[Paham] FW: virus warning IS A HOAX (SEE BELOW and DO NOT DELETE the file !!)

[Ron Klock]

-----Original Message-----
From: Dave at RR [mailto:w3sj@tampabay.rr.com]
Sent: Friday, January 17, 2003 10:41 AM
To: Ron Klock
Subject: Re: virus warning IS A HOAX (SEE BELOW and DO NOT DELETE the file
!!)
Importance: High


                  Jdbgmgr.exe file hoax
                  Reported on: April 12, 2002
                  Last Updated on: November 21, 2002 10:24:24 AM




            Symantec Security Response encourages you to ignore any messages
regarding this hoax. It is harmless and is intended only to cause
unwarranted concern.


            Type: Hoax




            This is a hoax that, like the SULFNBK.EXE Warning hoax, tries to
persuade you to delete a legitimate Windows file from your computer. The
file that the hoax refers to, Jdbgmgr.exe, is the Microsoft Debugger
Registrar for Java. It may be installed when you install Windows.

            NOTE: Recent version of this hoax take advantage of the recent
outbreak of the W32.bugbear@mm worm, and the fact that the Jdbgmgr.exe file
that is mentioned in the hoax has a bear icon. The actual W32.bugbear@mm
worm file is an .exe file and does not have a bear icon.

            The Windows Jdbgmgr.exe file has a teddy bear icon as described
in the hoax:



            CAUTION: Jdbgmgr.exe, like any file, can become infected by a
virus. One virus in particular, W32.Efortune.31384@mm, targets this file.
Norton AntiVirus has provided protection against W32.Efortune.31384@mm since
May 11, 2001.

            NOTE: If you have already deleted the Jdbgmgr.exe file, in most
cases, you do not have to reinstall it. The following is quoted from the
Microsoft Knowledge Base article Virus Hoax: Microsoft Debugger Registrar
for Java (Jdbgmgr.exe) Is Not a Virus (Q322993):


              "The Microsoft Debugger Registrar for Java (Jdbgmgr.exe) is
only used by Microsoft Visual J++ 1.1 developers.

              If you follow the e-mail message instructions and delete this
file, you do not have to recover it unless you use Microsoft Visual J++ 1.1
to develop Java programs on Windows XP, Windows NT 4.0, Windows 98 Second
Edition, Windows 98, or Windows 95."

            If you do need to restore this file, follow the instructions in
Virus Hoax: Microsoft Debugger Registrar for Java (Jdbgmgr.exe) Is Not a
Virus (Q322993):


            Hoax message
            This hoax has appeared in several languages. Some are as
follows:

            English
            I found the little bear in my machine because of that I am
sending this message in order for you to find it in your machine. The
procedure is very simple:

            The objective of this e-mail is to warn all Hotmail users about
a new virus that is spreading by MSN Messenger. The name of this virus is
jdbgmgr.exe and it is sent automatically by the Messenger and by the address
book too. The virus is not detected by McAfee or Norton and it stays quiet
for 14 days before damaging the system.

            The virus can be cleaned before it deletes the files from your
system. In order to eliminate it, it is just necessary to do the following
steps:
            1. Go to Start, click "Search"
            2.- In the "Files or Folders option" write the name jdbgmgr.exe
            3.- Be sure that you are searching in the drive "C"
            4.- Click "find now"
            5.- If the virus is there (it has a little bear-like icon with
the name of jdbgmgr.exe DO NOT OPEN IT FOR ANY REASON
            6.- Right click and delete it (it will go to the Recycle bin)
            7.- Go to the recycle bin and delete it or empty the recycle
bin.

            IF YOU FIND THE VIRUS IN ALL OF YOUR SYSTEMS SEND THIS MESSAGE
TO ALL OF YOUR CONTACTS LOCATED IN YOUR ADDRESS BOOK BEFORE IT CAN CAUSE ANY
DAMAGE.






--- StripMime Report -- processed MIME parts ---
multipart/related
  multipart/alternative
    text/plain (text body -- kept)
    text/html
  image/gif
  image/gif
  image/gif
  image/gif
The reason this message is shown is because the post was in HTML
or had an attachment.  Attachments are not allowed.  To learn how
to post in Plain-Text go to: http://www.expita.com/nomime.html  ---