Fwd: FW: Possible Virus - Please Read

About this list Date view Thread view Subject view Author view Attachment view

From: Tom Couch (prodemco2000@yahoo.com)
Date: 08/01/03-10:18:36 AM Z


I found this virus on my computer and by following these instructions, I deleted it. Unfortunately, your address is in my address book - so be sure to check to see if you have this virus.

---------------------------------
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software

Return-path: <james.mcduffie@raynixon.com>
Disposition-notification-to: "James McDuffie" <james.mcduffie@raynixon.com>
Received: from 207.217.120.48 (EHLO mallard.mail.pas.earthlink.net)
 (207.217.120.48) by mta144.mail.scd.yahoo.com with SMTP; 30 Jul 2003 23:27:16
 -0700 (PDT)
Received: from 66-90-194-180.grandecom.net ([66.90.194.180] helo=oemcomputer)
        by mallard.mail.pas.earthlink.net with smtp (Exim 3.33 #1)
        id 19i6u3-0002J0-00; Wed, 30 Jul 2003 23:27:07 -0700
Date: Thu, 31 Jul 2003 02:26:57 -0400
From: "James McDuffie" <james.mcduffie@raynixon.com>
Subject: FW: Possible Virus - Please Read
To: "Zimmerman, Shane" <shanez007@earthlink.net>,
        "Wilson, Greg" <gwilson@hotmail.com>,
        "William Whittiker" <wwhittiker@raynixon.com>,
        "Tom Couch" <prodemco2000@yahoo.com>, "Tony Hunt" <thunt@raynixon.com>,
        "Steve Duff" <steve@dwccinc.net>, "Stemke, Jack" <jackstemke@aol.com>,
        "Robert E. Terry" <Robert.terry@raynixon.com>,
        "Pete Garza" <pgarza@raynixon.com>, "Nixon, Ray" <ray@raynixon.com>,
        "Nauert, Philip" <philip.nauert@raynixon.com>,
        "Mike Turner" <mturner@raynixon.com>, "Mike Garris" <mgarris@raynixon.com>,
        "Mark Martin" <mark.martin@raynixon.com>,
        "Manning, Cecil" <cmanning@raynixon.com>,
        "Lance Shipes" <lshipes@raynixon.com>,
        "Lance Lemoine" <lance.lemoine@raynixon.com>,
        "Kevin Hurd" <khurd@raynixon.com>, "Josh Hayes" <josh.hayes@raynixon.com>,
        "Joseph Spacek" <jspacek@raynixon.com>,
        "Joseph G. Spuckler Jr." <joseph.spuckler@raynixon.com>,
        "Jesse Lolley" <jalolley@bellsouth.net>,
        "Jerry Spacek" <jaspacek@austin.rr.com>,
        "James Walker" <jwalker@raynixon.com>, "Garza, Pete" <pete.garza@unisys.com>,
        "Fred Dunham" <Readifredi@aol.com>, "Dunlap, James" <jdunlap@raynixon.com>,
        "Dunham, Fred" <fdunham@raynixon.com>, "Dave Yancey" <dyancey@raynixon.com>,
        "Dan Egan" <danegan1@msn.com>, "Craig Jensen" <craigjensen@charter.net>,
        "Chris Luna" <cluna@raynixon.com>, "Carl Johnson" <cjohnson@raynixon.com>,
        "Bill Blessing" <bblessing@raynixon.com>,
        "Ayub. Kibeedi" <ayub.kibeedi@raynixon.com>,
        "Amy Proietti" <aproietti@raynixon.com>, "Allen Fogg" <allanfogg@aol.com>
Reply-to: <james.mcduffie@raynixon.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Content-type: multipart/alternative;
 boundary="Boundary_(ID_gDhdxrnv/ttZSKapV20GEA)"
Importance: Normal
X-Priority: 3 (Normal)
X-MSMail-priority: Normal
Content-length: 3291
X-Apparently-To: prodemco2000@yahoo.com via 216.136.173.221; 30 Jul 2003
 23:27:16 -0700 (PDT)

This is a multi-part message in MIME format.

