Virus assistance

Discussion in 'Software' started by tripwire45, Jul 23, 2003.

  1. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    180
    287
    My daughter got the following e-mail:

    Sorry about this, but the BlankA virus has been passed to me by a contact.
    My address book in turn was infected. Since you are in my address book,
    there is a good chance you will find it in your computer too.
    The virus (called jdbgmgr.exe) is not detected by Norton or Mcfee
    Anti-Virus systems. It is sent automaticly by messenger and by address book
    whether or not you sent e-mails to your contacts.
    I followed the insturctions below and easily eradicated the virus.
    Here is how you check for the virus and get rid of it.

    1. Go to start, then select find or search option.
    2. In the file/folders option, type the name: jdbgmgr.exe
    3. Be sure to search your harddrive and all the subfolders and any other
    drives you may have.
    4. Click "find now"
    5. The virus has a teddy bear icon with the name jdbgmgr.exe. DO NOT OPEN
    IT!!!!!!
    6. Go to Edit (on the menu bar) and select delete. It will the go to the
    recycle bin.
    7. Empty your recycle bin.


    It is true that I've been getting daily "hits" of the w2.opaserv.worm, apparently in win.ini and scrsvr.exe, I'm a bit hesitant to just start deleting things on my hard drive, having had a recent bad experience in that area. I thought I'd mine the collective wisdom of the forum to see what you all think. Thanks.
     
    Certifications: A+ and Network+
  2. SimonV
    Honorary Member

    SimonV Petabyte Poster Gold Member

    6,651
    180
    258
    Dont delete a thing, I'm sure thats a hoax virus warning. Is the file a Teddy Bear. I was sent one just like this a while ago but did a search on the net and found out it was all just a big lie :evil:

    Here take a look at this page

    EDIT: just a thought, it the email address this came from somebody you know? With you posting the problems you've been having in here & certutors some dip stick might have thought it would be funny! :gun
     
    Certifications: MOS Master 2003, CompTIA A+, MCSA:M, MCSE
    WIP: Keeping CF Alive...
  3. Nelix
    Honorary Member

    Nelix Gigabyte Poster

    1,416
    3
    82
    DO NOT DELETE ANYTHING.

    THIS IS DEFINATLY A HOAX.

    Jdbgmgr.exe is the file to which the hoax refers, and it is the Microsoft Debugger Registrar for Java. The Jdbgmgr.exe file may be installed when you install Windows. Although, the JDBGMGR.EXE file may become infected by a number of valid viruses (most commonly W32/Magistr@MM), the details of this HOAX message are not based on actual events.

    Hope that clears it up
     
    Certifications: A+, 70-210, 70-290, 70-291, 74-409, 70-410, 70-411, 70-337, 70-347
    WIP: 70-346
  4. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    180
    287
    Thanks. I've already visited this site:

    http://securityresponse.symantec.com/avcenter/venc/data/jdbgmgr.exe.file.hoax.html

    I suspected it was a hoax but thought I'd confirm. I've already sent an e-mail back to the sender advising them of this.

    The hoax e-mail came from someone my 15 year old daughter sometimes corresponds with. She likes to read "fan fiction" about a certain Japanese anime called "Gundam Wing" and exchanges messages with other author/fans. This hoax was no doubt passed along by a well meaning party who thought it was for real. Teenagers will believe anything. :lol:
     
    Certifications: A+ and Network+
  5. AJ

    AJ 01000001 01100100 01101101 01101001 01101110 Administrator

    6,897
    182
    221
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Breathing in and out, but not out and in, that's just wrong
  6. Anonymouse

    Anonymouse Bit Poster

    10
    0
    9
    That should correctly identify viruses, bots, trojans and the like - if it doesn't give you any warning it's nothing to worry about. If it does find anything, you can safely remove it without deleting anything.

    Trouble is, I can't remember where I got the program...possibly from a cover disk, I'm not sure. A Google search should find it for you.
     

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.