Joe Hailey
Hi everyone and a Merry Christmas:
The details about the HOAX follow:
Symantec Security Response encourages you to ignore any messages regarding
this hoax. It is harmless and is intended only to cause unwarranted concern.
Type: Hoax
Description:
The following hoax email was first reported in Brazil, and the original
email was in Portuguese. Other language versions are in circulation.
Currently, the English language versions are most common.
CAUTIONS:
This particular email message is a hoax. The file that is mentioned in the
hoax, however, Sulfnbk.exe, is a Microsoft Windows utility that is used to
restore long file names, and like any .exe file, it can be infected by a
virus that targets .exe files.
The virus/worm W32.Magistr.24876@mm can arrive as an attachment named
Sulfnbk.exe. The Sulfnbk.exe file used by Windows is located in the
C:\Windows\Command folder. If the file is located in any other folder, or
arrives as an attachment to a email message, then it is possible that the
file is infected. In this case, if a scan with the latest virus definitions
and with NAV set to scan all files does not detect the file as being
infected, quarantine and submit the file to SARC for analysis by following
the instructions in the document How to submit a file to SARC using Scan and
Deliver.
If you have deleted the Sulfnbk.exe file from the C:\Windows\Command folder
and want to know how to restore the file, see the How to restore the
Sulfnbk.exe file section at the end of this document.
Happy cycling and don't eat tooo much over the holidays.
Joe Hailey
----- Original Message -----
From: "Don Leet" <don-@kmx.com>
To: "William R. Nelson" <bilk-@bendnet.com>; "Toby Bayard"
<tob-@teleport.com>; "Toby Bayard" <toby.b-@Bcone.com>; "tdstan"
<tds-@telus.net>; "Sunnyside Sports" <sunny-@kmxnet.com>;
<spo-@bendbulletin.com>; "Spehar, Harry" <harry_-@kleinbike.com>;
<Sne-@aol.com>; <shirle-@orst.edu>; "Senty Carolyn C."
<cc.s-@hosp.wisc.edu>; <Sdto-@aol.com>; <sce-@empnet.com>; "Sally
Russenberger" <casc-@bendcable.com>; "Randy Dreiling"
<ran-@oregon-adventures.com>; <pin-@qwest.net>; <ob-@topica.com>;
<ob-@teleport.com>; "neil hicks" <neilh-@mindspring.com>;
<nan-@hevanet.com>; <mschin-@yahoo.com>; "Michelle A. McElligott"
<mich-@hevanet.com>; <mark.sc-@milliman.com>; "Lloyd or Sue
Vordenberg" <vord-@yahoo.com>; "Lew and Barbara Bohm-Becker"
<able-@teleport.com>; <Kfre-@aol.com>; "Kevin P. Lawlor"
<law-@math.utah.edu>; "Kevin Murray" <mur-@biochemistry.ucl.ac.uk>;
"Kathleen Welland" <kwel-@gorge.net>; "Kathleen Gault"
<earth-@kmmx.com>; "Kathleen Gault" <earth-@kmx.com>; "Karen Kenlan"
<kenlan@tel eport.com>; "Judy Cochran" <coch-@bendcable.com>;
<jonem-@lycos.com>; "Jon Strandberg" <jon_str-@hotmail.com>; "John
at OneSpeed Bikes" <ones-@bendcable.com>; "Joanne Stevens"
<RRR-@aol.com>; "Jim Anderson" <spa-@teleport.com>; <jam-@BoyVelo.com>;
<in-@crosscrusade.com>; "Harry Spehar" <harry_-@trekbike.com>;
<dle-@matnet.com>; "Diana Rupp" <rdr-@teleport.com>; "Dave Zimbelman"
<haz-@gorge.net>; "Dave Swan" <da-@q-photo.net>; "Damian"
<schm-@ucs.orst.edu>; "Damian" <twowhe-@yahoo.com>; "Chuck Phinney"
<crphi-@adelphia.net>; "Chuck and Sanna Phinney"
<chuck_p-@email.msn.com>; "Carole A. Carr" <hou-@hevanet.com>;
"Candace Bonner, M.D. 67 3158" <Candace-@kp.org>; "Bob Leet"
<rle-@shaysnet.com>; "Bob Jensen" <rdj-@home.com>; "Bob and Elizabeth
Westlake" <west-@quik.com>; "Annie Engel" <annie-@bendcable.com>;
<amyd-@teleport.com>
Sent: Saturday, December 22, 2001 6:04 AM
Subject: [OBRA Chat] Fw: Your computer may have a virus via my address book
============================================================
Enter to Win Free Maid Service and More from Pfizer!
