Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Threats » SULFNBK.EXE


Threat Risk NONE NONE
Destructivity MEDIUM MEDIUM
Payload Tricks people into deleting innocent files.
Detection files published
Description created 23 Jan 2002 03:30:00
Description updated 23 Jan 2002 03:42:00
Malware type HOAX
Spreading mechanism EMAIL
Summary None



This is not a virus, but a message that well-meaning users send out in the belief that they are doing other users a favour. The message warns about a new and dangerous virus "SULFNBK.EXE" which no antivirus products detect.

In reality, there is no such virus. However, the file SULFNBK.EXE exists and is installed by default on a number of Windows installations. The file is innocent - an utility for backing up files with long file names. Do not delete it.

The warning that is sent around also contains instructions to sent the warning on to other users in the address book - and this creates a chain-letter effect, in that users keep sending the warning around. Real warnings, from f.ex. serious antivirus vendors or security organizations, will never contain such a statement.

We recommend users to *never* pass around virus warnings unless they know exactly what they are doing. We have often seen that people send on such messages in the belief that it is better to be on the safe side. The truth is exactly the opposite. By sending on such warnings, users contribute to a wall of misinformation that can sometimes be more damaging than any virus.

There are several variations and language versions of this hoax, as people manually translate the text between languages.

Payload Details





Lumension's antivirus products do not scan for false virus warnings.

Last Updated: 12 Nov 2015 11:06:14