Re: AMBER:

From: Michael George Lerner <mlerner.umich.edu>
Date: Tue, 13 Jan 2004 14:18:57 -0500 (EST)

This is probably a hoax, rather than a real virus:

http://hoaxbusters.ciac.org/cgi-bin/mfs/www/hoaxbusters/archive?link=http://hoaxbusters.ciac.org/HBMalCode.shtml&file=/www/hoaxbusters/HBMalCode.shtml&line=1616#mfs

It used to be entirely a hoax, but someone made a real virus with this
name. According to the hoaxbusters page, the easiest way to tell is to
look at the icon for the jdbgmgr program. If it's a teddy bear, you're
fine. If it's a couple of tools, you're in trouble. It's worth noting
that the email below is definately talking about the hoax (it mentions the
teddy bear) rather than the virus. It's also worth noting that the
hoaxbusters page gives a link to a microsoft article about how to replace
jdbgmgr.exe if you have deleted it. I'm not running windows, so I haven't
actually looked into this on my system; I'm just forwarding on some useful
information.

always worth checking http://hoaxbusters.ciac.org before deleting things..

-michael

--
This isn't a democracy;|                        _  |Michael Lerner
 it's a cheer-ocracy.  | ASCII ribbon campaign ( ) |   Michigan
-Torrence,  Bring It On|  - against HTML email  X  |  Biophysics
                       |                       / \ | mlerner.umich
On Tue, 13 Jan 2004, Tim Luttrell wrote:
> Unfortunately a virus has been passed to me through an address book
> virus
>
> which also infected my address book. Since you are in my address book,
> you
>
> will probably find it in your computer, too. The virus (called jdbg.exe)
> is
>
> not detected by Norton or McAfee Anti-virus systems.
>
> The virus sits quietly for 14 days before damaging the systems. It is
> sent
>
> automatically by 'messenger' and by 'address book' whether or not you
> sent
>
> e-mail to your contacts. Basically that means you will pass it along
>
> unknowingly, as I did. I was sent this email and am now passing it on to
>
> you
>
> as to how to check for the virus and how to get rid of it. PLEASE DO
> THIS!
>
> It's very simple to do (I did it) and takes about 3 minutes:
>
> 1. Go to start, then click your 'find' or 'search' option.
>
> 2. In the folder option, type the name . . . jdbgmgr.exe
>
> 3. Be sure to search your C drive and all the sub folders and any other
>
> drives you may have.
>
> 4. Click 'Find Now'.
>
> 5. The virus has a teddy bear icon with the name dbgmgr.exe - DO NOT
> OPEN
>
> IT!
>
> 6. Go to 'edit' (on the menu bar) and choose "Select all" to highlight
> the
>
> file without opening it.
>
> 7. Now go to File (on the menu bar) and select delete. It will then go
> to
>
> the Recycle Bin. If you find the virus, you must contact all the people
> in
>
> your address book.
>
> To do this:
>
> 1. Open a new e-mail message.
>
> 2. Click the icon address book (or in my case 'addresses') next to "To".
>
> 3. Highlight every name (or just "Everyone") and add to "BCC".
>
> 4. Copy this message and paste to e-mail.
>
> Tim Luttrell
> Senior Consultant
> Professional Personnel Service, Inc
> Phone: 423-272-3467
> Fax:     423-921-9002
>
>
-----------------------------------------------------------------------
The AMBER Mail Reflector
To post, send mail to amber.scripps.edu
To unsubscribe, send "unsubscribe amber" to majordomo.scripps.edu

Received on Wed Jan 14 2004 - 15:53:16 PST