To exclude we could consider:
http://www.runscanner.net/lib/ncafes.exe.html
&
http://www.shouldiblockit.com/ncafes.exe-676fa4c55673ff2809792c52d31365f6.aspx
&
http://systemexplorer.net/fr/file-database/file/ncafes-exe/1091699

polonus