Virus Alert is a HOAX

From: Y.T. El-Nahhas (johne@ATHABASCAU.CA)
Date: Wed Oct 23 2002 - 16:52:16 CDT 

Message-ID:  <3DB71A10.326ABA67@athabascau.ca>
Date:         Wed, 23 Oct 2002 15:52:16 -0600
From: "Y.T. El-Nahhas" <mailto:johne@ATHABASCAU.CA>
Subject:      Virus Alert is a HOAX
To: mailto:INTDEV-L@PETE.URI.EDU

<pre> This is a multi-part message in MIME format.

--Boundary_(ID_L5HNckW7drlw70C91kGEyQ) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT

___
    This communication is intended for the use of the recipient to whom it
    is addressed, and may contain confidential, personal, and or privileged
    information. Please contact us immediately if you are not the intended
    recipient of this communication, and do not copy, distribute, or take
    action relying on it. Any communications received in error, or
    subsequent reply, should be deleted or destroyed. 

---

--Boundary_(ID_L5HNckW7drlw70C91kGEyQ)
Content-type: message/rfc822

Return-path: <>
Received: from CONVERSION-DAEMON.local.athabascau.ca by local.athabascau.ca
 (PMDF V6.1-1 #41047) id <mailto:0H4G00C01EEFXP@local.athabascau.ca> for
mailto: johne@athabascau.ca; Wed, 23 Oct 2002 15:30:21 -0600 (MDT)
Received: from pete.uri.edu ([131.128.1.58])
 by local.athabascau.ca (PMDF V6.1-1 #41047)
 with ESMTP id <mailto:0H4G00C47EEEVA@local.athabascau.ca> for johne@athabascau.ca;
 Wed, 23 Oct 2002 15:30:15 -0600 (MDT)
Received: from terms.uri.edu (TERMS.uri.edu [131.128.1.32])
        by pete.uri.edu (8.11.6/8.11.6) with ESMTP id g9NLUDb26857      for
 <mailto:johne@athabascau.ca>; Wed, 23 Oct 2002 17:30:13 -0400
Received: from localhost (localhost)    by terms.uri.edu (8.11.4/8.11.4)
 id g9NLU1L30117; Wed, 23 Oct 2002 17:30:13 -0400
Date: Wed, 23 Oct 2002 17:30:13 -0400
From: Mail Delivery Subsystem <mailto:MAILER-DAEMON@TERMS.uri.edu>
Subject: Returned mail: see transcript for details
To: mailto:johne@athabascau.ca
Message-id: <mailto:200210232130.g9NLU1L30117@terms.uri.edu>
Auto-submitted: auto-generated (failure)
MIME-version: 1.0
Content-type: multipart/report;
 boundary="Boundary_(ID_eL8jODwiptYGJ668rEb2Kw)"; report-type=delivery-status

This is a MIME-encapsulated message

--Boundary_(ID_eL8jODwiptYGJ668rEb2Kw)
Content-type: TEXT/PLAIN

The original message was received at Wed, 23 Oct 2002 17:28:54 -0400
from cliff.cs.athabascau.ca [131.232.10.7]

   ----- The following addresses had permanent fatal errors -----
mailto:<INTDEL-L@PETE.URI.EDU>
    (reason: 550 5.1.1 <mailto:INTDEL-L@pete.uri.edu>... User unknown)

   ----- Transcript of session follows -----
... while talking to rockypoint.uri.edu.:
>>> RCPT To:<mailto:INTDEL-L@pete.uri.edu> NOTIFY=FAILURE,DELAY ORCPT=rfc822;INTDEL-L@PETE.URI.EDU
<<< 550 5.1.1 <mailto:INTDEL-L@pete.uri.edu>... User unknown
550 5.1.1 <mailto:INTDEL-L@PETE.URI.EDU>... User unknown

--Boundary_(ID_eL8jODwiptYGJ668rEb2Kw)
Content-type: message/delivery-status

Original-Envelope-Id: mailto:0H4G00D02EBXAX@local.athabascau.ca
Reporting-MTA: dns; terms.uri.edu
Arrival-Date: Wed, 23 Oct 2002 17:28:54 -0400

