Virus Hoax: Microsoft Debugger Registrar for Java (Jdbgmgr.exe) Is Not a Virus (Q322993)
The information in this article applies to:
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows 98 Second Edition
- Microsoft Windows Millennium Edition
- Microsoft Windows NT Workstation version 4.0
- Microsoft Windows NT Server version 4.0
- Microsoft Windows NT Server, Enterprise Edition version 4.0
- Microsoft Windows 2000 , Professional
- Microsoft Windows 2000 , Server
- Microsoft Windows 2000 , Advanced Server
- Microsoft Windows 2000 , Datacenter Server
- Microsoft Windows XP 64-Bit Edition
- Microsoft Windows XP Home Edition
- Microsoft Windows XP Professional
SUMMARY
There is a virus hoax that advises customers to delete a valid Windows
file that is named Jdbgmgr.exe. This file is the Microsoft Debugger
Registrar for Java. If you receive the e-mail message that is listed in the
"More Information" section of this article, delete the e-mail message and do
not forward it to others. Although this file may become infected with a
virus, its presence is not an indication of a virus infection.
MORE INFORMATION
Contents of the Hoax Message
The Jdbgmgr.exe virus hoax arrives in an e-mail message with the following body text:
I found the little bear in my machine because of that I am sending this message in order for you to find it in your machine. The procedure is very simple:
The objective of this e-mail is to warn all Hotmail users about a new virus that is spreading by MSN Messenger. The name of this virus is jdbgmgr.exe and it is sent automatically by the Messenger and by the address book too. The virus is not detected by McAfee or Norton and it stays quiet for 14 days before damaging the system.
The virus can be cleaned before it deletes the files from your system. In order to eliminate it, it is just necessary to do the following steps:
1. Go to Start, click "Search"
2.- In the "Files or Folders option" write the name jdbgmgr.exe
3.- Be sure that you are searching in the drive "C"
4.- Click "find now"
5.- If the virus is there (it has a little bear-like icon with the name of jdbgmgr.exe DO NOT OPEN IT FOR ANY REASON
6.- Right click and delete it (it will go to the Recycle bin)
7.- Go to the recycle bin and delete it or empty the recycle bin.
IF YOU FIND THE VIRUS IN ALL OF YOUR SYSTEMS SEND THIS MESSAGE TO ALL OF YOUR CONTACTS LOCATED IN YOUR ADDRESS BOOK BEFORE IT CAN CAUSE ANY DAMAGE.
Prevention
This is a hoax; no prevention is required.
Recovery
If you deleted this file by following the e-mail message instructions, complete the appropriate steps to recover it.
Windows XP, Windows NT 4.0, Windows 98 Second Edition, Windows 98, and Windows 95
Reinstall the Microsoft virtual machine (Microsoft VM). To do so, visit the following Microsoft Web site:
Windows 2000
The Windows 2000 File Protection feature will recover the file. For additional information about the Windows 2000 File Protection feature, click the article number below to view the article in the Microsoft Knowledge Base:
Q222193 Description of the Windows 2000 Windows File Protection Feature
Windows Millennium Edition (Me)
The Windows Me System File Protection feature will recover the file. For additional information about the Windows Me File Protection feature, click the article number below to view the article in the Microsoft Knowledge Base:
Q253571 Description of the System File Protection Feature
REFERENCES
Related Security Information
For additional information about viruses, visit the following third-party Web sites:
http://securityresponse.symantec.com/avcenter/venc/data/jdbgmgr.exe.file.hoax.html
http://vil.nai.com/vil/content/v_99436.htm
The third-party contact information included in this article is provided
to help you find the technical support you need. This contact information is
subject to change without notice. Microsoft in no way guarantees the
accuracy of this third-party contact information.
For additional security-related information about Microsoft products, visit
the following Microsoft Web site: