Not only a hoax
(see also
http://securityresponse.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.
html),
but the suggested "cure" has the potential to cause great inconvenience.

Molly Daniel

-----Original Message-----
From: Michael Wetherholt [mailto:xxxxxx@MURRAYSTATE.EDU]
Sent: Tuesday, December 11, 2001 13:44
To: xxxxxx@HRINET.ORG
Subject: Re: [RESADM-L] Virus you are probably infected

This is a hoax go to: http://vil.nai.com/vil/virusSummary.asp?virus_k=99084.
I have seen this message before.

Michael

----- Original Message -----
From: "Lynn Johnson" <xxxxxx@NAS.EDU>
To: <xxxxxx@HRINET.ORG>
Sent: Tuesday, December 11, 2001 1:18 PM
Subject: [RESADM-L] Virus you are probably infected

> I was and it went into my address book.  Please send to everyone else in
your
> address book.  This will delete your hard drive in about 14 days.
> ---------------------- Forwarded by Lynn Johnson on 12/11/2001 02:18 PM
> ---------------------------
>
>
> David Westbrook
> 12/11/2001 12:31 PM
>
> To:   Mary Pat xxxxxx@NAS, Lynn xxxxxx@NAS, Robyn
>       Bumbry/NRC/xxxxxx@NAS
> cc:
> Subject:  Virus
>
> I'm sending this because I found this virus in my computer system
> and it may be in yours since you are in my address book!  This
> notice was sent to me from a colleague outside the Academy who
> has me on his address book.  I've already sent this e-mail to the rest
> of my staff.
>
> This is a virus that is spread from address book to address book. It
> is apparently undetectable by Norton.  It remains dormant for
> about 14 days then activates and wipes out the hard drive data. The
> directions for removing it are easy:
>
> >1. Go to 'start' - then to 'find or search'
> > > > >>(depending on your computer)
> >2. In the 'search for files or folders'
> > > >type
> > > > >>in sulfnbk.exe -- this is the virus.
> >3. In the 'look in' make sure
> > > >you're
> > > > >>searching Drive C.
> >4. Hit 'search' button (or find)
> >5. If this file
> > > >shows
> > > > >>up (it's an ugly blackish icon that will have the name
> >'sulfnbk.exe')
> >
> >DO NOT OPEN IT
> >
> >6. Right click on the file - go down to delete and left
> > > >click.
> > > > >>
> >7. I will ask you if you want to send it to the recycle bin, say yes.
> >8.
> > > > >>Go to your desktop (where all your icons are) and double click on
> >the
> > > > >>recycle bin.
> >9. Right click on sulfnbk.exe and delete again - or empty
> >the bin.
> >
> >  If you find it send this email to all in your address book,
> >because
> > > > >>that's how it's transferred.
>
>
> ======================================================================
>  Instructions on how to use the RESADM-L Mailing List, including
>  subscription information and a web-searchable archive, are available
>  via our web site at http://www.hrinet.org (click on "Listserv Lists")
> ======================================================================

======================================================================
 Instructions on how to use the RESADM-L Mailing List, including
 subscription information and a web-searchable archive, are available
 via our web site at http://www.hrinet.org (click on "Listserv Lists")
======================================================================

======================================================================
 Instructions on how to use the RESADM-L Mailing List, including
 subscription information and a web-searchable archive, are available
 via our web site at http://www.hrinet.org (click on "Listserv Lists")
======================================================================