The file SULFNBK.EXE is a valid windows file, which should live in the
folder "/windows/command/". Broadly speaking, if it is found in any other
folder, it should be deleted (as it is probably the virus) and a full virus
sweep done.
If the file has been deleted from "/windows/command" folder it should be
reinstalled; Windows will not function properly without this file, and if
deleted it must be reinstalled.
The hoax has now been received by my wife and I from seven different
groups! I have received it from Italy, North and South America. As it
takes up to an hour to re-instate the file the amount of time it has wasted
must be staggering.
Daniel Janes
Well, OK, as a follow-up there is this. It seems it both is and is not a
hoax...
kent
>From: Eliot Weinberger <[log in to unmask]>
>To: [log in to unmask]>
>Subject: The virus and the hoax
>Date: Fri, 01 Jun 2001 17:14:03 -0400
>
>Since I did indeed get the virus connected to SULFNBK.EXE, many people have
>been sending me either the warning message or the message that the warning
>message is a hoax.
>
>Please note here are two different things:
>
>On one side, there is a very real virus, which is sent as a SULFNBK.EXE
>file and which will lodge in your computer and automatically send itself to
>everyone on your e-mail list along with random selections from your
>files.(Which is the virus I had).
>
>On the other side, all Windows programs have a legitimate file called
>SULFNBK.EXE which does something about long file names, and is not very
>important.
>
>If you have NOT received an e-mail with a SULFNBK.EXE attachment which you
>clicked on, there is no problem. Your SULFNBK.EXE file is normal. (You must
>click on the attachment to get the virus; just opening the e-mail will not
>do it.)
>
>If you did, or think you did, go to Windows Explorer, find the file, and
>see if the SULFNBK.EXE has been modified recently. (Or you'll know if
>friends start complaining about getting weird e-mails from you.) You should
>delete it, and then empty the trash. If for some reason you need it again,
>you can reinstall it from the Windows program.
>
>As for the June 1 crash date-- which is probably a hoax, but who knows
>yet?-- it will only apply to those infected with the virus. And if you have
>it, believe me, you already know it.
>
>In short, it is not a hoax in that the virus lodges in this file once it is
>received, and it is a hoax in terms of the warning to EVERYONE to delete
>it.
>
>
>
>
|