Jdbgmgr.exe Hoax (AKA Teddy Bear Virus) ------------------------------------------------------------------------------ First Published April, 2002 Updated November, 2002 / January, 2003 In December, the false warning for jdbgmgr was rewritten and some of the versions have been calling jdbgmgr.exe the Teddy Bear Virus. The warning says jdbgmgr.exe is a virus and urges users to delete this file. As it turns out, this is a legitimate Windows program. It does have a teddy bear icon, but this is normal for this program. There is a real virus called BugBear, but it is unrelated to this file. Bugbear does not display any bear icons and someone may have made a connection between the word bear in Bugbear and the icon for the jdbgmgr.exe file. But no connection exists. This "warning" is trying to scare you into deleting a file which is found in virtually all Windows OS versions. It is used to debug Java programs, but is definitely not a virus and can do no harm to your computer. There are several viruses that can target this file and infect it with a virus. However, the teddy bear icon does not mean this file is infected. All the updated anti-virus software programs will detect the presence of a virus in this file. Scan your system if you want to ease your mind, but don't delete any file just because of a warning received in an e-mail. It is not necessary or desirable to delete this program. Just delete the e-mail scare letter instead. If it is too late and you did delete it you can get it back by reinstalling the latest version of Internet Explorer. However, please note this message from Microsoft technicians: "The Microsoft Debugger Registrar for Java (Jdbgmgr.exe) is only used by Microsoft Visual J++ 1.1 developers. If you follow the e-mail message instructions and delete this file, you do not have to recover it unless you use Microsoft Visual J++ 1.1 to develop Java programs on Windows XP, Windows NT 4.0, Windows 98 Second Edition, Windows 98, or Windows 95. For Windows XP, Windows NT 4.0, Windows 98 Second Edition, Windows 98, and Windows 95: Reinstall Microsoft Virtual Machine (Microsoft VM)." Here is the latest from December, 2002: Subject: Virus Alert - Teddy Bear Virus A virus has been passed to our computers. As your contact is in our address book, you may have received this virus from me as well. Please see the instructions below to delete and pass on to your contacts. The virus (called jdbgmgr.exe) is not detected by Norton or McAfee or F-secure or VET anti virus systems. The virus sits quietly for 14 days before damaging the system. It's sent automatically by messenger and by the address book whether or not you send e-mails to your contacts. Here's how to check for the virus and how to get rid of it. Thanks, YOU MUST DO THIS - 1. Go to start (bottom left corner), find the search option (or "find"). 2. In the files / folders option, write the name jdbgmgr.exe 3. Be sure to search your C: drive and any other drives you may have. 4. Click "find now" 5. The virus has a teddy bear icon with the name jdbgmgr.exe DO NOT OPEN IT. 6. Go to edit : choose "select all" to highlight the file without opening it. 7. Now go to file and select "delete". It will go to your recycle bin. 8. Go to your recycle bin and delete it there as well. IF YOU FIND THE VIRUS YOU MUST CONTACT ALL THE PEOPLE IN YOUR ADDRESS BOOK SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS BOOKS. SORRY ABOUT THIS. I'm SURE EVERYONE IN THE ADDRESS BOOK WILL HAVE IT. To do this open new email message, click the photo of the address book next to TO. Click every name and add to BCC. Copy this message, enter subject, paste to email, send. Brett Bridger Computer Services Manager United Dental Hospital of Sydney Here is a copy of the chain letter from September, 2002: Subject: Virus Alert A virus has been passed to our computers. As your contact is in our address book, you may have received this virus from me as well. Please see the instructions below to delete and pass on to your contacts. The virus (called jdbgmgr.exe) is not detected by Norton or McAfee or F-secure or VET anti virus systems. The virus sits quietly for 14 days before damaging the system. It's sent automatically by messenger and by the address book whether or not you send e-mails to your contacts. Here's how to check for the virus and how to get rid of it. Thanks YOU MUST DO THIS - 1. Go to start (bottom left corner), find the search option (or "find"). 2. In the files / folders option, write the name jdbgmgr.exe 3. Be sure to search your C: drive and any other drives you may have. 4. Click "find now" 5. The virus has a teddy bear icon with the name jdbgmgr.exe DO NOT OPEN IT. 6. Go to edit : choose "select all" to highlight the file without opening it. 7. Now go to file and select "delete". It will go to your recycle bin. 8. Go to your recycle bin and delete it there as well. IF YOU FIND THE VIRUS YOU MUST CONTACT ALL THE PEOPLE IN YOUR ADDRESS BOOK SO THEY CAN ERADICATE IT IN THEIR OWN ADDRESS BOOKS. SORRY ABOUT THIS. I'm SURE EVERYONE IN THE ADDRESS BOOK WILL HAVE IT. To do this open new email message, click the photo of the address book next to TO. Click every name and add to BCC. Copy this message, enter subject, paste to email, send. Here's an older one from April, 2002: I have been informed that the following file is a virus that may be in you C drive. Please go into your find file and if this exists (it has an icon of a bunny) please do not open. Use your right click button and just delete, then go into your recycle folder and delete it from there, do not open. If this exists, please let everyone know in your address book. jdbgmgr.exe Resource: F-Secure jdbgmgr.exe Virus Hoax