To exclude we could consider: http://www.runscanner.net/lib/ncafes.exe.html & http://www.shouldiblockit.com/ncafes.exe-676fa4c55673ff2809792c52d31365f6.aspx & http://systemexplorer.net/fr/file-database/file/ncafes-exe/1091699
polonus