All

In the past when this hoax went around it was followed by a message with a 100%
virus file attached that was being proffered as a replacement for the
sulfnbk.exe that had been deleted. The hoax was first then the real virus
followed. The virus infected file was from a source independant of the hoax
message. Just watch because I am not seeing this message being delivered along
with the warnings about the hoax.

Just to restate, there is a hoax but also a real virus associated with the file
sulfnbk.exe.

Watch it.

Roger Craik
Maple Ridge BC

Also I would like to pass along Season's Greetings to all on the list. Have a
great Holiday Time.

James West wrote:

> Joanne: the whole point of this hoax is that it directs its recipients to
> remove a system file from their computers -- not a virus file, not a "hoax
> virus file", not even a harmless file put there by the hoaxer, but a
> pre-existing system file, a file that is a standard part of the operating
> system of the computer, and has been there since Windows was installed on
> it. Granted <sulfnbk.exe> is not a very important component (it's a system
> utility that restores long file names), and you may well be able to use your
> computer to the end of its days without you or the operating system calling
> on that file, but you've done exactly what the hoaxer wanted you to do --
> delete a Windows system file, and recommend to a large number of other
> people that they do the same!
>
> There's a description of this virus hoax on
>
> www.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.html
>
> including information on how to restore the deleted system file if you'd
> feel more comfortable with your operating system intact.
>
> JW
>
> ----- Original Message -----
> From: "Joanne H. Powell" <jhpowell at iea.com>
> To: "Tweeters" <tweeters at u.washington.edu>; "Inland Northwest"
> <inland-NW-birders at uidaho.edu>; "Kelly Andrew" <kevkeland at aol.com>; "Greg
> Anders" <jamesgseven at hotmail.com>
> Sent: Sunday, December 23, 2001 7:08 AM
> Subject: fake virus, but...
>
> I received the following information from my sister. I have sent out some
> messages and replied to some messages so thought I should send this to you.
> AOL says this is a hoax virus but I took it off my system anyway. There's
> enough garbage on my hard drive without hoax virus files sitting there! And,
> of course, there's always this sneaking suspicion that somewhere in that
> file there really IS something lying in wait. E-mail paranoia strikes
> again!!
>
> Here's the message I received:
>
> "The virus apparently lies dormat for 14 days and then wakes up and
> somehow damages files on the hard drive.
> To determine if you have the virus and remove it:
> 1. Go to start -- then to "Find" or "Search"
>
> 2. In the Search for file or folders type in
> sulfnbk.exe
>
> 3. In the look in make sure you are searching Drive C
>
> 4. Hit Search button (or find)
>
> 5. If this file shows up (it's an ugly blackish icon that will have the
>
> name sulfnbk.exe) DO NOT OPEN IT
>
> 6. RIGHT CLICK on the file -- go down to delete and left click.
>
> 7. Click on yes and send it to the recycle bin.
>
> 8. Go to your desktop (where all your icons are) and
> double click on the recycle bin.
>
> 9. RIGHT CLICK on sulfnbk.exe and delete again - or empty bin."
>
> Regards, Joanne
> Reardan (Spokane) WA
> mailto: jhpowell at iea.com