Re: VIRUS FOUND
- Subject: Re: [iris-photos] VIRUS FOUND
- From: "sdkeller" <firstname.lastname@example.org>
- Date: Sat, 10 Nov 2001 08:17:27 -0500
Quote form Symantec:
The following hoax email was first reported in Brazil. The original email is in Portuguese; it is followed by several other versions.
a.. This particular email message is a hoax. The file that is mentioned in the hoax, however, Sulfnbk.exe, is a Microsoft Windows utility that is used to restore long file names, and like any .exe file, it can be infected by a virus that targets .exe files.
b.. The virus/worm W32.Magistr.24876@mm can arrive as an attachment named Sulfnbk.exe. The Sulfnbk.exe file used by Windows is located in the C:\Windows\Command folder. If the file is located in any other folder, or arrives as an attachment to a email message, then it is possible that the file is infected. In this case, if a scan with the latest virus definitions and with NAV set to scan all files does not detect the file as being infected, quarantine and submit the file to SARC for analysis by following the instructions in the document How to submit a file to SARC using Scan and Deliver.
c.. If you have deleted the Sulfnbk.exe file from the C:\Windows\Command folder and want to know how to restore the file, see the How to restore the Sulfnbk.exe file section at the end of this document.
----- Original Message -----
From: Patrick Orr
To: ARDI ; Dennis Kramb ; irisman ; Hall_N_Cliff ; IRIS_TALK ; IRIS PHOTOS ; LISA ; Rick Tasco/Roger Duncan
Sent: Saturday, November 10, 2001 4:49 AM
Subject: [iris-photos] VIRUS FOUND
A friend wrote me about this virus. I did find it on my computer and destroyed it. Directions below on how to do it. It is easy, but once you locate it, DO NOT OPEN IT.
----- Original Message -----
Sent: Friday, November 09, 2001 9:45 PM
To: Patrick Orr
A REAL LIVE VIRUS, "SULFNBK.EXE," IS PROBABLY IN YOUR COMPUTER.
I just received this virus warning and checked to find that IT IS IN MY
COMPUTER. As best as I can tell I received it around 10/23/2001. The
likelyhood is high that now it is in your computer also looming in the
background waiting to become effective and do damage.
Please read about in the following e-mail, then follow the simple
instructions to destroy it.
If your computer was infected, you may have infected others with your
e-mails. Please send this to everyone and anyone you may have sent
e-mail to since 10/23/2001.
>Subject: Virus warning
>Date: Wed, 7 Nov 2001 00:54:06 -0500
>I received virus "SULFNBK.EXE" in a recent e-mail. The attached file has
>a relatively easy cure. Please check if it has been passed on to you. Bad
>news: I was infected, so you might be also. Good news: this is quick and
>easy to fix. Follow instructions, be sure you are looking in the "C" file,
>not the CStartup.
>This virus is received via e-mail also transferred by e-mail. Our
>Anti-virus through Nortons and McAfee did not stop it. This virus is
>programmed to activate at a later date when it does you will lose all your
>information and data on your hard drive. The virus infiltrates through
>WINDOW/COMMAND. If your computer was infected, you may have infected
>others with your e-mails. Please send this to everyone and anyone you may
>have sent e-mail to in the last month. If you follow these steps you can
>eliminate the virus: Good Luck and Sorry for infecting your computer=