Forum Archive Index - May 2002

["Dean Sole" <deansole@nz1.ibm.com>]

Hi

McAfee have this one listed as a hoax.

Web page:   http://vil.mcafee.com/dispVirus.asp?virus_k=99436

Cheers
Dean Sole
Phone +64-4-576 8227 or (Cellular) +64-21-851 190
"Vive diu prosperaque!"


                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
 Virus Profile                                                                  
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
 Virus Name:                                                                    
                                    
                                                                                
                                    
                                                              Risk Assessment:  
                                    
 Jdbgmgr.exe hoax                                                               
                                    
                                                                                
                                    
                                                              N/A               
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
 Virus Information:                                                             
                                    
 Date Discovered:                                                               
                                    
                                                                                
                                    
 Date Added:                                                                    
                                    
                                                          4/8/2002              
                                    
 Origin:                                                                        
                                    
                                                          Unknown               
                                    
 Length:                                                                        
                                    
                                                          N/A                   
                                    
 Type:                                                                          
                                    
                                                          Hoax                  
                                    
 SubType:                                                                       
                                    
                                                          -                     
                                    
 DAT Required:                                                                  
                                    
                                                          N/A                   
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    



                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
 AVERT HOAX Notice!!                                                            
                                    
                                                                                
                                    
                                                                                
                                    
 McAfee AVERT Labs would like to inform you of a new email HOAX.                
                                    
                                                                                
                                    
                                                                                
                                    
 This email message is just a HOAX. Although, the JDBGMGR.EXE file may become 
infected by a number of valid viruses 
 (most commonly W32/Magistr@MM, the details of this HOAX message are not based 
on actual events.                    
                                                                                
                                    
                                                                                
                                    
 We are advising users who receive the email to delete the message and DO NOT 
pass it on as this is how an email    
 HOAX propagates.                                                               
                                    
                                                                                
                                    
                                                                                
                                    
 JDBGMGR.EXE is the Microsoft Debugger Registrar for Java.                      
                                    
                                                                                
                                    
                                                                                
                                    
 It uses this icon: (teddy bear)                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
 Below is the actual text from the message that may be received via email. 
There are numerous variations on these   
 messages.                                                                      
                                    
                                                                                
                                    
                                                                                
                                    
 (English version)                                                              
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    
 I found the little bear in my machine because of that I am sending this 
message in order for you to find it in     
 your machine.  The procedure is very simple:                                   
                                    
                                                                                
                                    
 The objective of this e-mail is to warn all Hotmail users about a new virus 
that is spreading by MSN Messenger.    
 The name of this virus is jdbgmgr.exe and it is sent automatically by the 
Messenger and by the address book too.   
 The virus is not detected by McAfee or Norton and it stays quiet for 14 days 
before damaging the system.           
                                                                                
                                    
 The virus can be cleaned before it deletes the files from your system.  In 
order to eliminate it, it is just       
 necessary to do the following steps:                                           
                                    
 1. Go to Start, click "Search"                                                 
                                    
 2.- In the "Files or Folders option" write the name jdbgmgr.exe                
                                    
 3.- Be sure that you are searching in the drive "C"                            
                                    
 4.- Click "find now"                                                           
                                    
 5.- If the virus is there (it has a little bear-like icon with the name of 
jdbgmgr.exe DO NOT OPEN IT FOR ANY      
 REASON                                                                         
                                    
 6.- Right click and delete it (it will go to the Recycle bin)                  
                                    
 7.- Go to the recycle bin and delete it or empty the recycle bin.              
                                    
                                                                                
                                    
 IF YOU FIND THE VIRUS IN ALL OF YOUR SYSTEMS SEND THIS MESSAGE TO ALL OF YOUR 
CONTACTS LOCATED IN YOUR ADDRESS     
 BOOK BEFORE IT CAN CAUSE ANY DAMAGE.                                           
                                    
                                                                                
                                    
                                                                                
                                    
                                                                                
                                    






----------------------------------------------------------------------------
To remove yourself from this list, please use the form at
http://www.sharechat.co.nz/chat/forum/