jcgkwchb.exe is attempting internet access

[Guest]

Does anyone know what the program c:\winnt\system32\jcgkwchb.exe is? I've
searched everywhere, google, microsoft, mcafee, etc. and can't find any
reference to it. I'm running a firewall that keeps warning me it's attempting
to access the internet. It may be a benign progam, but I can't find info on
it anywhere...

Jon

 

[Carey Frisch [MVP]]

Download Ad-aware SE and scan your PC for the presence of spyware:
http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/?id=827315

Dealing with Unwanted Spyware and Parasites
http://www.mvps.org/winhelp2002/unwanted.htm

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

--------------------------------------------------------------------------------------

:

| Does anyone know what the program c:\winnt\system32\jcgkwchb.exe is? I've
| searched everywhere, google, microsoft, mcafee, etc. and can't find any
| reference to it. I'm running a firewall that keeps warning me it's attempting
| to access the internet. It may be a benign progam, but I can't find info on
| it anywhere...
|
| Jon

 

[Guest]

Hi Carey,

I've done all that... HiJack, Adware, Spybot... none of them identify it as
anything out of the ordinary. That's why I was asking if anyone knew what the
program is. Is there somewhere that lists all files that make up part of a
Windows XP install? If I could find a list of the files and it's not in the
list, I could just boot in safe mode and rename the file without having to
worry about breaking a component of XP. If it's part of a 3rd party package
I've installed that stops working, I could just rename it back.

Jon

 

[Ron Sommer]

Do the file properties show anything?
Check the Registry to see how it is loading.

 

[Malke]

Hi Carey,

I've done all that... HiJack, Adware, Spybot... none of them identify
it as anything out of the ordinary. That's why I was asking if anyone
knew what the program is. Is there somewhere that lists all files that
make up part of a Windows XP install? If I could find a list of the
files and it's not in the list, I could just boot in safe mode and
rename the file without having to worry about breaking a component of
XP. If it's part of a 3rd party package I've installed that stops
working, I could just rename it back.

The way to find out what a file is is to Google for the name of that
file. If I Google "jcgkwchb.exe" I get no hits at all, which is
suspicious. If it were a legitimate Windows file, I can assure you that
you would get something. That filename is a classic malware name. If
you are uncomfortable removing it, make a System Restore point and then
rename the file or move it into the Recycle Bin temporarily.

Malke

 

[Alias]

Hmmm... after killing the process, renaming the file and rebooting, it took
an exceptionally long time to load items in my System Tray. Eventually I got
the error:

NT On-Access Scanning Service.

NT On-Access Scanning Service. has encountered a problem
and needs to close. We are sorry for the inconvenience.

Anyone know what the NT On-Access Scanning Service is?

or... anyone else have jcgkwchb.exe in the system32 directory?

Jon

Not on my XP Pro.

Alias

 

[Malke]

Hmmm... after killing the process, renaming the file and rebooting, it
took an exceptionally long time to load items in my System Tray.
Eventually I got the error:

NT On-Access Scanning Service.

NT On-Access Scanning Service. has encountered a problem
and needs to close. We are sorry for the inconvenience.

Anyone know what the NT On-Access Scanning Service is?

I believe this is connected with McAfee AV and information can be found
at their website.

Malke