Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

MsMpEng.exe, jucheck.exe


  • Please log in to reply
2 replies to this topic

#1 DnDer

DnDer

  • Members
  • 646 posts
  • OFFLINE
  •  
  • Local time:11:47 PM

Posted 28 October 2008 - 12:35 PM

These programs show up in task manager, and seem to alternate between each other for eating up all the processor power, as well as all the RAM.

MsMpEng has to do with OneCare, which is somehow tied to Windows Defender. I'm not sure how, and haven't been able to figure it out. However, I know that OneCare is not installed on this computer. Something needs to be changed or removed on this.

jucheck is a file that I get conflicting reports on. It's either a java updater, or it's some kind of trojan horse virus. I haven't come across enough of a consensus in my research to determine either way. I'm unwilling to remove it until I'm more sure of what the issue could be.

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,287 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:47 AM

Posted 28 October 2008 - 01:17 PM

Anytime you come across a suspicious file for which you cannot find any information about, the file has a legitimate name but is not located where it is supposed to be, or you want a second opinion, submit it to jotti's virusscan or virustotal.com. In the "File to upload & scan" box, browse to the location of the suspicious file and submit (upload) it for scanning/analysis.
-- Post back with the results of the file analysis.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 DnDer

DnDer
  • Topic Starter

  • Members
  • 646 posts
  • OFFLINE
  •  
  • Local time:11:47 PM

Posted 28 October 2008 - 02:40 PM

MsMpEng.exe -- 0/36

jucheck.exe -- 1/36
There were 5 versions reported, in old Java folders. There was also one, when I used the search function in a location called "bin" for its pathname. How do I get to that, so I can send it to virustotal?

c:\program files\java\ver1.6.0_01\bin\jucheck.exe || Norman || w32/Smalltroj.FSMP

adproxy.exe -- n/a
Despite being a running process, this exe file seems to have no pathname, let alone an existence on the HD. I couldn't send it to virustotal.

services.exe -- 0/36

When I came back from lunch, I found others eating up a good quarter of my processing power. I put it through virustotal, like the other two. However, I'm having problems getting jotti to come up. I'll try to reconnect to that later.

If they're not virii (with the one exception) what causes them to eat up so much processing power constantly, and at such a high percentage of it?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users