Go to Jeff Salisbury LWGate Home Page.From: "John Hobbs" <cessnap@chartermi.net>
Subject: Re: [CANSLIM] Do not act on virus messages from Jerry Weiss
Date: Mon, 13 May 2002 18:11:44 -0400
Next Article (by Author): Re: [CANSLIM] Daily Screen "Rich W"
Previous Article (by Author): [CANSLIM] LABS Ian
Articles sorted by: [Date]
[Author]
[Subject]
This is a multi-part message in MIME format.
- ------=_NextPart_000_005E_01C1FAA9.A3E38AE0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_005F_01C1FAA9.A3E38AE0"
- ------=_NextPart_001_005F_01C1FAA9.A3E38AE0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
here's from McAfee:
=20
AVERT HOAX Notice!!
McAfee AVERT Labs would like to inform you of a new email HOAX.
This email message is just a HOAX. Although, the JDBGMGR.EXE file may =
become infected by a number of valid viruses (most commonly =
W32/Magistr@MM), the details of this HOAX message are not based on =
actual events.
We are advising users who receive the email to delete the message and DO =
NOT pass it on as this is how an email HOAX propagates.
JDBGMGR.EXE is the Microsoft Debugger Registrar for Java.=20
It uses this icon:=20
=20
Below is the actual text from the message that may be received via =
email. There are numerous variations on these messages.=20
----- Original Message -----=20
From: Bert Pesak=20
To: canslim@lists.xmission.com=20
Sent: Monday, May 13, 2002 8:44 AM
Subject: Re: [CANSLIM] Do not act on virus messages from Jerry Weiss
This is a bad one (w 32.k l e z.. g e n @ m m). If your Norton =
Antivirus does not detect the Klez virus it destroys your Norton =
Antivirus sw and the Microsoft installer and then randomly send it self =
to some of your contacts. I spent 6 hours last Thurs. removing the =
virus and getting the anti virus re installed and updated.
The first thing to do is update your AV sw asap.
If anyone has the virus let me know and I will post the steps I went =
thru to remove and restore the AV sw.
Bert
----- Original Message -----=20
From: Rich W=20
To: canslim@lists.xmission.com=20
Sent: Monday, May 13, 2002 7:12 AM
Subject: Re: [CANSLIM] Do not act on virus messages from Jerry Weiss
Just a note on the topic Virus:
I have been getting some emails with this one as a attachment, w =
32.k l e z.. g e n @ m m
and k l e z is REAL, as my Norton Anti-Virus has put it in the =
Quarantined file.
no one on this list should get it, unless you get a the same =
newsletter I do.
seems that the person who sends out the news letter has this and =
somehow some of the address
on his list are getting this, so sure is very important that you =
have a Virus checker running at all times=20
Rich Weinhold =20
----- Original Message -----=20
From: Ian=20
To: canslim@lists.xmission.com=20
Sent: Monday, May 13, 2002 12:04 AM
Subject: [CANSLIM] Do not act on virus messages from Jerry Weiss
Hi all:
I just got 4 copies of a message from group member Jerry Weiss. It =
instructed me to look for 'JDBGMGR.EXE' and delete it, claiming that =
'JDBGMGR.EXE' is a virus. Well, the message itself is a virus. =
'JDBGMGR.EXE' is part of Microsofts Java runtime.
Ian
- ------=_NextPart_001_005F_01C1FAA9.A3E38AE0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2715.400" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>here's from McAfee:</FONT></DIV>
<DIV><STRONG><FONT face=3DArial> </FONT></STRONG>
<P>AVERT HOAX Notice!!</P><FONT face=3DArial size=3D2>
<P>McAfee AVERT Labs would like to inform you of a new email HOAX.</P>
<P>This email message is just a HOAX. Although, the JDBGMGR.EXE file may =
become=20
infected by a number of valid viruses (most commonly <A=20
href=3D"http://vil.nai.com/vil/content/v_99040.htm"=20
target=3D_blank>W32/Magistr@MM</A>), the details of this HOAX message =
are not=20
based on actual events.</P>
<P>We are advising users who receive the email to delete the message and =
DO NOT=20
pass it on as this is how an email HOAX propagates.</P>JDBGMGR.EXE is =
the=20
Microsoft Debugger Registrar for Java.=20
<P>It uses this icon:=20
<P><IMG src=3D"http://vil.nai.com/images/jdbgmgrlg.gif">=20
<P>Below is the actual text from the message that may be received via =
email.=20
There are numerous variations on these messages. =
</B></U></P></FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
<A title=3Dbpesak@rcn.com href=3D"mailto:bpesak@rcn.com">Bert =
Pesak</A> </DIV>
<DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3Dcanslim@lists.xmission.com=20
=
href=3D"mailto:canslim@lists.xmission.com">canslim@lists.xmission.com</A>=
