URGENT Re: Virus Warning from Lenore Atwood

[Matthew Gibson]

THIS IS A HOAX - DO NOT DELETE THIS FILE OR YOU WILL DISABLE A PART OF
WINDOWS THAT REBUILDS LONG FILE NAMES. NO MAJOR HARM WILL BE DONE IF YOU
HAVE ALREADY DELETED IT. iNSTRUCTIONS FOR RESTORING THE FILE ARE INCLUDED IN
THE LINKS BELOW.

You should ALWAYS check with an anti-virus site before taking any action,
including forwarding eMails like this. Thanks for the thought though.

Matthew

Symantec (Norton AntiVirus)  wrote:
SULFNBK.EXE Warning
      Reported on: April 17, 2001
      Last Updated on: December 7, 2001 at 04:10:58 PM PST


      Printer-friendly version  Tell a Friend

Symantec Security Response encourages you to ignore any messages regarding
this hoax. It is harmless and is intended only to cause unwarranted concern.

Type: Hoax


Description:


The following hoax email was first reported in Brazil. The original email is
in Portuguese; it is followed by several other versions.


CAUTIONS:

  a.. This particular email message is a hoax. The file that is mentioned in
the hoax, however, Sulfnbk.exe, is a Microsoft Windows utility that is used
to restore long file names, and like any .exe file, it can be infected by a
virus that targets .exe files.
  b.. The virus/worm W32.Magistr.24876 at mm can arrive as an attachment named
Sulfnbk.exe. The Sulfnbk.exe file used by Windows is located in the
C:\Windows\Command folder. If the file is located in any other folder, or
arrives as an attachment to a email message, then it is possible that the
file is infected. In this case, if a scan with the latest virus definitions
and with NAV set to scan all files does not detect the file as being
infected, quarantine and submit the file to SARC for analysis by following
the instructions in the document How to submit a file to SARC using Scan and
Deliver.
  c.. If you have deleted the Sulfnbk.exe file from the C:\Windows\Command
folder and want to know how to restore the file, see the How to restore the
Sulfnbk.exe file section at the end of this document.


----- Original Message -----
From: "Lenore Atwood" <lenoreatwood at home.com>
To: "IUPS Congress" <IUPSCongress at tcc.co.nz>; "Irma D'Alonzo"
<puffer at connection.com>; "I. A. Meinertzhagen" <iam at is.dal.ca>; "Hayley
Berlin" <hberlin at fes.uwaterloo.ca>; "Harold Atwood" <h.atwood at utoronto.ca>;
"Graham-Pineo" <pineo at acs.ucalgary.ca>; "Graeme Gibson"
<owtoad at attglobal.net>; "Gilda Jubas" <gildonjub at home.com>; "Gerry Silver"
<silver at silvergoren.com>; "gary/yasmin verrinder-sapurji"
<gverrindersapurji at earthlink.net>; "Evan and Teresa Atwood"
<atwood at interlog.com>; "Elaine McKee" <demckees at yahoo.ca>;
<ehoffstein at tor.fasken.com>; "Dr. Michael Schiebe"
<michael.schiebe at medizin.uni-ulm.de>; "David McKee" <mckeeski at sympatico.ca>;
"David Atwood" <atwood at time.physics.iastate.edu>; "David"
<atwood at iastate.edu>; "Carole Greenberg" <carolefaithg at yahoo.com>; "Beverley
Orser" <beverley.orser at utoronto.ca>; <Bernie.Schwartz at ca.eyi.com>; "Aurora
Mendelsohn" <amendels at lynx.dac.neu.edu>; ""Atwood_R.C." <"
<r.atwood at ic.ac.uk>; "April Delaurier" <a_delaurier at hotmail.com>; "April
DeLaurier" <a.delaurier at ucl.ac.uk>; "Anu Thommandram" <Anu at silvergoren.com>;
"amincer" <amincer at istar.ca>; "Al Selverston" <al at neurobio.upr.clu.edu>;
"abitton" <abitton at interlog.com>; <81-Poststelle at STADT-KOELN.DE>; "Linda
Weiner" <lindasusan52 at hotmail.com>; "lep list" <LEPS-L at LISTS.YALE.EDU>;
"Lenore Atwood" <lenoreatwood at home.com>; "Lenore Atwood"
<lenore at interlog.com>; "Lenore Atwood" <lenoreatwood at rogers.com>; "Karina
Bergmans" <kbergmans at hotmail.com>; "John Estany" <jestany at idirect.com>;
"jess atwood gibson" <jatwood_gibson at hotmail.com>; "Jennifer Stulberg"
<JStulberg at torontohydro.com>; "Jean Glazer" <gj-m at home.com>; "jean glazer"
<jeanglazer at yahoo.com>; <jadsco at mlink.net>; "Peter Nguyen"
<Peter.Nguyen at ualberta.ca>; "PC World" <vp-p-898959 at pcwmail.com>; "Paul
Greenberg" <pgdesign at pathcom.com>; <paschero at tiscalinet.it>;
<mepariz at mailmetoday.com>; "Meadows, Maureen E." <MEM at swtlaw.com>; "Matthew
Gibson" <mgibson at post-primitive.com>; "Marzia" <mrosati at iastate.edu>;
"marjorie moeser" <moemar98 at hotmail.com>; "Margaret Atwood"
<atwood at attglobal.net>; "Linda Weiner" <linda.weiner at powersurfr.com>; "VINER
CHERYL" <caviner at home.com>; <tfrimet at idirect.ca>; "Sylvia Yandall"
<SY at tcc.co.nz>; "Susan Mendelson's Lazy Gourmet" <susanm at lazygourmet.ca>;
"Susan Meindel" <xplanet at istar.ca>; <support at quicken.ca>; "Sue"
<suzq48 at hotmail.com>; "Sharron Killam" <perry.rand at ns.sympatico.ca>; "Sarah"
<atwood at total.net>; "Roger C. KENDRICK" <kendrick at hkusua.hku.hk>; "Robyn
Feldberg" <rfeldberg at kraft.com>; "Robert" <r.atwood at ic.ac.uk>; "Pippa"
<pwysong at mhpublshing.com>
Sent: Monday, December 17, 2001 8:22 AM
Subject: Fw: Virus Warning from Lenore Atwood


