Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Jucheck.exe, is it legitimate?


  • Please log in to reply
2 replies to this topic

#1 helpjucheck

helpjucheck

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:45 PM

Posted 07 September 2012 - 06:34 PM

Hello,

A few days ago, a pop-up from a Java update (jucheck.exe) began to pop up on my laptop. It now pops up every day. It has never popped up before, so I immediately did a Google search and ran MalwayreBytes. MB did not find anything. People are divided on jucheck - some say it's a virus and some say it's a legitimate Java update. This says, "Added by the W32.Scrimge.O worm. W32.Scrimge.O is a worm that spreads through Microsoft instant messaging clients and opens a back door on the compromised computer."

On my laptop, jucheck.exe is located in C:\Program Files (x86)\Common Files\Java\Java Update... it says it was last modified January 17, 2012, yet I have never seen it until two days ago. Nothing happens when I press "no" when it asks to modify my computer.

What should I do? Should I delete it? Why wouldn't MB find it? Do I follow the instructions on this page?

Edited by helpjucheck, 07 September 2012 - 06:35 PM.


BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:45 PM

Posted 07 September 2012 - 06:37 PM

"Added by the W32.Scrimge.O worm. W32.Scrimge.O is a worm that spreads through Microsoft instant messaging clients and opens a back door on the compromised computer."


Check the location of the file given in the link

C:\Program Files (x86)\Common Files\Java\Java Update


This file is legitimate.You can upload it to

https://www.virustotal.com/

and verify

#3 SleepyDude

SleepyDude

  • Malware Response Team
  • 3,083 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:07:45 PM

Posted 07 September 2012 - 06:41 PM

Hi,

Let the program run its the tool responsible for looking for new java updates.
You should Update your java to the last version ASAP because old versions of java have security flaws currently being actively exploited on the net.

• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users