Win Free Maid Service for 6 Months, a "Day of Beauty" or
a Palm Handheld! Enter Now!
http://click.topica.com/caaae7xaVxiDpaVB3afa/Pfizer
============================================================
----- Original Message -----
From: "Lloyd or Sue Vordenberg" <vord-@yahoo.com>
To: "Alice Petrie" <abpe-@aol.com>; "Lucy Phillip" <luc-@home.com>;
"gary pratt" <gprat-@cs.com>; "Gary L. Pratt" <pra-@nku.edu>; "Judith
A. Richter" <jric-@iupui.edu>; "Ken Roadman"
<kroa-@redmond.k12.or.us>; "Michael Romine"
<mrom-@smrarchitects.com>;
"Chris Sabo" <csa-@fs.fed.us>; "Inge Scheve" <skii-@yahoo.com>; "Ted or
Carol Schoenborn" <schoe-@bendnet.com>; "Mary Schultz"
<msch-@bendnet.com>; "Nathan Schultz" <nsch-@nsavage.com>; "Peggy
Schwarz" <p18sc-@cs.com>; "Peggy Schwarz"
<PSch-@larimer.cccoes.edu>;
"Terry/David Smullin-Bonynge" <dsmu-@redmond.k12.or.us>; "Bob Speik"
<rsp-@transport.com>; "Pam Stevenson" <pam_ste-@hotmail.com>;
"Cheryl
Stomps" <cast-@aol.com>; "marlys svensson" <sven-@empnet.com>;
"Danielle Takla" <data-@coinet.com>; "Martha Tiller"
<mtil-@bendbulletin.com>; "James G. Todd" <todd-@open.org>; "Pete F
Vordenberg" <pet-@endurance-enterprises.com>; "Doug or Juanita King"
<DougDan-@aol.com>; "Mark or Suzanne King" <mands-@msn.com>;
"Mickey Klein" <mkle-@earthlink.com>; "Muriel Knowler"
<westrail-@westrailstours.com>; "Holly LaPoint"
<lapo-@bendnet.com>;
"Don Leet" <don-@kmx.com>; "Susan Maasch" <suev-@empnet.com>; "Chuck
Mackdanz" <cma-@transport.com>; "bill and Ginny Martin"
<wmar-@bendcable.com>; "jinny martin" <vmar-@bendcable.com>; "dina
mcclure" <mcclu-@cs.com>; "Pat Meade" <fr_p-@cccs.cccoes.edu>; "Pat
Meade" <pat.m-@wc.frcc.cccoes.edu>; "Don Meek"
<jeremy-@yahoo.com>;
"peter miller" <pmil-@bend.k12.or.us>; "Arve Minde"
<arve.-@ulleval.oslo.kommune.no>; "tumalolanglauf Moderator"
<tumalolang-@egroups.com>; "Owen Murphy" <ofmu-@hotmail.com>;
"Win Nolin" <wi-@oneimage.com>; "Stacie Oberson"
<sobe-@bendbulletin.com>; "Leslie Olson" <lol-@bendcable.com>;
"Jeannie
Patton" <jpat-@chisp.net>; "Jeannie Patton" <jean-@csn.net>; "Mark
Peterson" <msp-@hotmail.com>; "Pat or Hajo Peterson" <hppe-@infi.net>;
"Tom and Lois Gibbons" <TLG-@aol.com>; "Marie Gibson"
<jpg-@bendcable.com>; "micheale giesler" <mgie-@bendcable.com>;
"Roger
Gildersleeve" <gsle-@teleport.com>; "Jean Glassman"
<jglas-@bendbulletin.com>; "Lee or Corlet Graff"
<lkgr-@bendcable.com>;
"Kath and Scot Graham" <SrvcA-@aol.com>; "Scot Graham"
<skgr-@bendcable.com>; "Rich Gross" <reds-@hwy97.net>; "Molly and
Kevin
Grove" <gro-@bendnet.com>; "Molly and Kevin Grove"
<molly-@hotmail.com>; "Lonnie Hart" <FR_Lo-@cccs.cccoes.edu>;
"Katie
Hays" <kmha-@aol.com>; "tad and deb hodgert" <de-@hodgertfarm.com>;
"Anne
Hooker" <anne-@yahoo.com>; "ben and lisa husaby" <lhus-@scmc.org>;
"benjamin husaby" <bhus-@hotmail.com>; "Barbara Jones"
<barbara.e-@alum.dartmouth.org>; "Dave and Nancy Jones"
<chf-@aol.com>; "Keith and Juliane" <kjka-@bendnet.com>; "Mitch
Kaman"
<mitch-@yahoo.com>; "Marty and Kathy" <mr-@bendnet.com>; "Chuck
Kenlan"
<cken-@mtbachelor.com>; "chuck and karen kenlan" <ken-@teleport.com>;
"Ann and John Kieffer" <jkie-@coinet.com>; "Pat or Peggy Conley"
<patk-@fuse.net>; "Peggy Conley" <peggy.-@lakotaonline.com>; "Stacy
Conley" <scon-@trane.com>; "ellen cordes" <ellym-@hotmail.com>; "Ron
