Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Application Error: bjchxxohlzub.exe or other random string of letters


  • Please log in to reply
5 replies to this topic

#1 undercome

undercome

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:02 PM

Posted 01 July 2013 - 04:22 AM

I'm on a HP windows 8 desktop and (since, well, as long as I can remember) I intermittently get an application error that requires me to click OK. It interrupts any full-screen app I have running and just is a general nuisance. As far as I can tell it doesn't affect the performance of my computer but it's really starting to get on my nerves. After downloading a process monitor (since I couldn't find the program in search and it changes every startup) I at least tracked down a Windows Error Reporting log for it. Any ideas what it's from/what I can do to stop it? I don't understand anything in the log:

 

Version=1
EventType=APPCRASH
EventTime=130171423376898306
ReportType=2
Consent=1
UploadTime=130171423378090437
ReportIdentifier=87ebd262-e22b-11e2-bea3-4c72b99d9af7
IntegratorReportIdentifier=87ebd261-e22b-11e2-bea3-4c72b99d9af7
WOW64=1
NsAppName=bjchxxohlzub.exe
Response.BucketId=ab9486504fcf197496488324956c4e2a
Response.BucketTable=1
Response.LegacyBucketId=-612163781
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=bjchxxohlzub.exe
Sig[1].Name=Application Version
Sig[1].Value=0.0.0.0
Sig[2].Name=Application Timestamp
Sig[2].Value=5124ca24
Sig[3].Name=Fault Module Name
Sig[3].Value=amdocl.dll
Sig[4].Name=Fault Module Version
Sig[4].Value=10.0.1124.2
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=5154f82a
Sig[6].Name=Exception Code
Sig[6].Value=c0000005
Sig[7].Name=Exception Offset
Sig[7].Value=004eada0
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.2.9200.2.0.0.768.101
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
DynamicSig[22].Name=Additional Information 1
DynamicSig[22].Value=5861
DynamicSig[23].Name=Additional Information 2
DynamicSig[23].Value=5861822e1919d7c014bbb064c64908b2
DynamicSig[24].Name=Additional Information 3
DynamicSig[24].Value=f3d5
DynamicSig[25].Name=Additional Information 4
DynamicSig[25].Value=f3d5be0cad2787556264647dc02181c3
UI[2]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\bjchxxohlzub.exe
UI[3]=bjchxxohlzub.exe has stopped working
UI[4]=Windows can check online for a solution to the problem.
UI[5]=Check online for a solution and close the program
UI[6]=Check online for a solution later and close the program
UI[7]=Close the program
LoadedModule[0]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\bjchxxohlzub.exe
LoadedModule[1]=C:\windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\windows\SYSTEM32\KERNEL32.DLL
LoadedModule[3]=C:\windows\SYSTEM32\KERNELBASE.dll
LoadedModule[4]=C:\windows\system32\apphelp.dll
LoadedModule[5]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\libcurl.dll
LoadedModule[6]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\libjansson-4.dll
LoadedModule[7]=C:\windows\SYSTEM32\msvcrt.dll
LoadedModule[8]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\libpdcurses.dll
LoadedModule[9]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\pthreadGC2.dll
LoadedModule[10]=C:\windows\SYSTEM32\WS2_32.dll
LoadedModule[11]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\libblkmaker-0.1-0.dll
LoadedModule[12]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\libblkmaker_jansson-0.1-0.dll
LoadedModule[13]=C:\windows\SYSTEM32\WINMM.DLL
LoadedModule[14]=C:\windows\SYSTEM32\wldap32.dll
LoadedModule[15]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\libidn-11.dll
LoadedModule[16]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\LIBEAY32.dll
LoadedModule[17]=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\SSLEAY32.dll
LoadedModule[18]=C:\windows\SYSTEM32\ADVAPI32.DLL
LoadedModule[19]=C:\windows\SYSTEM32\USER32.dll
LoadedModule[20]=C:\windows\SYSTEM32\WSOCK32.DLL
LoadedModule[21]=C:\windows\SYSTEM32\RPCRT4.dll
LoadedModule[22]=C:\windows\SYSTEM32\NSI.dll
LoadedModule[23]=C:\windows\SYSTEM32\WINMMBASE.dll
LoadedModule[24]=C:\windows\SYSTEM32\GDI32.dll
LoadedModule[25]=C:\windows\SYSTEM32\sechost.dll
LoadedModule[26]=C:\windows\SYSTEM32\SspiCli.dll
LoadedModule[27]=C:\windows\SYSTEM32\CRYPTBASE.dll
LoadedModule[28]=C:\windows\SYSTEM32\bcryptPrimitives.dll
LoadedModule[29]=C:\windows\system32\IMM32.DLL
LoadedModule[30]=C:\windows\SYSTEM32\MSCTF.dll
LoadedModule[31]=C:\windows\SYSTEM32\secur32.dll
LoadedModule[32]=C:\windows\system32\mswsock.dll
LoadedModule[33]=C:\windows\SYSTEM32\OpenCL.dll
LoadedModule[34]=C:\windows\SYSTEM32\amdocl.dll
LoadedModule[35]=C:\windows\SYSTEM32\OPENGL32.dll
LoadedModule[36]=C:\windows\SYSTEM32\SETUPAPI.dll
LoadedModule[37]=C:\windows\SYSTEM32\dbghelp.dll
LoadedModule[38]=C:\windows\SYSTEM32\GLU32.dll
LoadedModule[39]=C:\windows\SYSTEM32\DDRAW.dll
LoadedModule[40]=C:\windows\SYSTEM32\CFGMGR32.dll
LoadedModule[41]=C:\windows\SYSTEM32\DEVOBJ.dll
LoadedModule[42]=C:\windows\SYSTEM32\DCIMAN32.dll
LoadedModule[43]=C:\windows\SYSTEM32\dwmapi.dll
LoadedModule[44]=C:\windows\SYSTEM32\atigktxx.dll
LoadedModule[45]=C:\windows\SYSTEM32\VERSION.dll
LoadedModule[46]=C:\windows\SYSTEM32\WINTRUST.dll
LoadedModule[47]=C:\windows\SYSTEM32\CRYPT32.dll
LoadedModule[48]=C:\windows\SYSTEM32\MSASN1.dll
LoadedModule[49]=C:\windows\SYSTEM32\atiumdva.dll
LoadedModule[50]=C:\windows\SYSTEM32\atiadlxy.dll
LoadedModule[51]=C:\windows\SYSTEM32\SHELL32.dll
LoadedModule[52]=C:\windows\SYSTEM32\ole32.dll
LoadedModule[53]=C:\windows\SYSTEM32\PROPSYS.dll
LoadedModule[54]=C:\windows\SYSTEM32\USERENV.dll
LoadedModule[55]=C:\windows\SYSTEM32\WTSAPI32.dll
LoadedModule[56]=C:\windows\SYSTEM32\PSAPI.DLL
LoadedModule[57]=C:\windows\SYSTEM32\IPHLPAPI.DLL
LoadedModule[58]=C:\windows\SYSTEM32\combase.dll
LoadedModule[59]=C:\windows\SYSTEM32\SHLWAPI.dll
LoadedModule[60]=C:\windows\SYSTEM32\OLEAUT32.dll
LoadedModule[61]=C:\windows\SYSTEM32\profapi.dll
LoadedModule[62]=C:\windows\SYSTEM32\WINNSI.DLL
LoadedModule[63]=C:\windows\system32\napinsp.dll
LoadedModule[64]=C:\windows\system32\pnrpnsp.dll
LoadedModule[65]=C:\windows\system32\NLAapi.dll
LoadedModule[66]=C:\windows\SYSTEM32\DNSAPI.dll
LoadedModule[67]=C:\windows\System32\winrnr.dll
LoadedModule[68]=C:\Program Files (x86)\Bonjour\mdnsNSP.dll
LoadedModule[69]=C:\windows\System32\fwpuclnt.dll
LoadedModule[70]=C:\Windows\System32\rasadhlp.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
FriendlyEventName=Stopped working
ConsentKey=APPCRASH
AppName=bjchxxohlzub.exe
AppPath=C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\bjchxxohlzub.exe
NsPartner=windows
NsGroup=windows8
 

 

 



BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,503 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:02 PM

Posted 01 July 2013 - 01:23 PM

Definitely a strange file name. Could be malware. Does the file exist if you browse to it in explorer?

C:\Users\Scott\AppData\Local\Temp\uxduhxlcrizvcj\bjchxxohlzub.exe

#3 undercome

undercome
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:02 PM

Posted 01 July 2013 - 07:41 PM

No, not even the directory exists. And as I said, every time I restart the string of letters in the directory/filename change to other random letters. I have MSE installed, but that's my only antivirus, you think a malware program would help?

 

Thanks for the reply.



#4 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,503 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:02 PM

Posted 01 July 2013 - 08:12 PM

I suggest you follow the steps here and open a virus removal assistance topic:

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

#5 undercome

undercome
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:02 PM

Posted 01 July 2013 - 09:50 PM

Will do, thanks. I didn't think it was a virus.



#6 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,503 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:02 PM

Posted 02 July 2013 - 07:28 AM

It may not be, but random folders and names are always suspicious.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users