Original-Recipient: rfc822;mailto:INTDEL-L@PETE.URI.EDU
Final-Recipient: RFC822; mailto:INTDEL-L@pete.uri.edu
Action: failed
Status: 5.1.1
Remote-MTA: DNS; rockypoint.uri.edu
Diagnostic-Code: SMTP; 550 5.1.1 <mailto:INTDEL-L@pete.uri.edu>... User unknown
Last-Attempt-Date: Wed, 23 Oct 2002 17:30:13 -0400

--Boundary_(ID_eL8jODwiptYGJ668rEb2Kw)
Content-type: message/rfc822

Return-path: <mailto:johne@athabascau.ca>
Received: from cliff.cs.athabascau.ca (cliff.cs.athabascau.ca [131.232.10.7])
        by terms.uri.edu (8.11.4/8.11.4) with ESMTP id g9NLSrv29360     for
 <mailto:INTDEL-L@PETE.URI.EDU>; Wed, 23 Oct 2002 17:28:54 -0400
Received: from CONVERSION-DAEMON.local.athabascau.ca by local.athabascau.ca
 (PMDF V6.1-1 #41047) id <mailto:0H4G00D01EBXAX@local.athabascau.ca> for
mailto: INTDEL-L@PETE.URI.EDU; Wed, 23 Oct 2002 15:28:52 -0600 (MDT)
Received: from athabascau.ca ([24.68.130.109])
 by local.athabascau.ca (PMDF V6.1-1 #41047)
 with ESMTPA id <mailto:0H4G00C2TEBTVA@local.athabascau.ca> for INTDEL-L@PETE.URI.EDU;
 Wed, 23 Oct 2002 15:28:45 -0600 (MDT)
Date: Wed, 23 Oct 2002 15:27:21 -0600
From: "Y.T. El-Nahhas" <mailto:johne@athabascau.ca>
Subject: RE: Possible virus alert: HOAX
To: mailto:INTDEL-L@pete.uri.edu
Message-id: <mailto:3DB71439.C87F878C@athabascau.ca>
MIME-version: 1.0
X-Mailer: Mozilla 4.79 [en] (Win98; U)
Content-type: multipart/mixed; boundary="Boundary_(ID_dA7A0v65mFjyo8k97imiJA)"
X-Accept-Language: en

This is a multi-part message in MIME format.

--Boundary_(ID_dA7A0v65mFjyo8k97imiJA)
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT

Hello,
I asked our computer people here at the university to check this out and
they said not to delete the file. This is a hoax. Who is this person who
sent the note to the list?
John

___
    This communication is intended for the use of the recipient to whom it
    is addressed, and may contain confidential, personal, and or privileged
    information. Please contact us immediately if you are not the intended
    recipient of this communication, and do not copy, distribute, or take
    action relying on it. Any communications received in error, or
    subsequent reply, should be deleted or destroyed.
---

--Boundary_(ID_dA7A0v65mFjyo8k97imiJA)
Content-type: message/rfc822

Return-path: <mailto:helpdesk@athabascau.ca>
Received: from CONVERSION-DAEMON.local.athabascau.ca by local.athabascau.ca
 (PMDF V6.1-1 #41047) id <mailto:0H4E00B01X2280@local.athabascau.ca> for
mailto: johne@athabascau.ca; Tue, 22 Oct 2002 20:18:03 -0600 (MDT)
Received: from aupair.cs.athabascau.ca ([131.232.10.8])
 by local.athabascau.ca (PMDF V6.1-1 #41047)
 with SMTP id <mailto:0H4E00LJ4X222U@local.athabascau.ca> for johne@athabascau.ca;
 Tue, 22 Oct 2002 20:18:02 -0600 (MDT)
Date: Tue, 22 Oct 2002 20:18:02 -0600 (MDT)
From: Comp Serv Help Desk 6405 <mailto:helpdesk@athabascau.ca>
Subject: Case 35501 Re: [Fwd: Possible virus alert]
In-reply-to: <mailto:3DB5F6A2.78C37BE8@athabascau.ca>
X-Sender: mailto:helpdesk@aupair.cs.athabascau.ca
To: "Y.T. El-Nahhas" <mailto:johne@athabascau.ca>
Message-id: <mailto:Pine.SUN.3.96.1021022201721.8683p-100000@aupair.cs.athabascau.ca>
MIME-version: 1.0
Content-type: TEXT/PLAIN; charset=US-ASCII

HI John, this is a hoax, do NOT delete the file..

