Still a hoax (Re: [mplpost] Fw: Fw: ****Urgent viirus problem*****)
Jay Linden
jeigh@rogers.com
Tue Jan 8 21:00:04 2002
Still in public, sorry. Bet we should have been off-list a couple of
rounds now.
The original message is a hoax, and a standard one, which shows up every
month or three.
Anyone who follows the instructions that it contains will, if they find
a file called "sulfnbk.exe" and delete it, discover they are no longer
able to restore long filenames on their system. Windows will run
without it, but might cause you some problems after a crash.
I think someone's already linked the information page on this list
(though it may have been one of the other several lists where this hoax
has reared its ugly head again where I saw it). That page is at
http://www.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.html .
Any caution other than to ignore the hoax will prompt _someone_ to
follow the instructions it contains, thereby disabling a part of their
operating system.
Having so said, I agree with what Scott is saying, with one key
exception.
Nothing is foolproof. But I have been in this industry for close to a
decade and have never once met or heard of anyone who keeps a good
antivirus system up to date and yet has been brought down by a virus.
"badtrans" is a bad virus from a security standpoint but does not harm
the system itself: it logs keystrokes. It's easy to contain and easy to
disinfect. But it isn't the same virus this hoax alleges.
Folks, for what I hope will be last word on this list on the subject (2
beers, Richard <grin>?), whenever you hear about a new virus, run your
antivirus update, to get the most recent protection, and then run the
antivirus program, just in case. In that order. Make sure you're
system is being scanned all the time, or at minimum, when you're
online. Check all new files before you run or install them. Same goes
for Mac users. The antivirus software is cheap and the savings would be
priceless.
Any virus warning telling you to do anything else is almost certainly 1)
a hoax, and 2) potentially far more dangerous than a virus.
Promise I will post about Canadian music.
Scott Cameron Smith wrote:
>
> Jay;
> I am aware of several virus hoaxes including the one mentioned in this
> thread. However one of the characteristics of some of the worms is that they
> delay before attacking the system. It is always a good idea to check the
> "net" before acting on any information like this.
> I disagree with you re: virus programs. They are not fool proof and several
> trojans and worms have made it by the best of them. For the average home
> user who doesn't always keep the dat file up to date it does pose a problem.
> The best method to keep the system clean is to look before you click so to
> speak. Your virus program should be your back up. We have successfully kept
> the latest and greatest from infecting our systems by simply knowing what to
> look for. Virus checkers slow the system down noticeably.
>
> Granted each user will have different needs base on their overall computer
> knowledge.
>
> Cheers,
> Scott Cameron Smith
> ----- Original Message -----
> From: "Jay Linden" <jeigh@rogers.com>
> To: <maplepost@icomm.ca>
> Sent: Monday, January 07, 2002 6:19 PM
> Subject: Still a hoax (Re: [mplpost] Fw: Fw: ****Urgent viirus problem*****)
>
> >
> > Sorry in advance for YAAVP. Richard, will a beer make good for this
> > <grin>?
> >
> > It's not badtrans or any other virus. Any good antivirus will stop any
> > virus, unless you get unlucky enough to catch the virus within hours of
> > its invention -- or unless you don't update your antivirus "signatures"
> > regularly. And it almost *never* happens that normal people like us
> > would catch a virus so soon after its birth that the antivirus folks
> > haven't yet created the cure, since it only takes them a few hours to do
> > that.
> >
> > The reason Norton and McAfee don't "catch" that virus is that the file
> > they're telling you to delete is not a virus at all, but a useful part
> > of your operating system.
> >
> > Do not delete it. Trust me, you're gonna miss it when it's gone.
> >
> > The only thing "virus" about this one is the way it spreads among
> > mailing lists, threatening people with deleting an important system file
> > from their computers, spending lots of extra time for people warning
> > other people not to delete those files.
> >
> >
> > Scott Cameron Smith wrote:
> > >
> > > That sounds like the badtrans virus....nasty. I have cleaned up a few
> > > friends computers of that one. Remember folks...if you don't open the
> > > attachment it can't get you so think before you click. Check the file
> > > extensions they will be a dead give-away as to what it is or isn't.
