IMPORTANT--- DISREGARD BOB WEBSTER'S WARNING MESSAGE. (Details below).
For a while now there has been a type of computer virus that infects the
users rather than the machines. A user receives a warning that instructs
him/her to search their system for a particular file and to delete that
file. Unfortunately, the file in question is a legitimate file and it's
absence will have some impact on the user's system.
NEVER, NEVER BLINDLY FOLLOW THE INSTRUCTIONS OF AN UNSOLICITED EMAIL
UNLESS YOU ARE REALLY INTO SELF INFLICTED PAIN.
This particular hoax could be worse. Per Symantec,
"If you have already deleted the Jdbgmgr.exe file, some Java applets may
not run correctly. This is not a critical system file. The file version
may vary with your operating system and version of Internet Explorer. If
you want to restore the file, please contact Microsoft for instructions."
You can research any virus by going to the Symantec website virus
encyclopedia and typing in the name of the (alleged) virus. The URL is:
http://securityresponse.symantec.com/avcenter/vinfodb.html/
Here is the Symantec response to the query for "jdbgmgr.exe"
Jdbgmgr.exe file hoax
/Reported on: April 12, 2002/
/Last Updated on: May 1, 2002 at 05:17:49 PM PDT/
Symantec Security Response encourages you to ignore any messages
regarding this hoax. It is harmless and is intended only to cause
unwarranted concern.
*Type: Hoax *
technical details
This is a hoax that, like the SULFNBK.EXE Warning hoax
,
tries to persuade you to delete a legitimate Windows file from your
computer. The file that the hoax refers to, Jdbgmgr.exe, is a Java
Debugger Manager. It is a Microsoft file that is installed when you
install Windows.
It has a teddy bear icon as described in the hoax:
*CAUTION:* Jdbgmgr.exe, like any file, can become infected by a virus.
One virus in particular, W32.Efortune.31384@mm
,
targets this file. Norton AntiVirus has provided protection against
W32.Efortune.31384@mm since May 11, 2001.
*NOTE:* If you have already deleted the Jdbgmgr.exe file, some Java
applets may not run correctly. This is not a critical system file. The
file version may vary with your operating system and version of Internet
Explorer. If you want to restore the file, please contact Microsoft for
instructions.
*Hoax message*
This hoax has appeared in several languages. Some are as follows:
*English*
I found the little bear in my machine because of that I am sending this
message in order for you to find it in your machine. The procedure is
very simple:
The objective of this e-mail is to warn all Hotmail users about a new
virus that is spreading by MSN Messenger. The name of this virus is
jdbgmgr.exe and it is sent automatically by the Messenger and by the
address book too. The virus is not detected by McAfee or Norton and it
stays quiet for 14 days before damaging the system.
The virus can be cleaned before it deletes the files from your system.
In order to eliminate it, it is just necessary to do the following steps:
1. Go to Start, click "Search"
2.- In the "Files or Folders option" write the name jdbgmgr.exe
3.- Be sure that you are searching in the drive "C"
4.- Click "find now"
5.- If the virus is there (it has a little bear-like icon with the name
of jdbgmgr.exe DO NOT OPEN IT FOR ANY REASON
6.- Right click and delete it (it will go to the Recycle bin)
7.- Go to the recycle bin and delete it or empty the recycle bin.
IF YOU FIND THE VIRUS IN ALL OF YOUR SYSTEMS SEND THIS MESSAGE TO ALL OF
YOUR CONTACTS LOCATED IN YOUR ADDRESS BOOK BEFORE IT CAN CAUSE ANY DAMAGE.
Bob Webster wrote:
-->Hi all,
>
>I got this warniong (thanks Jerry) and followed the instructions and it was in there. Don't know anymore about it.
>
>Bob
>
>: VIRUS WARNING - READ IMMEDIATELY
>
>
>I just received a message today from a friend in my Address Book. Their
>Address Book had been infected by a virus, and it was passed on to my
>computer. My Address Book, in turn, has been infected. The virus
>(called jdbgmgr.exe) is not detected by Norton or McAfee Anti-virus
>systems. The virus sits quietly for 14 days before damaging the system.
>It's sent automatically by the messenger and by the Address Book,
>whether or not you sent emails to your contacts. I have checked, found
>it, and deleted it.
>
>Here's how to check for the virus and how to get rid of it:
>
>DO THIS:
>
>1. Go to Start, Find or Search option.
>2. In the files/folder option, write the name jdbgmgr.exe
>3. Be sure you search your C: drive and any other hard drive you have.
>4. Click "find now"
>5. The virus has a teddy bear icon with the name jdbgmgr.exe
>DO NOT OPEN IT
>6. Right click and delete it. It will then go to the Recycle Bin
>7. Go to the Recycle Bin and delete it there as well.
>
>IF YOU FIND THE VIRUS, YOU MUST CONTACT ALL THE PEOPLE IN YOUR ADDRESS
>BOOK SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS BOOKS. SORRY ABOUT
>THIS. I'M SURE EVERYONE IN MY ADDRESS BOOK WILL HAVE IT.
>
>If you didn't get it from me, you may have gotten it from someone else.
>It's best to check in either event.
>Sorry,
>Jerry L Jackson
>
>
>
>
>[Non-text portions of this message have been removed]
>
>
>
>To unsubscribe from this group, send an email to:
>fairchildclub-unsubscribe@yahoogroups.com
>
>
>
>Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>
>
>
>
>
Dan Casali
MacWizard
Box 1286 Ketchum, ID 83340
208.726.5120
[Non-text portions of this message have been removed]'