SB: Re: Fwd: Fw: Please check your computer for this virus....HOAX

["John Swearingen" <john@skillful-means.com>]

This is a (very old) hoax.  No need to delete.  If you have deleted, you can
restore.  I've copied information about it below.

John Swearingen

> SULFNBK Hoax
> Description: This hoax warns against a virus
> contained in a file called
> SULFNBK.EXE, that arrives hidden in an email
> message.
> SULFNBK.EXE is a Windows System file that is
> installed in the Windows
> Command folder when the Windows Operating System is
> installed. Therefore,
> the presence of this file does not necessarily mean
> a system is infected.
>
> SULFNBK.EXE is a utility used to restore long file
> names on the Start menu,
> when it is replaced with MS-DOS-compatible (short)
> file names in 8.3 format.
> For example, the Accessories folder on the Start
> menu may be displayed as
> "Access~1" if the SULFNBK utility is not installed.
>
> This file is not destructive or malicious, but it
> can be infected with a
> virus and could be mass mailed. The virus
> PE_MAGISTR.A is capable of using
> the SULFNBK.EXE file to propagate. If you receive an
> email with the
> attachment SULFNBK.EXE there is a possibility that
> the file is infected.
> Trend Micro recommends that you scan your system
> with HouseCall, Trend
> Micro's free online virus scanner.
>
> If you receive an email without an attachment Trend
> Micro requests that
> email users delete the message.
>
> You may manually restore the SULFNBK.EXE file if it
> has been accidentally
> deleted.


----- Original Message -----
From: "Michel Wingard" <carrrpenter@yahoo.com>
To: "Tony Novelli" <anovelli@aol.com>; "Peter Ovington"
<peter@wildsalmon.org>; "Mitch Parris" <pierre70@bvcolorado.com>; "Pascha"
<pascha@tsayadin.com>; "Pelatiah" <murray_tpds@yahoo.com>; "Dave Pence"
<pence@bvsd.k12.co.us>; "Rakayish" <george_m64@hotmail.com>; "Aaron Reed"
<tycobob@usa.net>; "Terry Riley" <rqueeniedog@aol.com>; "Ron"
<redroninx@hotmail.com>; "marjorie skansen" <marjorie54@yahoo.com>; "Natasha
Snow" <blushash@home.com>; "Frank Soto" <fsoto@earthlink.com>;
"SoT|Butler[Arye]" <butler360@hotmail.com>; "SoT|Lyn[Makk]"
<morten.lyndrup@int.tele.dk>; "Steen" <absteen@dakotacom.net>; "Gary
Stivers" <gds@micron.net>; "Damien Vryce" <dvryce@hotmail.com>; "The Family"
<rlowes@concentric.net>; "Robert Gay" <valleymind@aol.com>; "The Hachil"
<webmaster@tsayadin.com>; "The Hachil" <hachil@flashmail.com>; "Terry
Hessman" <hti@hessmantrades.com>; "Bill Hunt" <billhunt@redrock.net>;
"Ishm'lak" <ishmlak@tsayadin.com>; "Janette Jahns" <jjahns@hotmail.com>;
"Kimber Elizabeth Janney" <kivaconstruction@mindspring.com>; "Janet
JBardwell" <JBardwell@aol.com>; "janet johnston" <janetjohnstn@hotmail.com>;
"Kemble" <sssalive@earthlink.net>; "Leslie@Tyler" <fddragon@aol.com>;
"Libah" <chrisx@datarecall.net>; "Michelle Litt" <" natsaih"@tsayadin.com>;
"Michelle Litt" <michi@telusplanet.net>; "John Lockett"
<john@bvcolorado.com>; "Charlie Lovell" <chunky@flashmail.com>; "Kathrine
Lumenello" <littlelight73@aol.com>; "Cardinal M'lakMavet"
<mlakmavet@tsayadin.com>; "Makkaveth" <chris@ilox.com>; "Makkâveth"
<makkaveth@tsayadin.com>; "William McQueen" <massage@springsips.com>;
"Andrew Murray" <ahm8306@ritvax.rit.edu>; "Nabterayl"
<nabterayl@tsayadin.com>; <claytoncroft@aol.com>; <boulder@rmblue.com>;
"ShadowStalker" <paintball5320@aol.com>; "strawbale" <strawbale@crest.org>;
"Jennifer Allen" <senoraveronica@yahoo.com>; "Robert Andrews"
<e-bale@balewatch.com>; "Azmaveth" <dragonvic@hotmail.com>; "BaalYowereh"
<druid@bconnex.net>; "Bean" <beanyth@pcisys.net>; "Jolene Boyles"
<jlboyles@excite.com>; "Josh Boyles" <jeboyles@indiana.edu>; "marie boyles"
<luv2knit2000@yahoo.com>; "Brassydiva" <brassydiva@usa.net>; "Stacy Fielding
Brenner" <sfb@nursing.upenn.edu>; "Annie Briggs-Nev"
<abriggs@bouldernews.infi.net>; "Kyle Bundy" <kbundy1@earthlink.net>;
"Killer Bunny" <killerbunny@planetstarsiege.com>; "Carol"
<csdp@azstarnet.com>; "Bill  Christensen" <billc@greenbuilder.com>; "Joyce
Coppinger" <jc10508@alltel.net>; "Clayton Croft" <claytoncroft@att.net>;
"Manuel Dangond" <mdangond@hotmail.com>; "Deber" <lekcit@flashmail.com>;
"Jim Richmond" <jr81212@yahoo.com>; "John Sexton" <jwsexton@indiana.edu>
Sent: Saturday, January 12, 2002 8:20 AM
Subject: SB: Fwd: Fw: Please check your computer for this virus....I found
it on mine.


>
> --- John Sexton <mustardtoes@yahoo.com> wrote:
> > Date: Sat, 12 Jan 2002 08:03:02 -0800 (PST)
> > From: John Sexton <mustardtoes@yahoo.com>
> > Subject: Fwd: Fw: Please check your computer for
> > this virus....I found it on mine.
> > To: Annie Briggs-Nev <abriggs@bouldernews.infi.net>,
> >   diane <dianemrichmond@hotmail.com>, Nancy Ferguson
> > <nferg@earthlink.net>,
> >   Dave Mundy <fiberoptics101@hotmail.com>,
> >   "Marilynn L. Mundy" <mmundy@indiana.edu>,
> >   "Tim and Julie" Porter <koeppenj@bluemarble.net>,
> >   JAMES RICHMOND <jrichmond@usa.net>, Chess D Sexton
> > <scton@jeffnet.org>,
> >   chris sexton <doggfather_01@yahoo.com>,
> >   Jean L Sexton <mwimages@bellsouth.net>,
> >   Jessica Carol Sexton <bananaorange_1@yahoo.com>,
> >   Michel Wingard <carrrpenter@yahoo.com>,
> >   Larry and Kate Z <Michvacfan@aol.com>
> >
> > this is not a joke!!!  I found it on mine please
> > READ
> > FIRST
> > Note: forwarded message attached.
> >
> >
> > =====
> > John Sexton
> > mustardtoes@yahoo.com
> > jwsexton@lear.ucs.indiana.edu
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Send FREE video emails in Yahoo! Mail!
> > http://promo.yahoo.com/videomail/
>
> > ATTACHMENT part 2 message/rfc822
> > From: "Dave Mundy" <fiberoptics101@hotmail.com>
> > To: "Tony" <tsanders@rtccom.net>,
> > "Tom Monroe" <Tom4Judy@Hotmail.com>,
> > "Sue Gensemer" <doanesd@aol.com>,
> > "steve scales" <scales21@home.com>,
> > "Pam Mundy" <pmundy@blueriver.net>,
> > "Max E. Mundy" <Mundyme@aol.com>,
> > "laura" <laurabee@nwinfo.net>,
> > "Ken" <kscales@ind.net>,
> > "josh" <hammerman5420@yahoo.com>,
> > "john" <mustardtoes@yahoo.com>,
> > "Jason" <jason@mundy.com>,
> > "James Baron" <jbaron@wi.rr.com>,
> > "ED" <edmndy@hpcisp.com>,
> > "Darrell" <darrell@blueriver.net>,
> > "Dale" <W7LL@worldnet.att.net>,
> > "chris sexton" <doggfather_01@yahoo.com>,
> > "Carol Baker" <mbakerb@aol.com>,
> > "Buster Belcher" <rojo1@dmrtc.net>,
> > "brent barkley" <ebarkley@bluemarble.net>
> > Subject: Fw: Please check your computer for this
> > virus....I found it on mine.
> > Date: Mon, 7 Jan 2002 19:13:24 -0500
> >
> >
> > ----- Original Message -----
> > From: "Sherfick" <grandind@dmrtc.net>
> > >
> > > > > > > > > Dear Folks,
> > > > > > > > > >
> > > > > > > > > > This is a VERY serious e-mail.
> > Please read and act ASAP!
> > > > > > > > > >
> > > > > > > > > > I received an e-mail from a friend
> > of mine at a studio
> > warning
> > > > of
> > > > > a
> > > > > > > >virus
> > > > > > > > > that was
> > > > > > > > > > passed on to him.  His PC was
> > infected and since I was in
> > his
> > > > > > address
> > > > > > > >book
> > > > > > > > > > it had probably been spread to my
> > computer. (It was!)
> > > > > > > > > > But the good news is... I followed
> > the instructions he sent
> > me
> > > > and
> > > > > > > >located
> > > > > > > > > > the virus.  By following his
> > instructions, I was able to
> > > delete
> > > > > the
> > > > > > > >virus.
> > > > > > > > > >
> > > > > > > > > > The bad news is that you probably
> > have it, as
> > > > > > > > > > you are in MY address book!  More
> > bad news is that
