Technology in terms you understand. Sign up for the Confident Computing newsletter for weekly solutions to make your life easier. Click here and get The Ask Leo! Guide to Staying Safe on the Internet — FREE Edition as my thank you for subscribing!

(random-characters).exe

What is (random-characters).exe?

I frequently get questions asking “what is qwijbo.exe”, where “qwijibo” is
what can best be described as a random assortment of characters. Examples
include wfwvkdyl.exe, tjuazuyt.exe, and others. They key is that the name
appears completely nonsensical.

What are they? Hard to say. But my initial guess doesn’t bode well.

Become a Patron of Ask Leo! and go ad-free!

My belief is that these are manifestations of viruses (or maybe
spyware). Several viruses are known to generate random names for the files they
leave behind on infected machines.

My advice as always is to get a good virus scanner, keep the virus database
up to date, and scan regularly. Same story for spyware.

Do this

Subscribe to Confident Computing! Less frustration and more confidence, solutions, answers, and tips in your inbox every week.

I'll see you there!

7 comments on “(random-characters).exe”

  1. I may have had the same thing. Ad-aware found a process called VX2 and could kill it, but not remove files. I would have random looking process names in Task Manager, and if I killed them, they reappeared instantly. Names were like Rsv7.exe, ntlkpapi.exe, Wsf8tb.exe. I’d kill one, it would come back with the same or one of the alternate names. About 4 kb. Msconfig showed one item in startup called ntlkpapi with a start location in Win32 folder, but the supposed start location didn’t exist. I think the file that actually ran was in a folder called %prog dir%\SEP\

    Reply
  2. We have 2 Win98 PCs with is same problem. They both have up-to-date AV software and weve been running Spybot & Ad-aware. Something is starting this random exe.I Hope someone out ther knows what this is. I searched the c: for *.exe and every few min. there are new hidden exes with dates from today. I’m stumped.

    Reply
  3. i noticed the same thing on mine, the only difference:

    it keeps creating folders with random names in C:\Programs\Shared Files\
    or
    C:\Programme\Gemeinsame Dateien\

    inside those folders .exe are created also with random names + 1 file with weird extensions, for example .ndl , .el etc

    if you try and delete them and the system refuses it means that there are running processes supporting them, which you have to stop first.
    Havent found the real source yet and it buggs me 🙁

    Reply
  4. I’ve found RI943D.exe on my server in C:\WINDOWS\Temp, ended the process and it literally vanished, then on my computer found NN5675.exe in the same location. Same action, same result. Vanished from the computer. Nothing has come back on either computer, but we have 14 more in a domain group. I’ll have to check them all i suppose.

    Reply
  5. This is the same thing I got. Win XP with the updates.

    Random string characters.exe

    IF I terminate they start again.
    I tried to CC Cleaner to stop them at startup
    HOwever, they renamed themselves to something else.
    Anyone got a solution? I’d appreciate it!!

    Reply

Leave a reply:

Before commenting please:

  • Read the article.
  • Comment on the article.
  • No personal information.
  • No spam.

Comments violating those rules will be removed. Comments that don't add value will be removed, including off-topic or content-free comments, or comments that look even a little bit like spam. All comments containing links and certain keywords will be moderated before publication.

I want comments to be valuable for everyone, including those who come later and take the time to read.