>
> ----- Original Message -----
> Subject: Virus Warning from Lenore Atwood
>
>
> > > > >Subject: URGENT Virus Warning from Lenore Atwood
> > > > >Date: Sun, 16 Dec 2001 8:55 p.m.
> > > > >
> > > > >  PLEASE CHECK YOUR COMPUTER AS SOON AS POSSIBLE!!
> > > > >
> > > > >         I did have this virus and chances are you have it too
> > > since
> > > you're
> > > > >all in my address book. It lies dormant for 14 days, then kills
> > > your hard
> > > > >drive. Here's  how to stop it. If you've got it, send this to
> > > everyone in
> > > > >your address book. Sorry for the inconvenience.The directions for
> > > removing
> > > > >it are easy.
> > > > >
> > > > >         1. Go to "start" - then to "find or search" (depending on
> > > your
> > > > >computer).
> > > > >
> > > > >         2. In the "search for files or folders" type in
> > > sulfnbk.exe -
> > > this
> > > > >is the virus name.
> > > > >
> > > > >         3. In the "look in" make sure you're searching Drive C.
> > > > >
> > > > >         4. Hit "search" button (or find).
> > > > >
> > > > >         5. If this file shows up (it's an ugly blackish icon that
> > > will
> > > > >have
> > > > >the name"sulfnbk.exe") DO NOT OPEN IT.
> > > > >
> > > > >         6. RIGHT click on the file - go down to delete andLEFT
> > > click.
> > > > >
> > > > >         7. It will ask you if you want to send it to the recycle
> > > bin,
> > > > >click
> > > > >yes.
> > > > >
> > > > >         8. Go to your desktop (where all your icons are) and
> > > double
> > > click
> > > > >on
> > > > >the recyclebin.
> > > > >
> > > > >         9. Right click on sulfnbk.exe and delete again - or empty
> > > the
> > > bin.
> > > > >
> > > > >         If you find it send this email to all in your
> > > addressbook,
> > > because
> > > > >that's how  it's transferred.
> > > > >
> > > > >
> > > > >Allan Baker
> > > > >R.R. #4 Coldwater,
> > > > Ontario, L0K 1E0
> > > > (705) 326-9849
> > > >
> > > >
> > > >
> > > >
> > > > _________________________________________________________________
> > > > Send and receive Hotmail on your mobile device:
> > > http://mobile.msn.com
> > > >
> > >
> >
> >
> > =====
> > Lenore Atwood
> > 602 Castlefield Avenue
> > Toronto, Ontario
> > M5N 1L8
> >
> > lenoreatwood at yahoo.com
> > http://www.interlog.com/~lenore
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Check out Yahoo! Shopping and Yahoo! Auctions for all of
> > your unique holiday gifts! Buy at http://shopping.yahoo.com
> > or bid at http://auctions.yahoo.com
>
>


-------------- next part --------------
A non-text attachment was scrubbed...
Name: button_kb_printerfriendly.gif
Type: image/gif
Size: 1261 bytes
Desc: not available
Url : http://mailman.yale.edu/mailman/private/leps-l/attachments/20011217/e88dd6d7/attachment.gif