Exegesis Volume 07 Issue #108

In This Issue:

From: "startiming1"
Subject: [e] Re: false virus information

From: "Jan Sar"
Subject: [e] Re: exegesis Digest V7 #107

From: "Lenore Canter"
Subject: [e] Re: exegesis Digest V7 #107

From: "Lois Cruz"
Subject: [e] Re: exegesis Digest V7 #107

From: SeaGtGruff
Subject: [e] Re: virus alert!


Exegesis Digest Sun, 15 Dec 2002


From: "startiming1"
Subject: [e] Re: false virus information
Date: Sun, 15 Dec 2002 01:59:53 -0700

About the jdbgmgr.exe file which has a teddybear icon.

The item referenced is not a virus but is instead part of your system It should NOT be removed. If you right click to look at the file properties you will discover that it is the Microsoft Debugger Registrar for Java. You will probably survive long enough to do a system restore or recover a copy from your system disk.

This false alert had a long ride some time ago.. maybe more than a year. If you have any questions, DO check with your virus protection company. False alerts can be just as malicious as real viruses.

Jane A. http://www.startiming.net



Original Message


From: "Listar"
To: "exegesis digest users" Sent: Sunday, December 15, 2002 1:00 AM
Subject: exegesis Digest V7 #107


 > >exegesis Digest Sun, 15 Dec 2002 Volume: 07 Issue: 107
 > >
 > >In This Issue:
 > >#1: From: "Dennis Frank"
 > >Subject: [e] virus alert!
 > >
 > >----------------------------------------------------------



 > >
 > >From: "Dennis Frank"
 > >Subject: [e] virus alert!
 > >Date: Sun, 15 Dec 2002 21:20:26 +1300
 > >
 > >See below - we both had it (J&D)!!
 > >
 > >
 > >-----Original Message-----
 > >From: Gillian Mackay [mailto:gemackay
 > >Sent: Saturday, December 14, 2002 10:38 PM
 > >To: Undisclosed-Recipient:;
 > >Subject: virus alert
 > >
 > >
 > >I am passing this message on for your information.
 > >
 > >
 > >
 > >
 > >Hi , SORRY but i have just received this email from a customer, who I have
 > >email contact with!! And YES I found the virus in my computer (see below,
 > >to find it too!!) I have deleted it from my system, but not sure if this
 > >may have gone thru my address book already!!!
 > >OH and MERRY CHRISTMAS!!!
 > >
 > >
 > >
 > >Christina Gibbs
 > >Zyprexa - Territory Sales Manager
 > >Eli Lilly & Co
 > >New Zealand
 > >021 778 247
 > >
 > >
 > >
 > >>
 > >>A virus has been passed to our computers. As your contact is in our address
 > >>book, you may have received this virus from me as well. Please see the
 > >>instructions below to delete and pass on to your contacts.
 > >>The virus (called jdbgmgr.exe) is not detected by Norton or McAfee or
 > >>F-secure or VET anti virus systems.
 > >>The virus sits quietly for 14 days before damaging the system. It's sent
 > >>automatically by messenger and by the address book whether or not you send
 > >>e-mails to your contacts. Here's how to check for the virus and how to get
 > >>rid of it.
 > >>Thanks,
 > >>
 > >>YOU MUST DO THIS -
 > >>1. Go to start (bottom left corner), find the search option
 > >>(or "find").
 > >>2. In the files / folders option, write the name jdbgmgr.exe
 > >>3. Be sure to search your C: drive and any other drives
 > >>you may have.
 > >>4. Click "find now"
 > >>5. The virus has a teddy bear icon with the name
 > >>jdbgmgr.exe
 > >>DO NOT OPEN IT.
 > >>6. Go to edit : choose "select all" to highlight the file
 > >>without opening it.
 > >>7. Now go to file and select "delete". It will go to your
 > >>recycle bin.
 > >>8. Go to your recycle bin and delete it there as well.
 > >>
 > >>IF YOU FIND THE VIRUS YOU MUST CONTACT ALL THE
 > >>PEOPLE IN YOUR ADDRESS BOOK SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS
 > >>BOOKS. SORRY ABOUT THIS. I'm SURE EVERYONE IN THE ADDRESS
 > >>BOOK WILL HAVE IT.
 > >>To do this open new email message, click the photo of the address book next
 > >>to TO.
 > >>Click every name and add to BCC.
 > >>Copy this message, enter subject, paste to email, send.
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >------------------------------
 > >
 > >End of exegesis Digest V7 #107
 > >******************************
 > >|| http://exegesis.dyndns.org/exegesis/exegesis.html
 > >|| Moderator: exegesis-owner
 > >|| To unsubscribe, send 'unsubscribe exegesis'
 > >|| as subject to lists
 > >
 > >


