jucheck.exe
  Home FAQ Contact Sign in
microsoft.public.security only
 
Advanced search
POPULAR GROUPS

more...

microsoft.public.security Profile…
 Up
jucheck.exe         


Author: AndyHancock
Date: Jun 8, 2008 17:23

Avast detected "c:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe".
This is also a legitimate file, but googling shows a worm also
masquerades with that name. How can one tell whether it is the
legitimate one or worm?
4 Comments
Re: jucheck.exe         


Author: AndyHancock
Date: Jun 8, 2008 17:43

On Jun 8, 8:23 pm, AndyHancock gmail.com> wrote:
> Avast detected "c:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe".
> This is also a legitimate file, but googling shows a worm also
> masquerades with that name. How can one tell whether it is the
> legitimate one or worm?

I found this thread at "http://forum.avast.com/index.php?
topic=36183.0". I guess I'll migrate there for this thread, though
one needs an account on that forum to participate.
no comments
Re: jucheck.exe         


Author: MowGreen [MVP]
Date: Jun 9, 2008 13:17

IIRC, that is an older, vulnerable version of Sun's JRE, Andy.
*Strongly* suggest that you uninstall ALL older, vulnerable Versions
from Add/Remove Programs in the Control Panel.
If you want the latest so-called secure Version, click the Download
button next to Java Runtime Environment (JRE) 6 Update 6 on this page:
http://java.sun.com/javase/downloads/index.jsp

Me, I don't trust Sun and none of their runtimes are installed here nor
on any of my other systems.

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============

AndyHancock wrote:
> Avast detected "c:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe".
> This is also a legitimate file, but googling shows a worm also
> masquerades with that name. How can one tell whether it is the
> legitimate one or worm?
no comments
Re: jucheck.exe         


Date: Jun 9, 2008 13:24

From: "AndyHancock" gmail.com>

| Avast detected "c:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe".
| This is also a legitimate file, but googling shows a worm also
| masquerades with that name. How can one tell whether it is the
| legitimate one or worm?

You can usually tell from where it is executed from as long as the file was not replaced or
Trojanized.

f you are using any version of Sun Java that is prior to JRE Version 6.0,
then you are strongly urged to remove any/all versions.
There are numerous vulnerabilities in them and they are actively being exploited.

It is highly suggested that you update to the latest version which is Sun Java JRE/JSE
Version 6.0 update 6 (jre 6u5)

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version.

Such as...
C:\Program Files\Java\jre1.6.0_06

http://java.sun.com/javase/downloads/index.jsp
http://www.java.com/en/download/manual.jsp
Show full article (1.49Kb)
no comments
Re: jucheck.exe         


Author: AndyHancock
Date: Jun 12, 2008 18:11

On Jun 8, 8:23 pm, AndyHancock gmail.com> wrote:
> Avast detected "c:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe".
> This is also a legitimate file, but googling shows a worm also
> masquerades with that name. How can one tell whether it is the
> legitimate one or worm?

On Jun 9, 4:17 pm, "MowGreen [MVP]" nowandzen.com> wrote:
> IIRC, that is an older, vulnerable version of Sun's JRE, Andy.
> *Strongly* suggest that you uninstall ALL older, vulnerable Versions
> from Add/Remove Programs in the Control Panel. If you want the
> latest so-called secure Version, click the Download button next to
> Java Runtime Environment (JRE) 6 Update 6 on this
> page:http://java.sun.com/javase/downloads/index.jsp
>
> Me, I don't trust Sun and none of their runtimes are installed here
> nor on any of my other systems.

On Jun 9, 4:24 pm, "David H. Lipman" Verizon.Net>
wrote:
> From: "AndyHancock" gmail.com>
>
> | Avast detected "c:\Program
> Files\Java\jre1.6.0_01\bin\jucheck.exe". | This...
Show full article (2.74Kb)
no comments