scooby nutter

Just recieved a email,saying my computer might be infected with a virus,by a company who i have dealed with.
It is meant to lie dormant for 14 days then wipes the hard drive.

Check as follows.
goto start ,select "find" and do a search on the hard drive for
sulfnbk.exe
if it is infected you will see a ugly black icon.
rightclick and delete
goto recycle bin and empty it.

job done.

the virus uses you email addresses to spread so if your infected,your email contacts might also be infected.

It was on my pc so i deleted it.

Duncan

[Edited by scooby nutter - 12/29/2001 12:42:09 PM]

47 NAT

I had this come through a while ago and checked it with the www.symnatec.com site and it suggested it was a hoax.

Dont delete until you know for sure.The Symnatec site gives you all the details of whats what, etc.....



Nath

[Edited by 47 NAT - 12/29/2001 12:53:38 PM]

scooby nutter

Oh bugger!
iv'e already deleted it!!!

Just been on that site you mentioned and it says it was a hoax!!
I followed the instructions and restored it.

It is written into windows(something to do about managing long file names)

Duncan

[Edited by scooby nutter - 12/29/2001 1:10:34 PM]

47 NAT

Here you go, this should help you restore it.....



How to restore the Sulfnbk.exe file
If you have deleted this file, restoration is optional. Sulfnbk.exe is a Microsoft Windows utility that is used to restore long file names. It is not needed for normal system operation. If you want to restore it, there is more than one way to do this. See the information that follows.
NOTE: The instructions in this document are provided for your convenience. The extraction of Windows files uses Microsoft programs and commands. Symantec does not provide warranty support for or assistance with Microsoft products. If you have any questions, please see your Windows documentation or contact Microsoft.

Windows Me
If you are using Windows Me, you can restore the file using the System Configuration Utility.
1. Click Start and then click Run.
2. Type msconfig and then press Enter.
3. Click Extract Files. The "Extract one file from installation disk" dialog box appears.
4. In the "Specify the system file you would like to restore" box, type the following, and then click Start:

c:\windows\command\sulfnbk.exe

NOTE: If you installed Windows to a different location, make the appropriate substitution.

The Extract File dialog box appears.

5. Next to the "Restore from" box, click Browse, and browse to the location of the Windows installation files. If they were copied to the hard drive, this is, by default, C:\Windows\Options\Install. You can also insert the Windows installation CD in the CD-ROM drive and browse to that location.
6. Click OK and follow the prompts.


Windows 98
If you are using Windows 98, you can restore the file using the System File Checker.
1. Click Start and then click Run.
2. Type sfc and then press Enter.
3. Click "Extract one file from installation disk."
4. In the "Specify the system file you would like to restore" box, type the following, and then click Start:

c:\windows\command\sulfnbk.exe

NOTE: If you installed Windows to a different location, make the appropriate substitution.

The Extract File dialog box appears.

5. Next to the "Restore from" box click Browse, and browse to the location of the Windows installation files. If they were copied to the hard drive, this is, by default, C:\Windows\Options\Cabs. You can also insert the Windows installation CD in the CD-ROM drive and browse to that location.
6. Click OK and follow the prompts.

Windows 95 (or alternative method for Windows 98/Me)
If you are using Windows 95, you need to use the extract command. This can also be used on Windows 98/Me.

1. Click Start, point to Find or Search, and then click Files or Folders.
2. Make sure that "Look in" is set to (C and that Include subfolders is checked.
3. In the "Named" or "Search for..." box, type:

precopy1

4. Click Find Now or Search Now. If it does not exist on the hard drive, then insert the Windows installation CD and repeat the search on that drive.
5. When you find the file, write down the location of Precopy1, for example, C:\Windows\Options\Cabs. This is your Source Path.
6. The general form of the Extract command is:

extract /a \precopy1.cab sulfnbk.exe /L c:\windows\command

NOTE: Make sure that you include the /a switch, as shown. Depending on your version of Windows, the Sulfnbk,exe file can be in a .cab file other than Precopy1.cab. By using the /a switch, the Extract program will look first in the Precopy1.cab, and if the file is not found there, it will look in all subsequent .cab files until it is found, and can be extracted.

So if the source path is C:\Windows\Options\Cabs, then the Extract command becomes:

extract /a c:\windows\options\cabs\precopy1.cab sulfnbk.exe /L c:\windows\command

NOTE: If you installed Windows to a different location, make the appropriate substitution.

7. Click Start and then click Run.
8. Type the following, making the appropriate substitutions as previously noted

extract /a \precopy1.cab sulfnbk.exe /L c:\windows\command

9. Click OK.

scooby nutter

Cheers mate.

Duncan

47 NAT

Glad you got it sorted Duncan