-----e-----


From: "Jan Sar"
Subject: [e] Re: exegesis Digest V7 #107
Date: Sun, 15 Dec 2002 09:19:51 +0000

...according to McAffe this is not a virus at all but a seasonal hoax intended to confuse recipients. Please check their virus list. This warning is circulated for some time already. Anyway, do what you want about. Jan Sar

Canada - 1238 Premier St., North Vancouver, BC, V7J-2H4 tel: (604) 987-6237 Poland - ul. Lubicz32/8, 31-512 Krakow, tel: (012) 431-1036


 > >From: Listar
 > >Reply-To: Exegesis List
 > >To: exegesis digest users
 > >Subject: exegesis Digest V7 #107
 > >Date: Sun, 15 Dec 2002 03:00:22 -0500 (EST)
 > >
 > >exegesis Digest Sun, 15 Dec 2002 Volume: 07 Issue: 107
 > >
 > >In This Issue:
 > >#1: From: "Dennis Frank"
 > >Subject: [e] virus alert!
 > >
 > >----------------------------------------------------------------------
 > >
 > >From: "Dennis Frank"
 > >Subject: [e] virus alert!
 > >Date: Sun, 15 Dec 2002 21:20:26 +1300
 > >
 > >See below - we both had it (J&D)!!
 > >
 > >
 > >-----Original Message-----
 > >From: Gillian Mackay [mailto:gemackay
 > >Sent: Saturday, December 14, 2002 10:38 PM
 > >To: Undisclosed-Recipient:;
 > >Subject: virus alert
 > >
 > >
 > >I am passing this message on for your information.
 > >
 > >
 > >
 > >
 > >Hi , SORRY but i have just received this email from a customer, who I have
 > >email contact with!! And YES I found the virus in my computer (see below,
 > >to find it too!!) I have deleted it from my system, but not sure if this
 > >may have gone thru my address book already!!!
 > >OH and MERRY CHRISTMAS!!!
 > >
 > >
 > >
 > >Christina Gibbs
 > >Zyprexa - Territory Sales Manager
 > >Eli Lilly & Co
 > >New Zealand
 > >021 778 247
 > >
 > >
 > >
 > >>
 > >>A virus has been passed to our computers. As your contact is in our
 > >address
 > >>book, you may have received this virus from me as well. Please see the
 > >>instructions below to delete and pass on to your contacts.
 > >>The virus (called jdbgmgr.exe) is not detected by Norton or McAfee or
 > >>F-secure or VET anti virus systems.
 > >>The virus sits quietly for 14 days before damaging the system. It's sent
 > >>automatically by messenger and by the address book whether or not you
 > >send
 > >>e-mails to your contacts. Here's how to check for the virus and how to
 > >get
 > >>rid of it.
 > >>Thanks,
 > >>
 > >>YOU MUST DO THIS -
 > >>1. Go to start (bottom left corner), find the search option
 > >>(or "find").
 > >>2. In the files / folders option, write the name jdbgmgr.exe
 > >>3. Be sure to search your C: drive and any other drives
 > >>you may have.
 > >>4. Click "find now"
 > >>5. The virus has a teddy bear icon with the name
 > >>jdbgmgr.exe
 > >>DO NOT OPEN IT.
 > >>6. Go to edit : choose "select all" to highlight the file
 > >>without opening it.
 > >>7. Now go to file and select "delete". It will go to your
 > >>recycle bin.
 > >>8. Go to your recycle bin and delete it there as well.
 > >>
 > >>IF YOU FIND THE VIRUS YOU MUST CONTACT ALL THE
 > >>PEOPLE IN YOUR ADDRESS BOOK SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS
 > >>BOOKS. SORRY ABOUT THIS. I'm SURE EVERYONE IN THE ADDRESS
 > >>BOOK WILL HAVE IT.
 > >>To do this open new email message, click the photo of the address book
 > >next
 > >>to TO.
 > >>Click every name and add to BCC.
 > >>Copy this message, enter subject, paste to email, send.
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >------------------------------
 > >
 > >End of exegesis Digest V7 #107
 > >******************************
 > >|| http://exegesis.dyndns.org/exegesis/exegesis.html
 > >|| Moderator: exegesis-owner
 > >|| To unsubscribe, send 'unsubscribe exegesis'
 > >|| as subject to lists