> > >
> > > If anyone would like detailed info you can write me and I'd be glad to
> tell
> > > to how to live without fear or dependence on virus protectors, as they
> don't
> > > always work.
> > >
> > > Cheers,
> > > Scott Cameron Smith
> > > ----- Original Message -----
> > > From: "Chris MacLean" <papilia@magma.ca>
> > > To: <Undisclosed-Recipient:@icomm.ca;>
> > > Sent: Monday, January 07, 2002 6:35 PM
> > > Subject: [mplpost] Fw: Fw: ****Urgent viirus problem*****
> > >
> > > > Hi folks
> > > > Me too. Even tho I have virus protection from my service provider!
> Follow
> > > > the instructions below. Hopefully
> > > > this will alleviate any problems caused.
> > > > Cheers
> > > > Chris
> > > > ----- Original Message -----
> > > > From: Sue Couture <scouture@istar.ca>
> > > > To: Sue Couture <scouture@istar.ca>
> > > > Sent: Monday, January 07, 2002 4:33 AM
> > > > Subject: Fw: Fw: ****Urgent viirus problem*****
> > > >
> > > >
> > > > > Hi Everyone - please see the note regarding this virus. I checked
> and
> > > it
> > > > > was on my hard drive. Sue
> > > > >
> > > > > ----- Original Message -----
> > > > > From: "Lisa & Tony" <ltweiss@sympatico.ca>
> > > > > To: <Undisclosed-Recipient:;>
> > > > > Sent: Monday, January 07, 2002 7:38 AM
> > > > > Subject: Fw: Fw: ****Urgent viirus problem*****
> > > > >
> > > > >
> > > > > > Hello Everyone,
> > > > > > Please check your computer for this virus and follow the
> instructions
> > > > > > below... We had it on ours and did not know it.
> > > > > >
> > > > > > Regards,
> > > > > > Lisa & Tony
> > > > > > ----- Original Message -----
> > > > > >
> > > > > > Sent: Saturday, January 05, 2002 12:23 AM
> > > > > > Subject: Fw: Fw: ****Urgent viirus problem*****
> > > > > >
> > > > > >
> > > > > > >
> > > > > > > > > Hello Everyone,
> > > > > > I just received an email that said I might have a virus that is
> spread
> > > > > > from address book to address book. It is apparently undetectable
> by
> > > > > > Norton and McAfee. It remains dormant for about 14 days then
> activates
> > > > > > and wipes out the hard drive data. When I checked my hard drive,
> I
> > > did
> > > > > find
> > > > > > the virus and successfully deleted it.
> > > > > >
> > > > > > Since I have you in my address book, I want to share this
> > > > > > message in case you, too, picked it up. The directions for
> removing it
> > > > are
> > > > > > quite easy to follow.
> > > > > >
> > > > > > 1. Go to "Start" then to "find or search"
> > > > > >
> > > > > > 2. In the "Search" for files or folders type in "sulfnbk.exe"
> > > > > > this is the virus.
> > > > > >
> > > > > > 3. In the "look in" make sure you're searching Drive C
> > > > > >
> > > > > > 4. Hit "Search" button
> > > > > >
> > > > > > 5. It this file shows up (lt's an ugly blackish icon that will
> have
> > > the
> > > > > > name "sulfnbk.exe") DO NOT OPEN IT
> > > > > >
> > > > > > 6. RIGHT click on the file go down to delete and left click.
> > > > > >
> > > > > > 7. lt will ask you if you want to send it to the recycyle bin,
> > > > > > say yes.
> > > > > >
> > > > > > 8. Go to your desktop and double click on your recycle bin and
> delete
> > > > > >
> > > > > > If you find it, send this email to all in your address book,
> > > > > > because that's how its transferred.
> > > > > >
> > > > > > Sorry for the bad news. Hopefully, you won't find it, or at
> > > > > > least will find it in time to avoid problems with your hard drive
--
Jay Linden Toronto, Canada
e-business Advisor, IBM Global Services jeigh@rogers.com
These onions are MINE and not those of my EMPLOYER.
Wait, that should be OPINIONS. I have no idea whose onions these are.
-
To unsubscribe: mail majordomo@icomm.ca with
"unsubscribe maplepost" in the body (not the subject line)
Need help? mail owner-maplepost@icomm.ca