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Monday, May 13, 2002 8:44 =
AM</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Subject:</B> Re: [CANSLIM] Do not =
act on=20
virus messages from Jerry Weiss</DIV>
<DIV><BR></DIV>
<DIV><FONT size=3D2>This is a bad one </FONT><FONT size=3D3>(w 32.k l =
e z.. g e n=20
@ m m). </FONT><FONT size=3D2>If your Norton Antivirus does not =
detect the=20
Klez virus it destroys your Norton Antivirus sw and the Microsoft =
installer=20
and then randomly send it self to some of your contacts. I spent =
6 hours=20
last Thurs. removing the virus and getting the anti virus re installed =
and=20
updated.</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>The first thing to do is update your AV sw=20
asap.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=3D2>If anyone has the virus let me know and I will =
post the=20
steps I went thru to remove and restore the AV sw.</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>Bert</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
<A title=3Drich1334@brick.net =
href=3D"mailto:rich1334@brick.net">Rich W</A>=20
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3Dcanslim@lists.xmission.com=20
=
href=3D"mailto:canslim@lists.xmission.com">canslim@lists.xmission.com</A>=
=20
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Monday, May 13, 2002 =
7:12=20
AM</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Subject:</B> Re: [CANSLIM] Do not =
act on=20
virus messages from Jerry Weiss</DIV>
<DIV><BR></DIV>
<DIV><FONT face=3DArial>Just a note on the =
topic Virus:</FONT></DIV>
<DIV><FONT face=3DArial>I have been getting some emails with this =
one as a=20
attachment, w 32.k l e z.. g e n @ m m</FONT></DIV>
<DIV><FONT face=3DArial>and k l e z is REAL, as my Norton Anti-Virus =
has put=20
it in the Quarantined file.</FONT></DIV>
<DIV><FONT face=3DArial>no one on this list should get it, unless =
you get a=20
the same newsletter I do.</FONT></DIV>
<DIV><FONT face=3DArial>seems that the person who sends out the news =
letter=20
has this and somehow some of the address</FONT></DIV>
<DIV><FONT face=3DArial>on his list are getting this, so sure =
is very=20
important that you have a Virus checker running at all=20
times </FONT></DIV>
<DIV><FONT face=3DArial></FONT> </DIV>
<DIV><FONT face=3DArial></FONT> </DIV>
<DIV>Rich Weinhold <BR></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style=3D"FONT: 10pt arial">----- Original Message ----- =
</DIV>
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
<A title=3Dianstm@shaw.ca href=3D"mailto:ianstm@shaw.ca">Ian</A> =
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>To:</B> <A=20
title=3Dcanslim@lists.xmission.com=20
=
href=3D"mailto:canslim@lists.xmission.com">canslim@lists.xmission.com</A>=
=20
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Monday, May 13, 2002 =
12:04=20
AM</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Subject:</B> [CANSLIM] Do not =
act on=20
virus messages from Jerry Weiss</DIV>
<DIV><BR></DIV>
<DIV><FONT size=3D2>Hi all:</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=3D2>I just got 4 copies of a message from group =
member Jerry=20
Weiss. It instructed me to look for 'JDBGMGR.EXE' and delete it, =
claiming=20
that 'JDBGMGR.EXE'<!--/PAGE_TITLE--> is a virus. Well, the =
message=20
itself is a virus. 'JDBGMGR.EXE'<!--/PAGE_TITLE--> is part of =
Microsofts Java runtime.</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT=20
size=3D2>Ian</FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BODY></=
HTML>
- ------=_NextPart_001_005F_01C1FAA9.A3E38AE0--
- ------=_NextPart_000_005E_01C1FAA9.A3E38AE0
Content-Type: image/gif;
name="jdbgmgrlg.gif"
Content-Transfer-Encoding: base64
Content-Location: http://vil.nai.com/images/jdbgmgrlg.gif
R0lGODlhIAAgALMAAAAAAL8AAAC/AL+/AAAAv78AvwC/v8DAwICAgP8AAAD/AP//AAAA//8A/wD/
/////yH5BAAAAAAALAAAAAAgACAAAwSX8Mn5gK32Zsr7BEcIhiIJeKg0kuwxnqm3tqYbo7O7Xrfc
WqRKz0f7DTk5GgJ2/BQPiGWzk4zCNs0kCwhl9rRF6xD8lH6fT29M+6DxzuntFGw1zUuk6FI0rZhG
ei99ORZ1Imo3WlxbiDhoaY1IcWFmKWRVYoloi3qVlmWGnZGSLaKFmWMsnWZYWXmifVQhq6NZIIGx
lq03EQA7
- ------=_NextPart_000_005E_01C1FAA9.A3E38AE0--
- -
- -To subscribe/unsubscribe, email "majordomo@xmission.com"
- -In the email body, write "subscribe canslim" or
- -"unsubscribe canslim". Do not use quotes in your email.
Next Article (by Author): Re: [CANSLIM] Daily Screen "Rich W"
Previous Article (by Author): [CANSLIM] LABS Ian
Articles sorted by: [Date]
[Author]
[Subject]