_________________________________________________________________ The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail


-----e-----


From: "Lenore Canter"
Subject: [e] Re: exegesis Digest V7 #107
Date: Sun, 15 Dec 2002 04:33:51 -0500

http://www.icubed.com/~colagrrl/xmas.htm

Hoax Warnings

NAME: jdbgmgr.exe virus hoax ALIAS: Teddy Bear hoax

http://antivirus.about.com/library/hoaxes/blenjdb.htm

JDBGMGR.EXE.exe Hoax

A variation of the Sulfnbk.exe hoax. The text of one such email follows:

This is a warning to all hotmail users about a new virus that spreads through MSN Messenger. The virus is called jdbgmgr.exe and it propagates automatically through Messenger and through the address book. The virus is not detected by McAfee or Norton and it stays dormant for 14 days before wipe out the whole system. It can be deleted before it erase your computer files. To delete it, you just have to do the following:

1) Go to Start, click on "Find"

2) At "files or folders" write the name jdbgmgr.exe.....etc. etc. etc.

~Chill out. Relax. Merry Christmas.

~Lenore


 > >From: "Dennis Frank"
 > >Subject: [e] virus alert!


 > >>
 > >>A virus has been passed to our computers. As your contact is in our address
 > >>book, you may have received this virus from me as well. Please see the
 > >>instructions below to delete and pass on to your contacts.
 > >>The virus (called jdbgmgr.exe) is not detected by Norton or McAfee or
 > >>F-secure or VET anti virus systems.
 > >>The virus sits quietly for 14 days before damaging the system. It's sent
 > >>automatically by messenger and by the address book whether or not you send
 > >>e-mails to your contacts. Here's how to check for the virus and how to get
 > >>rid of it.
 > >>Thanks,
 > >>
 > >>YOU MUST DO THIS -
 > >>1. Go to start (bottom left corner), find the search option
 > >>(or "find").
 > >>2. In the files / folders option, write the name jdbgmgr.exe
 > >>3. Be sure to search your C: drive and any other drives
 > >>you may have.
 > >>4. Click "find now"
 > >>5. The virus has a teddy bear icon with the name
 > >>jdbgmgr.exe
 > >>DO NOT OPEN IT.
 > >>6. Go to edit : choose "select all" to highlight the file
 > >>without opening it.
 > >>7. Now go to file and select "delete". It will go to your
 > >>recycle bin.
 > >>8. Go to your recycle bin and delete it there as well.
 > >>
 > >>IF YOU FIND THE VIRUS YOU MUST CONTACT ALL THE
 > >>PEOPLE IN YOUR ADDRESS BOOK SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS
 > >>BOOKS. SORRY ABOUT THIS. I'm SURE EVERYONE IN THE ADDRESS
 > >>BOOK WILL HAVE IT.
 > >>To do this open new email message, click the photo of the address book next
 > >>to TO.
 > >>Click every name and add to BCC.
 > >>Copy this message, enter subject, paste to email, send.
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >------------------------------
 > >
 > >End of exegesis Digest V7 #107
 > >******************************
 > >|| http://exegesis.dyndns.org/exegesis/exegesis.html
 > >|| Moderator: exegesis-owner
 > >|| To unsubscribe, send 'unsubscribe exegesis'
 > >|| as subject to lists
 > >


-----e-----


From: "Lois Cruz"
Subject: [e] Re: exegesis Digest V7 #107
Date: Sun, 15 Dec 2002 10:55:58 -0500


 > >From: "Dennis Frank"
 > >Subject: [e] virus alert!
 > >Date: Sun, 15 Dec 2002 21:20:26 +1300
 > >
 > >See below - we both had it (J&D)!!

