LACTNET Archives

Lactation Information and Discussion

LACTNET@COMMUNITY.LSOFT.COM

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Kathleen Bruce <[log in to unmask]>
Reply To:
Lactation Information and Discussion <[log in to unmask]>
Date:
Sun, 26 Jan 2003 07:34:41 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (96 lines)
Good morning all. With all due respect,  do not delete any files on your
computer BEFORE checking this problem out with a registered virus
service.  Sometimes, the virus IS these panic warnings asking you to find a
file and delete it.

Please check with us Listmothers at [log in to unmask]
before posting these types of warnings.



After checking here, on the Symantec website, this is a hoax.

"Symantec Security Response encourages you to ignore any messages regarding
this hoax. It is harmless and is intended only to cause unwarranted
concern. ..."

See
http://securityresponse.symantec.com/avcenter/venc/data/jdbgmgr.exe.file.hoa
x.html for details.  This is a hoax that, like the SULFNBK.EXE Warning
hoax, tries to persuade you to delete a legitimate Windows file from your
computer. The file that the hoax refers to, Jdbgmgr.exe, is the Microsoft
Debugger Registrar for Java. It may be installed when you install Windows.

NOTE: Recent version of this hoax take advantage of the recent outbreak of
the W32.bugbear@mm worm, and the fact that the Jdbgmgr.exe file that is
mentioned in the hoax has a bear icon. The actual W32.bugbear@mm worm file
is an .exe file and does not have a bear icon.

The Windows Jdbgmgr.exe file has a teddy bear icon as described in the hoax:



CAUTION: Jdbgmgr.exe, like any file, can become infected by a virus. One
virus in particular, W32.Efortune.31384@mm, targets this file. Norton
AntiVirus has provided protection against W32.Efortune.31384@mm since May
11, 2001.








Kathleen

At 05:35 PM 1/26/2003 +1000, you wrote:
>Dear all,
>I have just been advised [today] by a friend of mine that a virus infected
>their address book which means my address book WAS infected, too. Since
>you are in my address book, there is a good chance you will find it in
>your computer, too.
>The virus (called jdbgmgr.exe) is not detected by Norton or McAfee
>anti-virus systems. The virus sits quietly for 14 days before damaging the
>system. It is sent automatically by messenger and by the address book,
>whether or not you sent Emails to your contacts.
>
>Here is how to check for the virus and how to get rid of it; I did it for
>mine - found it and deleted it:
>YOU MUST DO THIS:
>1. Go to "Start" > Find or Search option
>2. In the file Folder option, type the name jdbgmgr.exe
>3. Be sure you search your C: drive and all sub-folders and any other
>drives you may have.
>4. Click "Find now"
>5. The virus has a Teddy Bear icon with the name jdbgmgr.exe: DO NOT OPEN IT!
>6. Go to Edit (on menu bar), choose "Select all" to highlight the file,
>without opening it.
>7. Now go to File (on the menu bar) and select "Delete". It will then go
>to the Recycle Bin.
>
>IF YOU FIND THE VIRUS, YOU MUST CONTACT ALL THE PEOPLE IN YOUR ADDRESS
>BOOK, SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS BOOKS!
>To do this:
>a) Open a new e-mail message
>b) Click the icon of the address book next to the "TO"
>c) Highlight every name and add it to "BCC" [i.e. you click on BCC each
>time you've highlighted one]
>d) Copy this message, enter subject paste to e-mail.
>
>Sorry for the inconvenience.
>
>              ****************************

             ***********************************************

To temporarily stop your subscription: set lactnet nomail
To start it again: set lactnet mail (or digest)
To unsubscribe: unsubscribe lactnet
All commands go to [log in to unmask]

The LACTNET mailing list is powered by L-Soft's renowned
LISTSERV(R) list management software together with L-Soft's LSMTP(TM)
mailer for lightning fast mail delivery. For more information, go to:
http://www.lsoft.com/LISTSERV-powered.html

ATOM RSS1 RSS2