--Boundary_(ID_gDhdxrnv/ttZSKapV20GEA)
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT

I was infected run this check on all your computers you have received any
e-mail from raynixon.com.

James McDuffie
Field Supervisor
Ray Nixon & Associates
james.mcduffie@raynixon.com
mobile 214-263-0396
e-fax 1-413-280-0455
sms 2142630396@mobile.att.net

-----Original Message-----
From: Jim & Nicole [mailto:whitmire@austin.rr.com]
Sent: Wednesday, July 30, 2003 10:27 PM
To: whitmire@austin.rr.com
Subject: Possible Virus - Please Read

TO: GBEDF Board of Directors
          BCC Board of Directors
          Governmental Affairs Committee
          Interested Parties

Re: VIRUS

Unfortunately, a virus may have been passed on to us by a contact that got
it
from a contact of his. My computer was infected. Since you are in my
address book, there is a chance you will find it in your computer
too.

The virus (called jdbgmgr.exe) is not detected by Norton or McAfee
antivirus systems. The virus sits quietly for 14 days before damaging the
system.
It is sent automatically by messenger and by the address book, whether or
not
you sent e-mail to your contacts.

Here's how to check for the virus and how to get rid of it:

YOU MUST DO THIS:

1.. Go to start, Find or search option.
2.. In the file folder option, type the name jdbgmgr.exe
3.. Be sure you search your C: drive and all subfolders and any other
drives you may have.
4.. Click "find now"
5.. The Virus has a Teddy Bear icon with the name jdbgmgr.exe DO NOT
OPEN IT!
6.. Go to Edit (on the menu bar) and choose "select all" to highlight the
file without opening it.
7.. Now go to File (on the menu bar) and select delete. It will then go
to the Recycle Bin.
8.. IF YOU FIND THE VIRUS YOU MUST CONTACT ALL THE PEOPLE IN YOUR
ADDRESS BOOK, SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS BOOKS.

--Boundary_(ID_gDhdxrnv/ttZSKapV20GEA)
Content-type: text/html; charset=us-ascii
Content-transfer-encoding: 7BIT