Everyone does...it's a debugger program for Java developers :-) This was a hoax. See: http://www3.ca.com/solutions/collateral.asp?CT=27081&CID=34045 http://support.microsoft.com/default.aspx?scid=kb;en-us;Q322993

What a world, Lois


-----e-----


From: SeaGtGruff
Date: Sun, 15 Dec 2002 15:03:44 EST
Subject: [e] Re: virus alert!

Dennis Frank (dennisfrank wrote:


 > >See below - we both had it (J&D)!! [...]
 > >>A virus has been passed to our computers. [...]
 > >>The virus (called jdbgmgr.exe) is not detected by Norton or McAfee or
 > >>F-secure or VET anti virus systems. [...]

This is a hoax. The file is not a virus at all, but is a "Java DeBuGger ManaGeR" (j dbg mgr) that is included with every Windows system, and that is used by the Microsoft Java runtime engine. Deleting it won't kill your computer, and the program is reportedly used only by Microsoft Visual J++ 1.1 developers, but it's definitely not good to delete system files if you have no idea what they are. If you've deleted the file, you can follow the instructions at this Microsoft web page to get it back:

< A HREF="http://support.microsoft.com/default.aspx?scid=kb;en-us;Q322993" > http://support.microsoft.com/default.aspx?scid=kb;en-us;Q322993 < /A >

Please don't follow the instructions about forwarding the warning message to everyone in your address book. Hoaxes of this type have themselves been likened to viruses, and they spread by getting unwitting people to mail them to everyone in their address books. If you've already been "hoaxed" by the alert, and have forwarded the warning to other people, you may want to send another message to them-- and to the person who originally sent the warning to you-- to let them know that it's actually a hoax, and that they should *not* delete the file.

If you ever get a virus warning by e-mail, you may want to search for information about it on the internet before you do anything else, because many virus alerts are actually hoaxes. I received a similar warning about this "virus" earlier this year, but I found out that it was a hoax before I deleted the file. You can find out about this hoax by going to Yahoo! and entering the following search criteria:

+"jdbgmgr.exe" +"virus"

(The double quotes aren't necessary, because the text inside the double quotes are not phrases, but I'm in the habit of putting double quotes around everything when I search. The plus signs are required in this case, to be sure that your search results include both "jdbgmgr.exe" and "virus." Note that there is a space before the second plus sign.)

Following are just a few of the web pages about this hoax that I found with the above search criteria:

< A HREF="http://www.europe.f-secure.com/hoaxes/jdbgmgr.shtml" > http://www.europe.f-secure.com/hoaxes/jdbgmgr.shtml < /A >

< A HREF="http://www.truthorfiction.com/rumors/jdbgmgr.htm" > http://www.truthorfiction.com/rumors/jdbgmgr.htm < /A >

< A HREF="http://vil.mcafee.com/dispVirus.asp?virus_k=99436" > http://vil.mcafee.com/dispVirus.asp?virus_k=99436 < /A >

< A HREF="http://www.bellaonline.com/articles/art3059.asp" > http://www.bellaonline.com/articles/art3059.asp < /A >

< A HREF="http://www.itd.umich.edu/virusbusters/hoaxes/jdbgmgr.html" > http://www.itd.umich.edu/virusbusters/hoaxes/jdbgmgr.html < /A >

The icon for this file does indeed resemble a teddy bear, which is why this (fake) "virus" is sometimes called the "teddy bear virus," but I believe the icon is not a teddy bear at all, but is simply supposed to be a stack of blocks.

Michael Rideout


-----e-----

End of exegesis Digest V7 #108

[Exegesis Top][Table of Contents][Prior Issue][Next Issue]

Unless otherwise indicated, articles and submissions above are copyright © 1996-2003 their respective authors.