sulfnbk.exe virus warning-Fiction!
Delete SULFNBK.EXE From Your Windows Command Folder Because It's a Virus-Fiction!
Summary of eRumor:
An email warns you that a new virus is spreading and will activate on a certain date. Many versions also describe how the sender of the email searched his or her computer and found the file so is warning you in case the contamination was passed along. The offending file is named sulfnbk.exe and you get instructions on how to find and delete the file both from your hard disk and from the recycle bin in Windows.
This is a false warning that is creating a lot of embarrassment and headaches for those who forward it to their friends. If you follow the instructions in the eRumor, you will be deleting a valid file, not a virus.
sulfnbk.exe is a Windows system file that is almost always located in the Windows command directory. Windows uses it to restore long file names if they become corrupted.
Fortunately, even if you did delete the file, it should not cause major problems and Windows should continue to work normally. You will want to get the file back, however, so your Windows installation will be in complete working order. Without the file, the handling of some filenames may be affected if they become corrupted. We've received some emails from readers who feared that deleting sulfnbk.exe created major problems for their computers, but that is not likely.
The eRumor may be the result of confusion resulting from real viruses. sulfnbk.exe is an executable file and, like other executables, can be infected by viruses. It's possible that whoever originated the message experienced or heard of an infection of sulfnbk.exe and issued a warning about it. Also, there is a particular virus named [email protected] that has been known to send an infected copy of the file as an attachment. That virus is not very widely circulated at the moment and chooses files at random to infect and send, so virus experts are saying that when you find sulfnbk.exe on your computer, it's probably not infected. One way to tell the difference is that the valid sulfnbk.exe is usually found in your Windows command folder. The infected file usually arrives as an attachment to an email and is not deposited into the Command folder.
To provide the best protection for your computer, be sure you have good virus protection software and that the virus definitions for it are up to date.
If you've deleted the file and want to get it back
CLICK HERE for Microsoft Instructions for various versions of Windows.
Last updated 1/02/02
A real example of the eRumor as it has appeared on the Internet:
Dear Friends and e-Mail Correspondents,
This is a serious e-mail. I received an e-mail from a friend two days
ago, and this warning from him this morning:of a virus that was passed on to him. His PC was infected and since I was in his address book it had probably been spread to my computer. I followed the instructions and located the virus. By following the instructions, I was able to delete the virus. The bad news is that you probably have it, as you are in MY address book! More bad news is that my anti-virus recently updated virus program did not detect this virus.
This virus lies dormant for 14 days and then kills your hard drive. Here
is what to do. If you follow the instructions and then see that you have
the virus, you need to send a similar e-mail to everyone in your address book.
Remove the virus by following these steps:
1. Go to “Start.” Then to “Find” or “Search” (depending on your
2. In the “Search for files or folders” type sulfnbk.exe — this is the
name of the virus.
3. In the “Look in” section, make sure you are searching Drive C.
4. Hit “Search” or “Find.”
5. If your search finds this file, it will be an ugly blackish icon that
will have the name sulfnbk.exe.
DO NOT OPEN IT! If it does not show up on your first “Search,” try a “New
6. Right click on the file — go down to “Delete” and left click.
7. You will be asked if you want to send the file to the Recycling
8. Go to your Desktop (where all your icons are) and right click on the
Recycle Bin and either manually delete the sulfnbk.exe program or empty
the entire bin.
9. If you found the virus on your system, send this or a similar e-mail
to all in your address book because this is how it is transferred.
Sorry for the trouble and my apologies for having unwittingly “infected”
you, should it have been passed on to you.
I just got word from a friend that a new virus is out and it is spreading.
It will NOT activate until June 1 so I really do advise you to check this
out now because there is no protection yet. Also, send this e mail to
everyone you know.
Here is what you do:
Click on START
Click on FIND
–A little box will come up: Click on Files for Folders
–When the File box pops up then you write the following in the first line that says Named: Write the following SULFNBK.EXE (Do not open!!!!)
