From britdisc-owner@csv.warwick.ac.uk Mon Dec 31 01:26:33 2001 Received: (from daemon@localhost) by pansy.csv.warwick.ac.uk (8.11.6/8.11.6) id fBV1MM624316 for britdisc-outgoing; Mon, 31 Dec 2001 01:22:22 GMT Received: from snowdrop.csv.warwick.ac.uk (root@snowdrop [137.205.192.31]) by pansy.csv.warwick.ac.uk (8.11.6/8.11.6) with ESMTP id fBV1MLu24311 for <britdisc-real@pansy.csv.warwick.ac.uk>; Mon, 31 Dec 2001 01:22:21 GMT Received: from cmailg4.svr.pol.co.uk (cmailg4.svr.pol.co.uk [195.92.195.174]) by snowdrop.csv.warwick.ac.uk (8.11.6/8.11.6) with ESMTP id fBV1MKF09119 for <britdisc@csv.warwick.ac.uk>; Mon, 31 Dec 2001 01:22:20 GMT Received: from modem-699.buffalo.dialup.pol.co.uk ([217.134.66.187] helo=v2n6k5) by cmailg4.svr.pol.co.uk with smtp (Exim 3.13 #0) id 16Kr9f-0003Qk-00 for britdisc@csv.warwick.ac.uk; Mon, 31 Dec 2001 01:22:19 +0000 Message-ID: <000f01c1919b$172bf640$bb4286d9@v2n6k5> From: "Chris White" <penguins@hove42.freeserve.co.uk> To: <britdisc@csv.warwick.ac.uk> References: <F26ci3QIwemiG9zoate0000c4a8@hotmail.com> Subject: Re: VIRUS ALERT - READ AND TAKE ACTION Date: Mon, 31 Dec 2001 01:33:01 -0000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-britdisc@warwick.ac.uk Precedence: bulk Also found at the Sophos site 20 December 2001 SULFNBK: Virus or hoax... or both? Sophos has received a large number of calls from users concerned about a virus known as SULFNBK or SULFNBK.EXE. There is a warning message being distributed around the net (in various languages) telling users to search their hard drives for a file called SULFNBK.EXE. If they find it - the warning tells them - delete it because it is infected by a virus which may trigger on 1 June (other versions say 25 May). Sophos advises users to treat the warning with scepticism. Many computers do have a legitimate uninfected version of SULFNBK.EXE on them because it is a program which comes with Windows 95/98 to backup and restore long filenames. Deleting the file may in fact cause your computer system serious problems. The confusion is compounded, however, by the W32/Magistr-A virus which is capable of emailing infected copies of SULFNBK.EXE to innocent users. This is probably how the scare started. Sophos offers users confused by the hoax warning and the virus, the following advice: If you receive an unsolicited executable file in your email (such as SULFNBK.EXE), simply delete the email. You should never launch or open unsolicited executable code on your computer. Existence of a file called SULFNBK.EXE on your hard drive is not evidence in itself of a virus infection. The best way to check for a virus infection is with anti-virus software. Run a quality anti-virus product and keep it updated to protect against the latest threats. Do not pass on virus warnings to all of your friends. Instead, check the facts at an anti-virus website, or forward the warning to the person in your company who is responsible for virus protection so they can decide if it is valid. More info can be found at http://www.sophos.com/virusinfo/articles/sulfnbk.html Chris W