europa-list
[Top] [All Lists]

Fw: FLYER: v==ruuss

Subject: Fw: FLYER: v==ruuss
From: Miles McCallum <milesm@avnet.co.uk>
Date: Fri, 1 Jun 2001 12:49:23
Arrrggghh conned ? perhaps - the person who originally called me rang
back -sez that it's a legitimate system file, but some may be infected and
better safe than sorry. Info and Instructions below..

Miles

.MSULFNBK.EXE Warning  Reported on: April 17, 2001  Last Updated on: May 31,
The file that is mentioned in the hoax, however, Sulfnbk.exe, is a Microsoft
Windows utility that is used to restore long  file names, and like any .exe
file, it can be infected by a virus that targets .exe files.
 The virus/worm W32.Magistr.24876@mm can arrive as an attachment named
Sulfnbk.exe. TheSulfnbk.exe file used by Windows is located in the
C:\Windows\Command folder. If the file is locatedin any other folder, or
arrives as an attachment to aemail message, then it is possible that the
file isinfected. In this case, if a scan with the latest virusdefinitions
and with NAV set to scan all files does not detect thefile as being
infected, quarantine and submit the fileto SARC for analysis by following
the instructions inthe document

How to submit a file to SARC using Scan and Deliver.
 If you have deleted the Sulfnbk.exe file from the C:\Windows\Command folder
and want to know how to restore the file, see the How to restore the
Sulfnbk.exe file section at the end of thisdocument.
How to restore the Sulfnbk.exe file If you have deleted this file,
restoration is optional.
 Sulfnbk.exe is a Microsoft Windows utility that is usedto restore long file
names. It is not needed for normalsystem operation. If you want to restore
it, there is morethan one way to do this. See the information that follows.
 NOTE: The instructions in this document are providedfor your convenience.
The extraction of Windows files uses Microsoft programs and commands.
Symantec does not provide warranty support for or assistance withMicrosoft
products. If you have any questions, please see you Windows documentation or
contact Microsoft.
 Windows Me
 If you are using Windows Me, you can restore the fileusing the System
Configuration Utility. 1. Click Start and then click Run
. 2. Type msconfig and then press Enter.
 3. Click Extract Files. The "Extract one file from installation disk"
dialog box appears.
 4. In the "Specify the system file you would liketo restore" box, type the
following, and then clickStart:
 c:\windows\command\sulfnbk.exe
 NOTE: If you installed Windows to a different location, make the
appropriate substitution. The Extract File dialog box appears.
 5. Next to the "Restore from" box, click Browse,and browse to the location
of the Windows installation files. If they were copied to the hard drive,
thisis, by default, C:\Windows\Options\Install. You can also insert the
Windows installation CD in the CD-ROM drive and browse to that location.
 6. Click OK and follow the prompts.
 Windows 98
 If you are using Windows Me, you can restore the fileusing the System File
Checker.
 1. Click Start and then click Run.
 2. Type sfc and then press Enter.
 3. Click "Extract one file from installationdisk."
 4. In the "Specify the system file you would liketo restore" box, type the
following, and then clickStart: c:\windows\command\sulfnbk.exe
 NOTE: If you installed Windows to a different location, make the
appropriate substitution. The Extract File dialog box appears.
 5. Next to the "Restore from" box click Browse,and browse to the location
of the Windows installation files. If they were copied to the hard drive,
thisis, by default, C:\Windows\Options\Cabs. You can also insert the Windows
installation CD in the CD-ROM drive and browse to that location.
 6. Click OK and follow the prompts.
 Windows 95 (or alternative method for Windows 98/Me)If you are using
Windows 95, you need to use the extractcommand. This can also be used on
Windows 98/Me.
 1. Click Start, point to Find or Search, and thenclick Files or Folders.
 2. Make sure that "Look in" is set to (C:) andthat Include subfolders is
checked.
 3. In the "Named" or "Search for..." box, type: precopy1
 4. Click Find Now or Search Now. If it does notexist on the hard drive,
then insert the Windowsinstallation CD and repeat the search on that drive.
 5. When you find the file, write down the locationof Precopy1, for example,
C:\Windows\Options\Cabs. This is your Source Path.
 6. The general form of the Extract command is: extract <Source
Path>\precopy1.cab sulfnbk.exe /L c:\windows\command So if the source path
is C:\Windows\Options\Cabs, then the Extract command becomes: extract
c:\windows\options\cabs\precopy1.cab sulfnbk.exe /L c:\windows\command
 NOTE: If you installed Windows to a different location, make the
appropriate substitution.
 7. Click Start and then click Run.
 8. Type the following, making the appropriate substitutions as previously
noted extract <Source Path>\precopy1.cab sulfnbk.exe /L c:\windows\command
 9. Click OK.



<Prev in Thread] Current Thread [Next in Thread>
  • Fw: FLYER: v==ruuss, Miles McCallum <=