> > > > > > > > > > my anti-virus program did not detect
> > this virus.
> > > > > > > > > >
> > > > > > > > > > And it is a VERY bad one. This virus
> > lies dormant for 14
> > days
> > > > and
> > > > > > then
> > > > > > > > > kills
> > > > > > > > > > your hard drive.  Here is what to
> > do.  Please follow the
> > > > > > instructions
> > > > > > > >and
> > > > > > > > > > see if you have the virus, if so,
> > you need to send a similar
> > > > > e-mail
> > > > > > to
> > > > > > > > > > everyone in your address book.
> > > > > > > > > >
> > > > > > > > > > Remove the virus by:
> > > > > > > > > >
> > > > > > > > > > 1. Go to "Start."  Then to "Find" or
> > "Search"
> > > > > > > > > > (depending on your computer.)
> > > > > > > > > >
> > > > > > > > > > 2. In the "Search for files or
> > folders" type
> > > > > > > > > > sulfnbk.exe -- this is the name of
> > the virus.
> > > > > > > > > >
> > > > > > > > > > 3. In the "Look in" section, make
> > sure you are
> > > > > > > > > > searching Drive C.
> > > > > > > > > >
> > > > > > > > > > 4. Hit "Search" or "Find."
> > > > > > > > > >
> > > > > > > > > > 5. If your search finds this file,
> > it will be an ugly
> > > > > > > > > > blackish icon that will have the
> > name sulfnbk.exe.
> > > > > > > > > > DO NOT OPEN IT!  If it does not show
> > up on your
> > > > > > > > > > first "Search," try a "New Search."
> > > > > > > > > >
> > > > > > > > > > 6. Right click on the file -- go
> > down to "Delete" and
> > > > > > > > > > left click.
> > > > > > > > > >
> > > > > > > > > > 7. You will be asked if you want to
> > send the file to
> > > > > > > > > > the Recycling Bin--say "Yes."
> > > > > > > > > >
> > > > > > > > > > 8. Go to your Desktop (where all
> > your icons are) and
> > > > > > > > > > right click on the Recycle Bin and
> > either manually delete
> > > > > > > > > > the sulfnbk.exe program or empty the
> > entire bin.
> > > > > > > > > >
> > > > > > > > > > 9. If you found the virus on your
> > system, send this or a
> > > similar
> > > > > > > >e-mail
> > > > > > > >to
> > > > > > > > > > all in your address book because
> > this is how it is
> > > transferred.
> > > > > > > > > >
> > > > > > > > > > Sorry for the trouble and my
> > apologies for having
> > > > > > > > > > unwittingly "infected" you, should
> > it have been passed on to
> > > > you.
> > > > > > > > > >
> > >
> > >
>
>
> __________________________________________________
> Do You Yahoo!?
> Send FREE video emails in Yahoo! Mail!
> http://promo.yahoo.com/videomail/
>
> -------------------------------------------------------------------------
> To unsubscribe from the list, send a message to:
>    <strawbale-unsubscribe@crest.org>
>
> or for the digest to:
>    <strawbale-digest-unsubscribe@crest.org>
>
> Please send any list administration questions to
> strawbale-owner@crest.org
>



-------------------------------------------------------------------------
To unsubscribe from the list, send a message to:
   <strawbale-unsubscribe@crest.org>

or for the digest to:
   <strawbale-digest-unsubscribe@crest.org>

Please send any list administration questions to
strawbale-owner@crest.org