VIRUS ALERT HOAX -- IGNORE "jdbgmgr.exe" WARNING

Jose G. Perez jgperez at netzero.net
Fri Jan 17 08:31:01 MST 2003


The warnings about jdbgmgr.exe being a virus is a HOAX.

YOU WILL DAMAGE YOUR WINDOWS INSTALLATION IF YOU FOLLOW THE DIRECTIONS

Moreover, since you are enough on a non-expert user to fall for the hoax,
you may have further difficulties repairing the damage.

Never, ever, ever, ever, send on "virus alerts" unless YOU HAVE PERSONALLY
VERIFIED THEM AGAINST RELIABLE SOURCES.

How to verify? Very simple, google the name of the alleged virus/file --in
this case "jdbgmgr.exe"-- and the word "virus". You will, in this case, get
sent to all the standard internet resources on hoaxes. And although there
*is* a real worm that does mascarade under that file name, it is detected by
normal scanners.

In general, here are some warning signs that a virus alert is a hoax:

a) You are told that normal antivirus software doesn't detect it. Bullshit.
There isn't a virus or worm created yet that couldn't be picked up by
scanners, once their "definition files" are updated, which can take as
little as a couple of hours, rarely as much as 48 hours.

b) You are asked to manually remove the file. Antivirus companies normally
will provide a removal utility partly in order to promote themselves, but
mostly to prevent non-technical people from deleting half their hard drive
in attempting to remove the file and then blame the antivirus company whose
directions they were trying to follow. These professionally crafted
utilities ALSO eliminate registry entries connected to the virus, and
sometimes copies of the executable that have been hidden under various and
sundry non-executable names. A virus so simplistic that all traces  can be
removed with a simple file delete is no big threat.

c) You are told the alert comes from Microsoft or CNN of Fox News or the New
York Times or NASA or the Sandia National Nuclear Weapons Lab -- all sorts
of authoritative sources, NONE of which specialize in or have a line of
business in combatting malware.

d) You are given no link for further information. Normal (REAL) antivirus
alerts contain only minimal information and links to web pages. That's both
so that the letter can't be "spoofed" and so that people will always get the
latest and most up-to-date information and removal procedures/utilities.

e) You are urged to spam everyone and their sister by forwarding the phony
"alert."

WHAT TO DO IF YOU HAVE SENT OUT THE HOAX:

    You must write back to everyone immediately and let them know the
warning appears to be a hoax, and refer them to reputable, reliable sources
of information on viruses and worms so they can confirm it is indeed a hoax.
You should ALSO send the send note in a "reply all" to whoever sent it to
you. Here are some links you can include in alerting people about this hoax.

http://www.f-secure.com/hoaxes/jdbgmgr.shtml

http://vil.mcafee.com/dispVirus.asp?virus_k=99436

http://www.symantec.com/avcenter/venc/data/jdbgmgr.exe.file.hoax.html

José

----- Original Message -----
From: "Fred Feldman" <ffeldman at bellatlantic.net>
To: "ffeldman" <ffeldman at bellatlantic.net>
Sent: Friday, January 17, 2003 9:40 AM
Subject: Fw: [620peace] VIRUS ALERT--READ--PAY CLOSE ATTENTION--FROM RITA
DICARLO




~~~~~~~
PLEASE clip all extraneous text before replying to a message.



More information about the Marxism mailing list