Resources

My brand new computer’s Norton trial version keeps telling me to install new Java at least once a day and also to install “jucheck.exe” unsigned. What does this mean?

The Real Jucheck.exe

Jucheck.exe is both a legitimate file as well as an imposter. The real jucheck.exe file is part of the Java virtual machine. It is used to automatically check for Java updates. For example, if you go into the Java Control Panel and click Update, there’s a checkbox labeled “Check for updates automatically.” When this is marked, jucheck.exe is set to run in the background. Its job is to check for Java updates and then notify you when updates are found.

The Fake Jucheck.exe

Like many legitimate programs and processes, there have been reports of malware masquerading as jucheck.exe. Sporting the same name, the imposter hopes to trick users into leaving the file alone to do its damage. Since your computer is just a few days old, it’s unlikely that your computer has a malware infection.

Installing Java

Since Norton keeps prompting you to install Java and jucheck.exe, it may be detecting a problem with the installed version of Java on your computer. If you go to Java.com, you can check to see if your version of Java is the correct version for your computer. If not, you will be prompted to download and install a newer version. While you can install a new version over your existing version of Java, if you keep getting the Norton error message, you may have better luck by first uninstalling the old version from your computer and then installing the new version.

To uninstall Java, go to Start and type “Add or remove programs” into the Search bar. Click the Add or Remove Programs link and then find Java in the list. Click it and then click Uninstall. Follow the prompts to remove it from your system.

It seems odd that Norton is prompting you to download the jucheck.exe file. If you right-click (right-click, not left) the link, you may be able to see the address that the link is pointing to or bring up a menu where you can copy the shortcut and then paste it into a document. If the link points to a legitimate Sun Microsystems website, then it’s probably safe to download and install. However, if the fresh install of Java was successful, this step will hopefully not be needed.   

How would you rate SuperAntiSpware? I would appreciate an early answer.

What is Super AntiSpyware?

Though I haven’t personally tried Super AntiSpyware, I did a little research. Having not heard of this particular product before, I was initially suspicious. Is this one of those fake spyware programs? I wondered. After all, here at Filetonic, we hear of so many rogue programs pretending to be antivirus or antispyware programs when really they’re imposters.

The company behind Super Antispyware is led by Nick Skrepetos who is also the brains behind SuperAdBlocker.com. The company offers Super AntiSpyware as a free edition for personal use, as a professional version (with a free trial version so that you can try before you buy), a portable edition, and an enterprise edition.

Super AntiSpyware Reviews

From what I’ve read, Super Antispyware has received favorable reviews. For example, PC Magazine gave Super AntiSpyware a “Good” rating back in 2008. It is also recommended by SpywareWarrior.com, a well-respected site that maintains a list of rogue antivirus and antispyware programs.

The Super AntiSpyware product has been downloaded nearly 140,000 times on CNET Downloads and has received a four out of five stars rating from users.

Recommendation

The Super AntiSpyware program appears to be a decent antispyware program and not a rogue program. However, you may want to compare its editions as the free edition doesn’t offer the same level of protection as the paid edition. For example, the paid edition ($29.95) offers real-time blocking, automatic updates, and scheduling (all crucial features) while the free edition does not. Consider using the free edition as a backup antispyware tool or for removing existing spyware but not as a primary defense. After all, if the software isn’t automatically updated with the latest definitions and doesn’t provide real-time blocking, spyware can still sneak onto your system and cause harm.

My McAfee 8.5i found a Trojan in a file named rhhlty.dll but the McAfee was not successful in cleaning or deleting the file. I have tried deleting and/or renaming the file unsuccessfully using the command prompt. An “Access denied” message was displayed in answer to my attempts. Is there a way to delete the problem file?

Deleting the Undeletable

Luckily, yes. There are ways to get around that clever malware that attempts to hold on to infected files by denying you access and telling you that the file is in use or otherwise unavailable. The exact process varies a bit according to Windows operating system release, but here are the general directions for a manual removal.

Manual Removal of Undeletable Files

Step A:

1.  Click the Start button, choose Search, then All Files and Folders

2.  Type the name of the file that you want to delete into the Search box

3.  Double check that the “Look in” box displays the right drive - most likely C/ hard drive

4.  Click the Search button and wait for the system to find the file

5.  When the file displays, use your mouse to right click it

6.  This will prompt the drop down menu, choose Properties

7.  Now, write down the file’s location eg: c:\windows\system32\fileyouwanttodelete.exe

8.  Next, click to close the search box

Step B:

1.  Click the Start button, choose Run

2.  Type CMD into the bar and then press Enter

3.  This will open a Command Prompt

4.  Keep the Command Prompt box open, but click to close all other open windows and programs

Step C:

1.  Click Start, then Run

2.  Type TASKMGR.EXE and click Enter

3.  This will launch the Task Manager

4.  Choose the Processes tab, then click the process called Explorer.exe

5.  Choose End Process

6.  Without closing Task Manager, minimize it so you can go to the Command Prompt box

7.  Using the Command Prompt, change the file’s directory using the CD command - type in cd\windows\system32 and click Enter

8.  Now, type in DEL fileyouwanttodelete.exe

9.  Pull up the minimized Task Manager window and click File, then New Task, then EXPLORER.EXE to re-start the Windows shell

That should do it. Now, close all the open windows, then restart your computer and hope for the best! Good luck!

My PC goes to pages I don’t ask it to and searches don’t work. I think I have an issue with ActiveX controls or add-ons. I have windows XP and IE7 or 8 for Yahoo. My automatic updates don’t seem to work.

