Author: The Viper
Monday, 13 January 2003 - 02:43 pm |        |
I received a communication earlier today from a friend about a virus. It may be worth checking your computer for this. She wrote:-
"A virus has been passed on to me by someone. Please check your computer for it too:-
I followed the direction below and eradicated the virus easily. The virus, called jdbgmgr.exe, is not detected by Norton or McAfee anti-virus systems.
The virus sits quietly for 14 days before damaging the system. It is sent automatically by messenger and by the address book whether or not you sent e-mails to your contacts.
Here's how you check for the virus and get rid of it:-
1. Go to Start, Find or Search option.
2. In the file/folders option, type the name: jdbgmgr.exe
3. Be sure you search your C: drive and all the subfolders and any other drives you may have. (So ensure file search setting is from the top level).
4. Click "find now".
5. The virus has a teddy bear icon with the name jdbgmgr.exe
DO NOT UNDER ANY CIRCUMSTANCES OPEN IT.
6. Go to edit (on the menu bar), choose "select all" to highlight the file without opening it.
7. Now go to the File (on the menu bar) and select delete. It will then be moved to your Recycle Bin.
8. You haven’t finished yet! Go to the Recycle Bin and delete it from there as well.
IF YOU FIND A FILE OF THE ABOVE NAME, YOU SHOULD CONTACT ALL THE PEOPLE IN YOUR ADDRESS BOOK, SO THEY CAN ERADICATE IT FROM THEIR MACHINES & IN THEIR OWN MAIL ADDRESS BOOKS."
Regards, V. |
Author: Spryder
Monday, 13 January 2003 - 02:45 pm | |
VIPER DO NOT DELETE THAT FILE!!!
This is a hoax email, and that file is necessary for your system to function properly. Deleting it will cause major headaches.
The email from your friend was likely not even sent by him/her, but rather automatically emailed from the virus itself. I received this on several occasions and the sender was not aware they had emailed it at all.
AGAIN, DO NOT DELETE THAT FILE! |
Author: Spryder
Monday, 13 January 2003 - 02:50 pm | |
More information is available at:
http://securityresponse.symantec.com/avcenter/venc/data/jdbgmgr.exe.file.hoax.html |
Author: The Viper
Monday, 13 January 2003 - 03:00 pm | |
Thanks for putting me straight on that, Stephen. No doubt other people will be grateful for your prompt intervention too.
Having found the file on my own computer, and having e-mailed a few people in the past couple of weeks who use this site regularly, (though they are not in my address book), this board seemed like a good idea to disseminate information. Feel free to delete it if you think it will just cause confusion!
Regards, V. |
Author: Spryder
Monday, 13 January 2003 - 03:08 pm | |
Viper -
I think its a fine idea to keep a thread about Virii (or is it Viruses? I never know...) on the boards, for people to post questions if they are conerned about being infected themselves. I would, however, caution people NOT to believe warnings they receive via email about the latest virus... EVEN IF THAT EMAIL APPEARS TO BE FROM SOMEONE YOU TRUST.
In 99% of these cases, the virus in question is either a hoax, or the email prompts you to take action on your own system which will cause nothing but trouble. Many viruses nowadays will infect a computer, and then send emails to that person's mailing list telling them to delete A, B or C from their hard-drive because it is a virus. Recipients believe this email is from a friend and trusted source, carry out the deletions, and then find these files were integral Windows System files and that their systems are corrupted.
The best advice, if you are concerned about a virus, is to research it on Symantec's Virus Encyclopedia at http://www.symantec.com. It will contain all relevant information on the virus - history, degree of damage, whether its real or a hoax, and information on how to remove it from your system. |
Author: Garry Ross
Monday, 13 January 2003 - 07:12 pm | |
Hello all,
There are 4 major viruses doing the rounds at the moment:-
Lirva.A and Lirva.B enter computers as file attachments through e-mail, chat rooms, or the Kazaa file-sharing network. The worms are capable of disabling anti-virus and security applications and stealing passwords.
The latter are sent to an external e-mail address. A fan of Canadian rocker Avril Lavigne apparently wrote Lirva, which spells Avril when reversed. When an unsuspecting computer user activates a Lirva worm, it tries to open Lavigne's official Web site.
ExploreZip.E is a variation of the first ExploreZip worm found in June 1999. The latest version arrives through an e-mail attachment, is undetectable by most anti-virus programs, and destroys Microsoft Office documents and source-code files. It also will reply to unread e-mails, sending dummy responses with infected attachments.
Sobig, which has infected computers in 10 countries, is capable of installing a "backdoor" on a computer. A backdoor is a piece of code that gives the virus writer control of the infected computer and the ability to steal files.
All only affect computers running Windows (as usual)
Keep your virus definitions etc up to date.
take care
Garry |
Author: stephen miller
Tuesday, 14 January 2003 - 08:24 am | |
Hi Viper if it's any consolation I fell for the same hoax a few weeks ago I have since managed to replace the file
all the best
steve |
Author: Garry Ross
Tuesday, 14 January 2003 - 10:51 am | |
For anyone who wants an extra bit of protection to be used with anti-virus and firewall software I can highly recommend this:-
http://www.simplysup.com/tremover/
It's found a couple on my hard drive in the past that managed to get through the anti-virus.
take care
Garry |
Author: John Savage
Tuesday, 14 January 2003 - 12:15 pm | |
Hi Viper
I was caught out by this same hoax just before Christmas, and I did delete the file mentioned.
However I must say that it has caused me no problems and I have yet to re install the deleted file.
Avril Lavigne arrived in my e mail this morning, so it is still going about, but I always delete any suspicious emails with attachments, and I did that with this one.
Regards,
john Savage |
Author: Sir Robert Anderson
Tuesday, 14 January 2003 - 04:47 pm | |
Hey Gary,
I use Trojan Remover, too. Good stuff.
Sir Robert |
Author: Garry Ross
Tuesday, 14 January 2003 - 06:01 pm | |
Sir Robert,
It's a really good little program isn't it? The handy little update button is used more than most things on my computer at the moment. 
Plus they tend to get the updates before the big anti-virus programs.
take care
Garry |
Author: Guy Hatton
Wednesday, 15 January 2003 - 06:32 am | |
John -
Avril Lavigne arrived in your e-mail!!!!????
If you're not doing anything with her, would you mind sending her on to me? :-) |
Author: John Savage
Wednesday, 15 January 2003 - 12:13 pm | |
Guy,
Having polished my glasses I see what you mean. It was of course the virus that arrived in my e mail; I'm sure you would not wish me to pass that on.
Regards,
John Savage |
Author: Divia deBrevier
Wednesday, 15 January 2003 - 12:56 pm | |
Greetings all:
I use http://www.snopes.com for virus hoaxes/alerts. And it's fun, too.
Warm regards,
Divia |
Author: Howard Brown
Wednesday, 15 January 2003 - 08:54 pm | |
| Divia and all..I have been "attacked" every day for 7 days by hackers. My Norton anti-virus caught the creeps before they got me..Is this spate of attacks endemic to all......or maybe I have bad Karma( not that I believe in that junk ! ) ?? |
Author: Ky
Thursday, 16 January 2003 - 01:10 am | |
Howard..I too have been attacked, and then saved by Norton repeatedly over the last week hmmm.
Ky |
Author: Divia deBrevier
Thursday, 16 January 2003 - 11:58 am | |
Greetings Howard:
All's quiet on Divia's front. Well, it's pretty quiet round the back as well. But my tummy's rumbling cos it's lunch time.
In other words, no, I haven't had a report of attacks recently.
Warm regards,
Divia |