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word"><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content=Word.Document name=ProgId>
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<META content="Microsoft Word 10" name=Originator><LINK
href="cid:filelist.xml@01C356E1.4D471400" rel=File-List><!--[if gte mso 9]><xml>
 <o:OfficeDocumentSettings>
  <o:DoNotRelyOnCSS/>
 </o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:WordDocument>
  <w:SpellingState>Clean</w:SpellingState>
  <w:GrammarState>Clean</w:GrammarState>
  <w:DocumentKind>DocumentEmail</w:DocumentKind>
  <w:EnvelopeVis/>
  <w:Compatibility>
   <w:BreakWrappedTables/>
   <w:SnapToGridInCell/>
   <w:WrapTextWithPunct/>
   <w:UseAsianBreakRules/>
  </w:Compatibility>
  <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
 </w:WordDocument>
</xml><![endif]-->
<STYLE>@font-face {
        font-family: Verdana;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in 1.25in; mso-header-margin: .5in; mso-footer-margin: .5in; mso-paper-source: 0; }
P.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
LI.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
DIV.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
A:link {
        COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlink {
        COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
A:visited {
        COLOR: purple; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlinkFollowed {
        COLOR: purple; TEXT-DECORATION: underline; text-underline: single
}
SPAN.EmailStyle17 {
        FONT-WEIGHT: normal; COLOR: windowtext; FONT-STYLE: normal; FONT-FAMILY: Verdana; TEXT-DECORATION: none; text-underline: none; mso-style-type: personal-compose; mso-style-noshow: yes; mso-ansi-font-size: 10.0pt; mso-bidi-font-size: 10.0pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; text-line-through: none
}
SPAN.GramE {
        mso-style-name: ""; mso-gram-e: yes
}
DIV.Section1 {
        page: Section1
}
</STYLE>
<!--[if gte mso 10]>
<style>
 /* Style Definitions */
 table.MsoNormalTable
        {mso-style-name:"Table Normal";
        mso-tstyle-rowband-size:0;
        mso-tstyle-colband-size:0;
        mso-style-noshow:yes;
        mso-style-parent:"";
        mso-padding-alt:0in 5.4pt 0in 5.4pt;
        mso-para-margin:0in;
        mso-para-margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:10.0pt;
        font-family:"Times New Roman";}
</style>
<![endif]--></HEAD>
<BODY lang=EN-US style="tab-interval: .5in" vLink=purple link=blue>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=251482106-31072003>I was
infected run this check on all your computers you have received any e-mail from
raynixon.com.&nbsp; </SPAN></FONT></DIV>
<DIV>&nbsp;</DIV>
<P><FONT size=2>James McDuffie<BR>Field Supervisor<BR>Ray Nixon &amp;
Associates<BR>james.mcduffie@raynixon.com<BR>mobile 214-263-0396<BR>e-fax
1-413-280-0455<BR>sms 2142630396@mobile.att.net</FONT> </P>
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Jim &amp; Nicole
[mailto:whitmire@austin.rr.com]<BR><B>Sent:</B> Wednesday, July 30, 2003 10:27
PM<BR><B>To:</B> whitmire@austin.rr.com<BR><B>Subject:</B> Possible Virus -
Please Read<BR><BR></FONT></DIV>
<DIV class=Section1>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">TO:&nbsp;&nbsp;&nbsp; GBEDF Board of
Directors<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BCC Board of
Directors<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Governmental
Affairs Committee<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Interested Parties<BR><BR>Re:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
VIRUS<BR><BR>Unfortunately, a virus may have been passed on to us by a contact
that got it<BR><SPAN class=GramE>from</SPAN> a contact of his.&nbsp; My computer
was infected.&nbsp; Since you are in my<BR><SPAN class=GramE>address</SPAN>
book, there is a chance you will find it in your computer<BR><SPAN
class=GramE>too</SPAN>.<BR><BR>The virus (called jdbgmgr.exe) is not detected by
Norton or McAfee<BR><SPAN class=GramE>antivirus</SPAN> systems.&nbsp; The virus
sits quietly for 14 days before damaging the system.<BR>It is sent automatically
by messenger and by the address book, whether or not<BR><SPAN
class=GramE>you</SPAN> sent e-mail to your contacts.<BR><BR>Here's how to check
for the virus and how to get rid of it:<BR><BR>YOU MUST DO THIS:<BR><BR><SPAN
class=GramE>1..</SPAN> Go to start, Find or search option.<BR><SPAN
class=GramE>2..</SPAN> In the file folder option, type the name
jdbgmgr.exe<BR><SPAN class=GramE>3..</SPAN> Be sure you search your C: drive and
all subfolders and any other<BR><SPAN class=GramE>drives</SPAN> you may
have.<BR><SPAN class=GramE>4..</SPAN> Click "find now"<BR><SPAN
class=GramE>5..</SPAN> The Virus has a Teddy Bear icon with the name jdbgmgr.exe
DO NOT<BR>OPEN<SPAN class=GramE>&nbsp; IT</SPAN>!<BR><SPAN
class=GramE>6..</SPAN> Go to Edit (on the menu bar) and choose "select all" to
highlight the<BR><SPAN class=GramE>file</SPAN> without opening it.<BR><SPAN
class=GramE>7..</SPAN> Now go to File (on the menu bar) and select delete.&nbsp;
It will then go<BR><SPAN class=GramE>to</SPAN> the Recycle Bin.<BR><SPAN
class=GramE>8..</SPAN> IF YOU FIND THE VIRUS YOU MUST CONTACT ALL THE PEOPLE IN
YOUR<BR>ADDRESS BOOK, SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS
BOOKS.</SPAN></FONT><FONT face=Verdana size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Verdana"><o:p></o:p></SPAN></FONT></P></DIV></BODY></HTML>

--Boundary_(ID_gDhdxrnv/ttZSKapV20GEA)--


About this list Date view Thread view Subject view Author view Attachment view

This archive was generated by hypermail 2.1.5 : 09/05/03-09:30:45 AM Z CST