[TowerTalk] Virus alert -NOT!

John Kuklewicz N7ZN kukl at cybrquest.com
Sat Feb 22 07:37:43 EST 2003


Don't get all too excited by this, this is a well-known
internet hoax. The e-mail warning message -IS- the 'virus'

jdbgmgr.exe is the Microsoft Debugger Registrar for Java
and is a legitimate file. Note that there -is- a virus
that targets this file, but Norton has had it in their
database since May 2001

vy 73;

John N7ZN

According to the Symantec (Norton) website:
ref url:
<http://securityresponse.symantec.com/avcenter/venc/data/jdbgmgr.exe.file.hoax.html>

Jdbgmgr.exe file hoax
Reported on: April 12, 2002
Last Updated on: February 12, 2003 08:27:21 PM

Symantec Security Response encourages you to ignore any messages 
regarding this hoax. It is harmless and is intended only to cause 
unwarranted concern.

Type: Hoax

technical details

This is a hoax that, like the SULFNBK.EXE Warning hoax, tries to 
persuade you to delete a legitimate Windows file from your computer. 
Jdbgmgr.exe is the file to which the hoax refers, and it is the 
Microsoft Debugger Registrar for Java. The Jdbgmgr.exe file may be 
installed when you install Windows.

NOTE: Recent versions of this hoax take advantage of the recent 
outbreak of the W32.bugbear at mm worm and that the Jdbgmgr.exe file 
mentioned in the hoax has a bear icon. The actual W32.bugbear at mm worm 
file is an .exe file and does not have a bear icon.

The Windows Jdbgmgr.exe file has a teddy bear icon in the hoax, as 
illustrated below:


CAUTION: A virus can infect Jdbgmgr.exe. The W32.Efortune.31384 at mm 
virus, in particular, targets this file. Norton AntiVirus has provided 
protection against W32.Efortune.31384 at mm since May 11, 2001.

NOTE: If you have already deleted the Jdbgmgr.exe file, in most cases, 
you do not have to re-install it. The following quote is extracted 
from the Microsoft Knowledge Base article, "Virus Hoax: Microsoft 
Debugger Registrar for Java (Jdbgmgr.exe) Is Not a Virus (Q322993)."

Red wrote:
> BlankA virus has been passed to me by an email that ...
> The virus (called jdbgmgr.exe) is not detected by Norton or McAfee
> Anti-virus systems. ...



More information about the TowerTalk mailing list