Crawford" <rcra-@bend.k12.or.us>; "George Crisp" <GandD-@aol.com>;
"Jim and Jill Cunningham" <jdcj-@earthlink.net>; "Jim/work Cunningham"
<jim.cun-@printrak.com>; "Cory Custer" <coryc-@theglobal.net>;
"Cory Custer" <CCus-@dadco.com>; "jean Davis" <jea-@bendnet.com>; "Eric
Denzler" <er-@bendparksandrec.org>; "Peter Vordenberg"
<petervor-@hotmail.com>; "Sue Vordenberg" <fr_s-@cccs.cccoes.edu>;
"John and Helen Whitbeck" <whitb-@aol.com>; "Cindy Wright"
<csic-@aol.com>; "Kurt Wulff" <kwu-@hotmail.com>; "Kurt Wulff"
<kurtw-@c2i.net>; "Zach" <za-@bendparksandrec.org>
Sent: Friday, December 21, 2001 9:54 PM
Subject: Your computer may have a virus via my address book
The following is a message from a friend alerting me
to the possibility that my computer might have been
sent a virus because I was in her address book, and
her computer was infected. I followed the steps below
and found the icon for the virus as described. It is
likely your computer also is infected. I used the
following instructions to remove (I hope) the virus
and to block similarly transmitted ones in the future.
I'm sorry about this, but better check your computer.
If you find the virus, alert everyone in your address
book as well.
"You may have this virus in your hard drive because
you are in my address book. Best check it out.
Norton 2002 does not find it on the entry or on a full
disk scan, apparently because it is new or because it
has an .exe extension....The virus lies dormant for 14
days, and then kills your hard drive. Here's how to
stop it....
1. Go to "start (lower left, on your desktop)- then
to "find or search" depending on your computer.
2. In the "search for files or folders" type
sulfnbk.exe This is the virus.
3. In the "look in" make sure you are searching the C
drive. Hit "search button" or "find".
4. If this file shows up DO NOT OPEN!!! It's an ugly
blackish icon that will have the name sulfnbk.exe
5. RIGHT click on the file, go down to delete and
left click.
6. It will ask if you want to send it to the recycle
bin, say yes.
7. Go to your desktop where all your icons are and
double click the recycle bin.
8. Right click on "sulfnbk.exe" and delete again --
or empty the recycle bin.
9. REBOOT YOUR COMPUTER.
10. Send this message to everyone in your address
book, because that is how it is transfered.
11. To keep a virus from attaching itself to your
address book you can do this: create a fictitious
address, one that starts with 0 or anything that will
be at the top of your address book. The bad address
should block anything that tries to attach itself to
the address book.
__________________________________________________
Do You Yahoo!?
Send your FREE holiday greetings online!
http://greetings.yahoo.com
============================================================
Adobe(R) Photoshop(R) Elements.
Easily create professional-quality images
with this affordable digital imaging software!
Click here to download your free tryout now.
http://click.topica.com/caaaeTaaVxiDpaVB3aff/AdobePhotoshop
============================================================
To respond to the whole group send to ob-@topica.com.
To respond to the list manager send to ob-@teleport.com
To unsubscribe send to obra-uns-@topica.com