1. News & Issues
JDBGMGR.EXE Virus Warning
Netlore Archive:  JDBGMGR.EXE ('Teddy Bear' virus) - Forwarded virus warning claims that a standard Windows file is actually a security threat

Description:  Virus hoax
Status:  False
Circulating since:  April 2002
Analysis:  See below
 


Email example contributed by R. Legacy, 26 Apr 2002:

Hello everyone,

I received this message about the "little bear" virus that affects primarily Hotmail users. The virus is called jdbgmgr.exe and spreads via msn messenger and email address books. The virus is not detected by McAfee or Norton Antivirus and may be in your computer for 14 days before causing any harm. It can be erased before eliminating your computers' files.

To eliminate the virus, follow these steps:

1. Got to Start and click on "Find"
2. Search under "Files and Folders" and enter jdbgmgr.exe
3. Make sure you are looking in the "C" drive.
4. Click on "Find Now"
5. If the virus appears (the icon is a little bear with the name jdbgmgr.exe) DO NOT OPEN IT UNDER ANY CIRCUMSTANCES
6. Highlight the virus (do NOT double click) and press SHIFT + DELETE and it will be erased from your computer.

IF YOU FIND THIS VIRUS IN YOUR COMPUTER, SEND THIS MESSAGE TO ALL THOSE LISTED IN YOUR ADDRESS BOOK SO THAT IT WILL NOT DO ANY HARM TO THEIR COMPUTERS.


Email example contributed in May 2002:

Subject: I got this VIRUS via email, here's how to DELETE it... (follow instructions carefully)

IMPORTANT FOR EVERYONE! PLEASE FOLLOW THE INSTRUCTIONS BELOW! I HAD UNKNOWINGLY RECEIVED THIS VIRUS AND IT HAS ALREADY BEEN SENT TO EVERYONE IN MY CONTACT LIST! THAT MEANS YOU!

Please check and verify if you have this virus. It was sent to me (accidentally) and it is said that it is passed on to all the people in my address list. It is very probable that you may have it. And if you do have it, contact all the people in YOUR ADDRESS BOOK because the program AUTOMATICALLY sends everyone in your address book a message with the virus.

The virus' name is jdbgmgr.exe and it is not detected with McAfee or Norton. It remains in your computer's system for 14 days before it erases all you files.

To delete and eliminate it completely, please do the following immediately:

1. Go to START -- FIND --FILES OR FOLDERS

2. Under NAMED, type jdbgmgr.exe and click FIND NOW. Make sure you are looking under Drive (C) ******DO NOT CLICK ON IT IF IT APPEARS ********

3. If the virus appears *(the icon next to it will be a small teddy bear), the name will be jdbgmgr.exe

4. *****DO NOT OPEN IT************ Just right click on it and DELETE it. it will be sent to the Recycle Bin.

5. After you see it disappear, go to the RECYCLE BIN and DELETE it from there as well. If at all possible, EMPTY the Recycle Bin under FILE.

If you find this virus in your system, please send this message to everyone in your address list asap before it causes any damages.


Comments:   This is a particularly diabolical hoax because, like the SULFNBK.EXE hoax of 2001, it persuades gullible users to inflict damage on their own computers. Don't forward these messages!

According to antivirus experts (see links below), JDBGMGR.EXE (sometimes mislabeled in the warnings as "JDBG.EXE") is a standard Windows utility file — it's supposed to be on your computer — and unless you have very good reason to believe you might have downloaded an infected copy of the file (which is possible, but unlikely), leave it alone.

If you happen to be one of those unfortunates who followed instructions and deleted the harmless file, don't despair — it's not absolutely critical to the operation of your computer. See the commentary by our resident About.com antivirus guru Mary Landesman for technical details.

Last updated: 01/10/03


Email This Article


Sources and further reading:

JDBGMGR.EXE - New Name, Same Old Hoax
Analysis by antivirus expert Mary Landesman

Symantec: Jdbgmgr.exe File Hoax
Analysis by Symantec Security Response

F-Secure: Jdbgmgr.exe Virus Hoax
"Please ignore this hoax or anything similar warning about jdbgmgr.exe and don't pass it on."

Virus Hoax Encyclopedia
Virus hoax listing from About.com's Antivirus Guide


Current Netlore
The Urban Legends Top 25

Discuss in my forum

©2013 About.com. All rights reserved.