C:\windows\command' folder. To find it and get rid of it off of >your computer, do the following. > >Go to the "START" button. >Go to "FIND" or "SEARCH" >Go to "FILES & FOLDERS" >Make sure the find box is searching the "C:" drive. >Type in; SULFNBK.EXE >Begin search. > >If it finds it, highlight it. >Go to 'File' and delete it. >lose the find Dialog box >Open the Recycle Bin >Find the file and delete it from the Recycle bin >You should be safe. > >The bad part is: You need to contact everyone you have sent ANY >E-mail to in the past few months. Many major companies have found this = >virus on >their computers. Please help your friends !!!!!!!! > >DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE and NORTON CANNOT >DETECT IT BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST. > >WHATEVER YOU DO, DO NOT OPEN THE FILE!!!