It's a hoax.
See http://www.trendmicro.com/vinfo/hoaxes/hoax5.asp?HName=JDBGMGR.EXE+Hoax
(incidentally, it's a good site in general for virus information).
Andrew "frugal" Dacey
frugal@xxxxxxxxxxxxxxx
http://www.tildefrugal.net/
----- Original Message -----
From: "John Hudson" <13874@xxxxxxxxxx>
To: "LIST - Olympus" <olympus@xxxxxxxxxxxxxxx>
Sent: Monday, May 05, 2003 8:54 AM
Subject: [OM] OT Virus warning / enquiry
Here is part of a message I received from my sister in England this morning
about an an alleged virus. The writing style and tone are rather strange
which makes me think that the message is fake but better safe than sorry.
I wonder if someone could check their system and see is the jdbgmgr.exe file
is on their system. I found this file in my c:\windows\systems subdirectory,
it is 15120 bytes large, is dated 01/12/01 and in Windows Explorer has a
teddy bear icon which is strange.
Today .... 5 May .... is 14 days after 21 April mentioned in the message.
Is there any opinion whether this jdbgmgr.exe file is a virus / problem or
whether the original message from my sister is a hoax?
Thanks
John Hudson
Hello everybody. We have just received the following ... and she was right -
we did have it - and we have got problems. We are not techie, but the
instructions here did find the guilty file and delete it . Repairing may be
something else. If you ARE techie, an internet search for bugbear will find
you Symantec's very complicated help!
Here is what we got:
I am sorry, but by virtue of being on someones address book, I have been
infected, to-day Monday 21st April, by a Virus that does not appear to be
detected by
the anti-virus systems.
The Virus is BUGBEAR (called jdbgmgr.exe). The Virus sits quietly for 14
days before affecting the system.It is sent automatically by messenger and
by the
Address Book whether or not you sent e-mails to everyone
< This message was delivered via the Olympus Mailing List >
< For questions, mailto:owner-olympus@xxxxxxxxxxxxxxx >
< Web Page: http://Zuiko.sls.bc.ca/swright/olympuslist.html >
|