Rita

On Tue, 22 Oct 2002, Y.T. El-Nahhas wrote:

> Hi
> do you think this is a legitimate message? John
>
> -------- Original Message --------
> Subject: Possible virus alert
> Date: Tue, 22 Oct 2002 14:24:59 -0400
> From: dab6310u <mailto:dab6310u@POSTOFFICE.URI.EDU>
> Reply-To: International Development and Global Education
> <mailto:INTDEV-L@PETE.URI.EDU>
> To: mailto:INTDEV-L@PETE.URI.EDU
>
> Hello,
> I received this today and wanted to get this message to you.  I found
> the
> virus on my machine and got rid of it...
> Good luck../
> DA
>
>
> ---- Forwarded Message -----<?xml:namespace prefix = o ns =
> "urn:schemas-microsoft-com:office:office" />
>
>
>
>          If you delete this virus soon enough it won't harm you
> computer.
> Please read and follow the instructions in the letter enclosed below.
>
>          Michelle
>
>
>
>          To All,
>            A worm Virus has been passed on to me through a contact. My
>          address book has in turn been infected.
>            Since you are in my address book, there is a good chance you
>          will find it in your computer too.
>            I followed the directions below and eradicated the virus
>          easily.
>            Please accept my apologies for the inconvenience.
>            The Virus (called jdbgmgr.exe) is not detected by Norton or
>          McAfee anti-virus systems. The virus sits quietly for 14 days
>          before damaging the system.
>            It is sent automatically by messenger and by the address
>          book, whether or not you sent emails to your contacts.
>          Here's how to check for the virus and how to get rid of it.
>          YOU MUST DO THIS :
>          1) Go to Start, Find ( or Search ) option
>          2) In the file / folders option, type the name: jdbgmgr.exe
>          3) Be sure your search your C: drive and all sub-folders and
>          any other drives you may have
>          4) Click "find now"
>          5) The Virus has a teddy bear icon with the name jdbgmgr.exe
>          DO NOT OPEN IT
>          6) Go to Edit (on the menu bar), choose "select all" to
>          highlight the file without opening it
>          7) Now go to File (on the menu bar) and select delete. It will
>          then go to the Recycle Bin
>          8) Go to the Recycle Bin and delete it there as well
>
>          IF YOU FIND THE VIRUS, YOU MUST CONTACT ALL THE PEOPLE IN YOUR
>          ADDRESS BOOK, SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS
>          BOOKS
>
> David Abedon
> Community Planning and Landscape Architecture
> University of Rhode Island
> Kingston, RI 02881 USA
> Phone:401-874-4655  Fax:401-874-5511  E-mail: mailto:David@uri.edu
>
> ___
>     This communication is intended for the use of the recipient to whom it
>     is addressed, and may contain confidential, personal, and or privileged
>     information. Please contact us immediately if you are not the intended
>     recipient of this communication, and do not copy, distribute, or take
>     action relying on it. Any communications received in error, or
>     subsequent reply, should be deleted or destroyed.
> ---
>

Computing Services Help Desk         e-mail: mailto:helpdesk@athabascau.ca

Hours Monday-Thursday 8:30am - 8:00pm Friday 8:30 a.m.-4:30 p.m.
Phone: (780) 675-6405 Fax:(780) 675-6333
Toll Free: 1-800-788-9041 ext 6405

Web:    http://www.athabascau.ca/html/depts/compserv/helpdesk/helpdesk.htm

--Boundary_(ID_dA7A0v65mFjyo8k97imiJA)--

--Boundary_(ID_eL8jODwiptYGJ668rEb2Kw)--

--Boundary_(ID_L5HNckW7drlw70C91kGEyQ)--

</pre>

This archive was generated by hypermail 2b29 : Wed Oct 23 2002 - 18:51:00 CDT