Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Part of Java stopped working


  • Please log in to reply
15 replies to this topic

#1 AndyP5000

AndyP5000

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:02:04 AM

Posted 13 January 2017 - 12:11 PM

Just had an alert saying part of Java had stopped working. I currently have latest version.

I've never had this before so was wondering how to proceed?

 

Please move if in wrong area of forum.

 



BC AdBot (Login to Remove)

 


#2 RolandJS

RolandJS

  • Members
  • 4,539 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:07:04 PM

Posted 13 January 2017 - 12:23 PM

Have you already tried Oracle's Java section?  There should still be both an offline install [fairly large EXE or ZIP] and/or the online install [that EXE will go to the proper web site and attempt an re-install].


"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)


#3 digmor crusher

digmor crusher

  • Members
  • 85 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:08:04 PM

Posted 13 January 2017 - 12:27 PM

https://heimdalsecurity.com/blog/java-biggest-security-hole-your-computer/

 

 

Why don't you just uninstall it, its really not needed and is a high security risk.   I haven't had Java on my computer for 2 years now and everything still works fine.


Edited by digmor crusher, 13 January 2017 - 12:41 PM.


#4 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,734 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:04 AM

Posted 13 January 2017 - 02:30 PM

Was it an error message like this one:

 

34xj02g.png


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#5 AndyP5000

AndyP5000
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:02:04 AM

Posted 13 January 2017 - 02:36 PM

Yup it was very much like that pop up promt. 



#6 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,734 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:04 AM

Posted 13 January 2017 - 02:45 PM

Then it is a Java program that crashed (a problem with a Java applet in a browser would not manifest itself with such an error message).

 

Any idea what programs you use that are written in Java?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#7 AndyP5000

AndyP5000
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:02:04 AM

Posted 13 January 2017 - 03:36 PM

Not much of a clue what does and does not use Java to be honest.

 

I did have Photoshop and Skype open up at the time it manifested.

No idea if they use Java. As for background programmes I guess I would need to do a scan of some sort to list current installs.



#8 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,734 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:04 AM

Posted 13 January 2017 - 03:45 PM

You can check with Task Manager if any of your processes are java.exe


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#9 AndyP5000

AndyP5000
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:02:04 AM

Posted 13 January 2017 - 04:07 PM

Nope no java.exe

 

 

two related java things that are running...

 

node.exe
juched.exe


#10 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,734 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:04 AM

Posted 13 January 2017 - 04:12 PM

juched.exe is the Java updater. It's normal that this is running when you have Java installed.

 

In what folder is node.exe located?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#11 AndyP5000

AndyP5000
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:02:04 AM

Posted 13 January 2017 - 04:23 PM

Programme Files (x86)\ Adobe\ Adobe Creative Cloud\CCXProcess\libs

 

So part of adobe 



#12 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,734 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:04 AM

Posted 13 January 2017 - 04:34 PM

Can you look in the Windows event log: Application for entries from Source Windows Error Reporting around the time you experienced the error message?

The details of the event will tell you java.exe crashed, and maybe more info.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#13 AndyP5000

AndyP5000
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:02:04 AM

Posted 13 January 2017 - 06:13 PM

Log Name:      Application
Source:        Application Error
Date:          13/01/2017 13:57:18
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Andy-PC
Description:
Faulting application name: node.exe, version: 0.10.40.0, time stamp: 0x559ee7b9
Faulting module name: node.exe, version: 0.10.40.0, time stamp: 0x559ee7b9
Exception code: 0xc0000005
Fault offset: 0x0011c560
Faulting process id: 0x%9
Faulting application start time: 0x%10
Faulting application path: %11
Faulting module path: %12
Report Id: %13
Event Xml:
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2017-01-13T13:57:18.000000000Z" />
    <EventRecordID>2831385</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Andy-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>node.exe</Data>
    <Data>0.10.40.0</Data>
    <Data>559ee7b9</Data>
    <Data>node.exe</Data>
    <Data>0.10.40.0</Data>
    <Data>559ee7b9</Data>
    <Data>c0000005</Data>
    <Data>0011c560</Data>
  </EventData>
</Event>
 
Looks like it was node that messed up. I have no idea what all this info indicates


#14 AndyP5000

AndyP5000
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:02:04 AM

Posted 13 January 2017 - 06:16 PM

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/01/2017 13:58:16
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      Andy-PC
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
 
Problem signature:
P1: node.exe
P2: 0.10.40.0
P3: 559ee7b9
P4: node.exe
P5: 0.10.40.0
P6: 559ee7b9
P7: c0000005
P8: 0011c560
P9: 
P10: 
 
Attached files:
C:\Users\Andy\AppData\Local\Temp\WER767D.tmp.WERInternalMetadata.xml
C:\Users\Andy\AppData\Local\Temp\WER3B43.tmp.hdmp
C:\Users\Andy\AppData\Local\Temp\WER5411.tmp.mdmp
 
These files may be available here:
C:\Users\Andy\AppData\Local\Microsoft\Windows\WER\ReportQueue\AppCrash_node.exe_dc74d926b41ded6fdd6976e9779ed7f29c1ade_cab_2bd15595
 
Analysis symbol: 
Rechecking for solution: 0
Report Id: 31f13e10-d998-11e6-bfcc-00064f96a728
Report Status: 5
Event Xml:
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2017-01-13T13:58:16.000000000Z" />
    <EventRecordID>2831386</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Andy-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>node.exe</Data>
    <Data>0.10.40.0</Data>
    <Data>559ee7b9</Data>
    <Data>node.exe</Data>
    <Data>0.10.40.0</Data>
    <Data>559ee7b9</Data>
    <Data>c0000005</Data>
    <Data>0011c560</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
C:\Users\Andy\AppData\Local\Temp\WER767D.tmp.WERInternalMetadata.xml
C:\Users\Andy\AppData\Local\Temp\WER3B43.tmp.hdmp
C:\Users\Andy\AppData\Local\Temp\WER5411.tmp.mdmp</Data>
    <Data>C:\Users\Andy\AppData\Local\Microsoft\Windows\WER\ReportQueue\AppCrash_node.exe_dc74d926b41ded6fdd6976e9779ed7f29c1ade_cab_2bd15595</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>31f13e10-d998-11e6-bfcc-00064f96a728</Data>
    <Data>5</Data>
  </EventData>
</Event>
 
and that's the event of the pop up report


#15 bwv848

bwv848

    Bleepin' Owl


  • BSOD Kernel Dump Expert
  • 3,029 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:92.96 million miles away from the sun
  • Local time:08:04 PM

Posted 13 January 2017 - 06:28 PM

Can you give us the FULL content of the WER file using AppCrashView:

AppCrashView by NirSoft
 
• Download and save AppCrashView from here.
• Right-click on the downloaded ZIP file, click Extract all, taking note of where the files will be extracted, and then hit Extract.
• Open up the extracted folder, right-click on AppCrashView.exe and select Run as administrator. Please accept any User Account Control prompts.
• Highlight (click) on one of the recent node.exe errors.
• On the bottom, there is a large window with a list of the loaded modules. Please copy ALL the information and paste it into your next reply.


Edited by bwv848, 14 January 2017 - 09:19 AM.

If I do not reply in three days, please message me.
 
BC BSOD Posting Instructions | Carrona BSOD Index | Driver Reference Table (DRT)





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users