Click on— find now
If your machine has it, the word Sulfnbk will appear in the bottom
window. Highlight and delete.
Then you will need to go to the RECYCLE BIN and empty it. If you do not do this, you will still have the problem.
Be sure and do this now because there is no protection yet since this will not start until June 1. It never hurts to keep checking for these things.
URGENT VIRUS ALERT!
I just recieved the following email from a friend of mine who had emailed
me recently. I checked my computer and found that I did in fact have the
file listed below that contains the virus. That means that I may have
unknowingly sent the virus to you when I emailed you. Please follow the
directions below and locate the file and then delete it as is recommended
and empty your Recycle Bin. Do not open the file under any
THIS IS URGENT!!!
I received an e-mail today from someone saying that she had been sent a
virus and it showed up on her computer. The virus was sent to everyone
that she e-mailed in the past month. I found that I DID, IN FACT, HAVE
THE VIRUS, so I am now e-mailing you to tell you how you can check for and
delete the virus. It’s very simple.
This virus is programmed to activate after being on your Hard Drive for a
while. Because of the delay in activation, it may not get picked up by
anti-virus programs (McAfee, Norton, Trend Micro, etc.) There’s no way of
knowing how long this virus has been on the system. It is possible that
it has been around for several months. When it does become active, IT
WILL DESTROY ALL FILES AND FOLDERS on your hard drive!!! The virus
spreads when you send out emails and places itself into
C:WINDOWSCOMMAND. In order to find this virus, follow these
-Click on “Start”
-Choose “Search” or “Find”
-Choose “For Files or Folders…”
-Name of file to search for: SULFNBK.EXE
-Set to Look In: Local Hard Drives (C:)
-Select “Find” or “Search Now”
If you find this file, DO NOT OPEN IT! Select it by right clicking it
with your mouse and DELETE it. Go to your RECYCLE BIN and permanently
delete it from there. The good news is that YOU HAVE ELIMINATED THE VIRUS
computer. The bad news is that YOU HAVE TRANSMITTED this virus to anyone
you may have e-mailed in the last month or more. Thus the reason for this
message. I am truly sorry. Please contact everyone in your address book
and pass this message along.
Hello all, sorry to drop this on you, but it is important.
| I received a virus from being in someone’s address book. You
| are in my
| address book and YOU MAY HAVE THIS VIRUS LYING IN YOUR HARD
| DRIVE. IT LIES
| DORMANT FOR 14 DAYS AND THEN KILLS YOUR HARD DRIVE. Stop
| EVERYTHING YOU ARE DOING RIGHT NOW AND TAKE 10 SECONDS TO DELETE THE
| VIRUS File. FOLLOWING ARE DIRECTIONS TO DO THIS.
| If you’ve got it send this to everyone in your address book.
| The directions for removing it are easy.
| 1. Go to ‘start’ — than to ‘find or search’ (depending on your
| 2. In the ‘search for files or folders’ type in sulfnbk.exe —
| this is the
| 3. In the ‘look in’ make sure you’re searching Drive C.
| 4. Hit ‘search’ button or find)
| 5. If this file shows up (its an ugly blackish icon that will
| have the make
| ‘sulfnbk.exe’) DO NOT OPEN IT
| 6. RIGHT CLICK ON THE FILE – GO DOWN TO DELETE AND LEFT CLICK.
| 7. IT WILL ASK YOU IF YOU WANT TO SEND IT TO THE RECYCLE BIN,
| SAY YES.
| 8. GO TO YOUR DESKTOP (WHERE ALL YOUR ICONS ARE) AND DOUBLE
| CLICK ON THE RECYCLE BIN.
| 9. right CLICK ON SULFNBK.EXE AND DELETE AGAIN-OR EMPTY THE
| IF YOU FIND IT SEND THIS EMAIL TO ALL IN YOUR ADDRESS BOOK,
| BECAUSE THAT’S HOW IT’S TRANSFERRED