> Avast detected "c:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe".
> This is also a legitimate file, but googling shows a worm also
> masquerades with that name. How can one tell whether it is the
> legitimate one or worm?

> IIRC, that is an older, vulnerable version of Sun's JRE, Andy.
> *Strongly* suggest that you uninstall ALL older, vulnerable Versions
> from Add/Remove Programs in the Control Panel. If you want the
> latest so-called secure Version, click the Download button next to
> Java Runtime Environment (JRE) 6 Update 6 on this
> page:http://java.sun.com/javase/downloads/index.jsp
>
> Me, I don't trust Sun and none of their runtimes are installed here
> nor on any of my other systems.

> From: "AndyHancock" gmail.com>
>
> | Avast detected "c:\Program
> Files\Java\jre1.6.0_01\bin\jucheck.exe". | This is also a
> legitimate file, but googling shows a worm also | masquerades with
> that name. How can one tell whether it is the | legitimate one or
> worm?
>
> You can usually tell from where it is executed from as long as the
> file was not replaced or Trojanized.
>
> f you are using any version of Sun Java that is prior to JRE Version
> 6.0, then you are strongly urged to remove any/all versions. There
> are numerous vulnerabilities in them and they are actively being
> exploited.
>
> It is highly suggested that you update to the latest version which
> is Sun Java JRE/JSE Version 6.0 update 6 (jre 6u5)
>
> Simple check, look under... C:\Program Files\Java
>
> The only folder under that folder should be the latest version.
>
> Such as... C:\Program Files\Java\jre1.6.0_06
>
> http://java.sun.com/javase/downloads/index.jsphttp://www.java.com/en/download/manual...
>
> FYI:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1http://sunsolve...

> I found this thread at "http://forum.avast.com/index.php?
> topic=36183.0". I guess I'll migrate there for this thread, though
> one needs an account on that forum to participate.