Virus E-mail to Delete Java Debug Manager??

[cbuchach]

Well, I received a frantic call from my parents today about an e-mail they received which appears below regarding a possible virus on their machine.

Here is the copy of it:

"Sent: Tuesday, June 04, 2002 5:47 AM
Subject: Virus


Here is a message warning of a possible virus. I found it on my C drive and deleted it. Please search your computer and delete it and notify others. Thanks.
I was informed today that I may have acquired a virus that attacks your address book. It sits for 14 days before damaging your system. Here's how to check for it and delete it from your system if you have it.

1. Go to start and choose the find or search option.

2. In the files/folder option, write the name jdbgmgr.exe

3. Be sure to search the C; drive.

4. Click 'FIND NOW'

5. The virus has a teddy bear icon with the name jdbgmgr,exe DO NOT OPEN IT !!!!!!!!!!!!

6. Right click and delete it or go into file and put in recycle bin, ot will then go into your recycle bin.

7. Go to your recycle bin and delete it there as well.

IF YOU FIND THE VIRUS, YOU MUST CONTACT ALL THE PEOPLE IN YOUR ADDRESS BOOK SO THEY CAN ERADICATE IT FROM THEIR SYSTEM AND NOTIFY PEOPLE IN THEIR ADDRESS BOOK."


The Java debug manager is, as I understand it, just part of Windows java interface. So I am assuming this is some kind of hoax or something to get people to possibly corrupt their computers. Is this the case?? I don't think that deleting this file would severely hurt the OS (probably wouldn't do much of anything). Or, am I wrong here and is there a virus which infects this file?

I guess I just found it kind of interesting as a possible new type of virus which more or less relies on the user to corrupt their system rather than having actual code do it.

 

[cbuchach]

OK, I just found my answer by checking out Symantec's site. It is just a hoax, however, there are certain viruses that can infect that file.

Here is a copy of some of the info:

Symantec Security Response
http://securityresponse.symantec.com
Jdbgmgr.exe file hoax
Reported on: April 12, 2002
Last Updated on: May 30, 2002 at 09:53:21 AM PDT

Symantec Security Response encourages you to ignore any messages regarding this hoax. It is harmless and is intended only to cause unwarranted concern.


Type: Hoax



This is a hoax that, like the SULFNBK.EXE Warning hoax, tries to persuade you to delete a legitimate Windows file from your computer. The file that the hoax refers to, Jdbgmgr.exe, is a Java Debugger Manager. It is a Microsoft file that is installed when you install Windows.

It has a teddy bear icon as described in the hoax:



CAUTION: Jdbgmgr.exe, like any file, can become infected by a virus. One virus in particular, W32.Efortune.31384@mm, targets this file. Norton AntiVirus has provided protection against W32.Efortune.31384@mm since May 11, 2001.

NOTE: If you have already deleted the Jdbgmgr.exe file, some Java applets may not run correctly. This is not a critical system file. The file version may vary with your operating system and version of Internet Explorer. If you want to restore the file, read the instructions in the How to restore the Jdbgmgr.exefile section at the end of this document.