Virus Hoax Spreads by E-Mail

An e-mail hoax pretending to be a virus warning has been playing on users' fears and causing them to delete their Java Debugger Manager file, called jdbgmgr.exe, by telling them it's a virus, Symantec says Friday.

Symantec's security response staff have been dealing with calls all week, senior researcher Andre Post says Friday. Many say they have deleted the file "just to be cautious" and have to be told how to reinstall it, Post says.

The fake advisory claims that the file is a virus that is spread through address books and will damage the PC after sitting quietly for 14 days. It is usually easy to spot such hoaxes because they tend to have no attachment, say the virus is very destructive, and end in an appeal to send it to everyone you know, Post says.

"And capitalization rules. In this one for example, the final appeal is all in capitals," he says.

If in doubt, Post says, people should check the list of hoaxes on Symantec's Web site. At the moment most people don't, and just pass them on as directed.

"These e-mails are very successful. Generally as soon as it starts, you see it spread and get translated into different languages," Post says.

However, Symantec only discovers around one hoax a week, which is minimal in comparison to the 10 to 20 real viruses discovered, Post says.

It is hard to identify who starts this type of e-mail, but they are presumably non-technical, or would create their own virus instead, Post says. "And a high proportion appear to be Dutch! I don't know why," he says.