Browser Hijacking

It sounds as though your browser may have been hijacked. What you’ve just described are classic signs of a browser hijacking. Below are a few of the common symptoms listed by Microsoft:

• You browser’s home page has been changed
• Links and bookmarks are added pointing to unknown websites
• New toolbars sudden appear on your browser
• Antivirus and antispyware sites are blocked
• Popup ads appear, often unrelentingly
• Your computer runs sluggishly

Recovering from a Browser Hijacking

You mentioned that you think the ActiveX controls or add-ons may be part of the problem. Yes, they could be. In Internet Explorer, you can manage ActiveX and add-ons by going to Tools > Manage Add-ons. From there, you can disable them and see if that has solved the problem. However, you may need to use an antivirus or antispyware tool in conjunction with this. If disabling the add-ons doesn’t solve the problem, download Microsoft’s Malicious Software Removal Tool and run it. We also recommend ParetoLogic’s Antivirus Plus software if you don’t already have a reputable antivirus/antispyware solution installed on your computer.

Using Add and Remove Programs

In addition to malware, some programs and toolbars can cause problems with browsers especially if they are poorly coded or buggy. They may not be considered malicious and might not be detected by computer security tools. In this case, use the Add and Remove Program utility in your computer’s Control Panel to uninstall any recently installed programs that you think may be causing the problem, especially if the program adds functions to your Web browser.

Using System Restore

Another option is to use the System Restore utility. If the problem just started, restoring your system to an earlier point in time may be the fastest way to solve it. Of course, your computer will need to have been previously set up to create periodic restore points. Go to Start> Programs > Accessories > System Tools > System Restore and check to see if any restore points are available representing a time before the problem began. Don’t go too far back as this will remove recently installed updates and software. If you find a viable restore point, go ahead and restore your system. This will not remove your data files.

Update Windows

Since your automatic updates aren’t working, go ahead and update the operating system manually. Go to the Control Panel and click on Windows Update and follow the prompts. While you’re there, check the automatic update settings and reset as needed.

I received an email with a mime file extension. Before my computer crashed, I had a free version of WinZip (which is now $30!). I rarely receive or use zipped files. I just want to open pictures of my niece’s graduation. My old PC just got one of the latest viruses, so I’m a bit gun-shy to download this program. I don’t know how to “scan it” for viruses. My new computer is running AVG, instead of the old Norton. Am I okay to download this?

Free Unzip Utilities

First, you will need an unzip utility. Most of the major unzip utilities such as WinZip, WinRar, and Stuffit offer free trial versions. Go to CNET Downloads or some other trusted site and download a free trial version of one of these products.

Downloading and Scanning Programs

Depending on your antivirus program’s settings, your software may already scan the file as it is being downloaded. You can run a manual scan as well. Go to Windows Explorer (right click Start, choose Explore) and then right-click the downloaded file. Once right-clicked, a menu pops up. Choose the option that says, “Scan for viruses” or “Scan for threats.”

Scanning Zipped Files

Next, you may need to go into your antivirus program to specify how to work with zipped files. For example, in Trend Micro’s Advanced Settings area, there’s a section covering whether or not to scan compressed files such as zip files as well as how many compression levels deep to scan. AVG may or may not have a similar option, but it doesn’t hurt to check.

If you’ve already saved the zipped file to your hard drive, you can scan it manually by going to Windows Explorer as you did with the downloaded program file and then right-clicking the file. Once right-clicked, choose the option that says, “Scan for viruses” or “Scan for threats.”

If the file comes up clean, you can then unzip the file using your downloaded unzip utility. One way to unzip it is to right-click the file and choose “Extract all” (or similar wording depending on your version of Windows and the unzip utility) from the pop-up menu. You can also double-click the file and your new unzip utility should automatically launch and extract the files.

When I start my computer (Pentium-4 with Windows XP), pop up windows show these two messages: 1.HHCTRL.OCX was not found. 2. Windows cannot find SSCVIHOST.EXE.

In all likelihood, it sounds as though your computer is infected with malware. Typically, malware finds its way onto a computer when the computer user clicks on links that contain the malware, visits websites that install malware onto the computer without the user’s knowledge, clicks on attachments received through email communication, or clicks on links within an instant messaging system.

Why am I getting the SSCVIHOST Error?

It’s probable that you have a virus on your computer, so you do not want to start the application up. Instead, you want to get rid of it. This particular problem is caused by a devious worm. The error message resembles a legitimate error message (SVCHOST.EXE) that occurs following some Windows updates.

Getting Rid of the SSCVIHOST Error: Scan for Malware

If you currently have a reliable antivirus/anti-spyware application on your computer, update it before using it to remove the computer worm. In this case, I suggest rebooting and scanning for the problem a second time to make sure that it is corrected and that the complete removal of the malware has occurred. If you do not currently have a trustworthy antivirus/anti-spyware application installed, I can recommend the following program: AntiVirus PLUS.

Why am I getting the HHCTRL Error?

In all likelihood, the error message, “HHCTRL.OCX was not found” is being received because the file has been corrupted by the computer worm that has infected your computer. This particular file is an ActiveX file that is used by Internet Explorer. It is also vulnerable to virus infections since these applications can use the file to gain access to your computer.

Once you have removed the virus, you can restore the HHCTRL.OCX file and do away with this start up error. After you have used your antivirus program to remove the SSCVIHOST.EXE worm, you should use a reliable registry cleaner such as RegCure to restore the HHCTRL.OCX file.

One of the strategies that you can use to protect this file from becoming corrupted by viruses is to update your operating system and your version of Internet Explorer on a regular basis.