|
Hi Team,
This hoax is being sent the rounds of ITI reps. Let's see if we
can stop it.
If you have sent it out, please IMMEDIATELY contact the recipients and
tell them NOT to delete the named file.
Please bookmark these helpful website!!!
This is the best source to check actual VIRUS risk that I've seen:
http://vil.mcafee.com/recent.asp?
Good beginning point:
http://www.hoaxkill.com
Cnet has the top ten hoaxes
http://cnet.com/specialreports/0-6014-7-1427917.html?pt.aol.comain.02egif-promo1..
If you need an official source of information about hoaxes, this is about as official as it gets. The Computer Incident Advisory Capability is run by the U.S. Department of Energy.
http://ciac.llnl.gov/ciac/CIACHoaxes.html
-----------------------------------------------------------------
HERE
IS THE HOAX YOU NEED TO TAKE CARE OF NOW!
Virus Name:
SULFNBK Hoax
Date Added:
5/10/01 10:34:10 AM Virus
Characteristics:
AVERT HOAX Notice!!
McAfee AVERT Labs would like to inform you of a new email HOAX.
This email message is just a HOAX. Although, the SULFNBK.EXE file may
become infected by a number of valid viruses, the details of this message
are not based on actual events.
We are advising users who receive the email to delete it and DO NOT
pass it on as this is how an email HOAX propagates.
Virus Characteristics:
AVERT HOAX Notice!!
McAfee AVERT Labs would like to inform you of a new email HOAX.
This email message is just a HOAX. Although, the SULFNBK.EXE file may
become infected by a number of valid viruses, the details of this message
are not based on actual events.
We are advising users who receive the email to delete it and DO NOT
pass it on as this is how an email HOAX propagates.
For more information about this hoax or for instructions on
how to replace SULFNBK.exe if you have already deleted it, go
to: http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2274
...OR
Restoring
Sulfnbk.exe |
|
How
to repair damage from a hoax |
|
|
|
SULFNBK.EXE, a
utility shipped as part of the Windows 98 operating system that
allows users to restore long file names, and now the victim of a
bogus virus warning. The hoax message urges users to search their
systems for the presence of SULFNBK.EXE and, if found, delete it. Of
course, it's a legitimate Win98 operating system file, so anyone
running Windows 98 will find it. And many, it seems, have deleted
it. Following are the steps to take to restore SULFNBK.EXE from your
Windows 98 operating system CD. You will want to have your Windows
98 operating CD in the CD-ROM drive bay. If the program autoruns
(launches), just click Exit.
A word
of caution. Any executable has the potential to be infected.
Any executable received via email should be considered
infected until proven otherwise. There is a vast difference
between the SULFNBK.EXE file that legitimately resides on
your hard drive, and an SULFNBK.EXE arriving via email. The
Magistr virus randomly selects, infects, and sends portable
executable files (PE EXE) files less than 132Kb in length.
This makes SULFNBK.EXE, with its paltry 45,056 file size, a
perfect candidate. Thus, if you were to receive SULFNBK.EXE
via email, consider it infected.
|
Windows 98 includes a handy tool known as the System File Checker
which can be used to restore damaged or deleted files. To open SFC,
click "Start" | "Run" and type "SFC"
without the quotes. Click "OK". System File Checker will
launch a dialogue box with two choices. Choose "Extract one
file from installation disk".
In the "Specify the system file you would like to
restore" box, type "sulfnbk.exe" (without the
quotes). Click "Start".
You will be prompted to specify the location that contains the
file you want to extract and the destination directory for that
file. You will need to input the "Restore from" location
and the "Save file in" location.
"Restore from" will be the win98 folder on your Windows
98 operating system CD. It is easiest and most accurate to use the
"Browse" button to locate and select the folder. The
"Save file in" destination folder is the Windows directory
and Command subdirectory. For example,
C:\WIN98\COMMAND
When both boxes have been filled in, click OK. You should receive
a message stating "The file has been successfully
extracted". Click OK and close any remaining SFC dialog boxes.
One final note, if you're one of the unfortunate who purchased a
computer that comes with the notorious "Restore CD" only,
you probably will not be able to use that CD to restore the file (or
install new hardware, or update/replace drivers, or do much of
anything except restore your system to factory defaults). Contact
your computer vendor and ask them to send you a true copy of the
Windows 98 operating system that you purchased with your system.
Oh... and good luck getting them to send it.
|
|
|