THIS IS A HOAX!!!!!

Included below is the McAfee information concerning this hoax and the fix if you delete the file described in the email.

Jdbgmgr.exe Hoax

McAfee AVERT Labs would like to inform you of a new email HOAX.

This email message is just a HOAX. Although, the JDBGMGR.EXE file may become infected by a number of valid viruses (most commonly W32/Magistr@MM, the details of this HOAX message are not based on actual events.

We are advising users who receive the email to delete the message and DO NOT pass it on as this is how an email HOAX propagates.

JDBGMGR.EXE is the Microsoft Debugger Registrar for Java.

It uses this icon:

Below is the actual text from the message that may be received via email. There are numerous variations on these messages.

English version

I found the little bear in my machine because of that I am sending this message in order for you to find it in your machine. The procedure is very simple: The objective of this e-mail is to warn all Hotmail users about a new virus that is spreading by MSN Messenger. The name of this virus is jdbgmgr.exe and it is sent automatically by the Messenger and by the address book too. The virus is not detected by McAfee or Norton and it stays quiet for 14 days before damaging the system. The virus can be cleaned before it deletes the files from your system. In order to eliminate it, it is just necessary to do the following steps: 1. Go to Start, click 'Search' 2.- In the 'Files or Folders option' write the name jdbgmgr.exe 3.- Be sure that you are searching in the drive 'C' 4.- Click 'find now' 5.- If the virus is there (it has a little bear-like icon with the name of jdbgmgr.exe DO NOT OPEN IT FOR ANY REASON 6.- Right click and delete it (it will go to the Recycle bin) 7.- Go to the recycle bin and delete it or empty the recycle bin. IF YOU FIND THE VIRUS IN ALL OF YOUR SYSTEMS SEND THIS MESSAGE TO ALL OF YOUR CONTACTS LOCATED IN YOUR ADDRESS BOOK BEFORE IT CAN CAUSE ANY DAMAGE.

In the event that JDBGMGR.EXE was deleted erroneously, the following method may be used to restore the file from backup:

-- Windows 98 Instructions --

1. Click START - RUN, type SFC and hit ENTER
2. In the 'Specify the system file you would like to restore' field, type C:\WINDOWS\SYSTEM\JDBGMGR.EXE and hit ENTER
3. In the RESTORE FROM field, type in the path to your WINDOWS CAB files
   (ie. C:\WINDOWS\OPTIONS\CABS)
   (ie. D:\WIN98 where D is the drive letter assigned to your CD-ROM)
4. Click OK and continue with the restore function

Windows ME Instructions

1. Click START - RUN, type MSCONFIG and hit ENTER
2. Click the Extract Files button
3. In the 'Specify the system file you would like to restore' field, type C:\WINDOWS\SYSTEM\JDBGMGR.EXE and hit ENTER
4. In the RESTORE FROM field, type in the path to your WINDOWS CAB files
   (ie. C:\WINDOWS\OPTIONS\INSTALL)
5. Click OK and continue with the restore function

Windows XP Instructions

Information on using the System File Checker to restore files

Please note that %windir% refers to where you installed Windows. For a default windows install, you'd replace %WinDir% with "C:\windows".

1. Click START - RUN, type MSCONFIG and hit ENTER
2. Click the Expand File... button
3. In the 'File to restore' field, type %WinDir%\SYSTEM32\JDBGMGR.EXE and hit ENTER
4. In the RESTORE FROM field, type in the path to your WINDOWS CAB files. This may vary from machine to machine. It may be on a local drive, network drive, or CD-ROM
   (ie. C:\WINDOWS\OPTIONS\INSTALL)
5. In the Save File in field, type in %WinDir%\SYSTEM32.
6. Click OK and continue with the restore function

For more information about this hoax, please visit our Virus Library:
http://vil.nai.com/vil/content/v_99436.htm

For more information about hoaxes in general, please click the link below:
http://vil.nai.com/VIL/hoaxes.asp