Home Malware Programs Spyware Jucheck.exe

Jucheck.exe

Posted: July 15, 2011

In most cases, Jucheck.exe is a component of Java Runtime (a scripting language and platform that's in use by many websites and applications). A legitimate Jucheck.exe file is responsible for monitoring updates for your version of Java. However, some Jucheck.exe files may be Trojans, worms or other malicious applications that are using the Jucheck.exe name to conceal their attacks. Keeping track of the location and other characteristics of a Jucheck.exe file may be able to tell you if the file is real or fake. In the instance of a fake Jucheck.exe infection, appropriate anti-malware software can remove Jucheck.exe and any related components of the infection.

Traits of a Genuine Jucheck.exe File that You Can Trust

One of the easiest ways to discern a real Jucheck.exe from a fake one is to check Jucheck.exe's location. All real Jucheck.exe files are placed in a subdirectory of the Java folder, which is itself found in Program Files folder. A typical Jucheck.exe file path can look like this:

"C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe"

It should be noted that the folder just prior to the bin subfolder, 'jre1.6.0_05,' may vary slightly due to indicating which version of Java is installed. You may also see multiple version folders that all contain their own Jucheck.exe files, especially if you've updated from one version of Java to another one.

The precise size of a Jucheck.exe file can vary, and once again, it depends on which version of Java you have. Average file sizes for Jucheck.exe range from 236 kilobytes to 321 kilobytes; if you see a Jucheck.exe file that's significantly larger or smaller than this range, you should be suspicious. Even if the Jucheck.exe meets all other safety characteristics, Jucheck.exe may be infected by a virus or other malicious program that's capable of attaching its code onto innocent files.

Recent versions of Java also give Jucheck.exe a digital signature that can be used to confirm the file's trustworthy origin. You can view the 'Sun Microsystems, Inc.' signature by right clicking the file, selecting Properties, and then selecting the Digital Signatures tab.

A real Jucheck.exe file will also have a Java-related icon, although the exact icon will depend on which version of Java is installed. Be cautious around any Jucheck.exe files that lack an icon that's specific to the Java brand.

Traits of a Bad Jucheck.exe File You Should Distrust

In addition to any Jucheck.exe files that fail the above qualifications, you may also be tipped off to a bad Jucheck.exe file by noticing the following symptoms:

  • Is your Jucheck.exe file running all the time? You can view active memory processes in the Processes tab of Windows Task Manager, which can be opened with Ctrl+Alt+Del. A real Jucheck.exe will only run when Jucheck.exe's Java-updating services are required. Although Jucheck.exe may be scheduled to update Java periodically (monthly is the most common update pattern), Jucheck.exe shouldn't run all the time or launch itself as soon as Windows starts.
  • Is your Jucheck.exe file hidden in some part of the Windows directory? This is especially worth singling out as a trait that's shared by many different types of malicious programs. Real Jucheck.exe files will remain with the rest of Java's files in the Program Files folder and will never be a part of your Windows folder.

Use quality anti-virus software to delete Jucheck.exe files that you've confirmed to be fake, since removing only the visible files in an infection can cause serious damage to Windows.

Loading...