Malicious virus hoax: Do not delete the file
The Star (31st May 2001)

PETALING JAYA: Thousands of Malaysians were given a scare early this morning when they received e-mail telling them about a virus named SULFNBK.EXE, supposedly present on all Windows PCs.

Antivirus companies and Internet security experts have discovered that this is a particularly malicious hoax.

The e-mail advised users to immediately delete the SULFNBK.EXE file because it is a supposedly undetectable virus that activates on June 1 - and of course, you're supposed to forward the message to everyone you know.

However, SULFNBK.EXE is actually a valid system file, and deleting it would mess with your PC's settings.

The Symantec AntiVirus Research Center (SARC) said that the hoax was first discovered in Brazil.

"The file that is mentioned in the hoax, SULFNBK.EXE, is a Microsoft Windows utility that is used to restore long file names, and like any .exe file, it can be infected by a virus that targets .exe files," SARC (www.symantec.com/avcenter) said in a press statement.

"If you have deleted the SULFNBK.EXE file from the C:\Windows\Command folder and want to know how to restore the file, you should contact your computer manufacturer or Microsoft for assistance," it added.

The hoax e-mail reads as follows:

Do you believe that a friend of mine sent me an alert and the procedure that we have to follow for the possible infection of SULFNBK.EXE. And I had checked, just to make sure. An then... the file was there, hidden even of McAfee and Norton, maybe waiting something to start work.

Well, see bellow the procedure that I followed step by step, and I found the file:

1. Start/Find Folders. Type the file name: SULFNBK.EXE

2. If it find, open Windows Explorer, browse into the folder where the file is and delete it. Do not click with left button on the file and do not open it.

3. Just delete it

4. Mine was on Windows/Command

5. The virus from the person who gave the alert was on Windows/Config

Yes, Norton and McAfee do not detect it.

We do not know if it makes some damage on the machine, but I think that anybody will not want to test it to know, will it?

Folks, this is not fun, I deleted it from my computer.

And my definitions are updated.

Do the same, ok?

A new version of this hoax has additional text stating the virus will activate on June 1st:

It was brought to my attention yesterday that a virus is in circulation via email. I looked for it and to my surprise I found it on mine. ..

Please follow the directions and remove it from yours TODAY!!!!!!!

No Virus software can detect it. It will become active on June 1, 2001.

It might be too late by then. It wipes out all files and folders on the hard drive. This virus travels thru E-mail and migrates to the 'C:\windows\command' folder.

The bad part is: You need to contact everyone you have sent ANY E-mail to in the past few months. Many major companies have found this virus on their computers. Please help your friends !!!!!!!!

DO NOT RELY ON YOUR ANTI-VIRUS SOFTWARE. McAFEE and NORTON CANNOT DETECT IT BECAUSE IT DOES NOT BECOME A VIRUS UNTIL JUNE 1ST. WHATEVER YOU DO, DO NOT OPEN THE FILE!!!