IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> AU.EXE, is this dangerous.
lasercats
post 8.03.2010 13:15
Post #1


Newbie
*

Group: Members
Posts: 9
Joined: 18.02.2010




AU.EXE was under low restricted in my application control as a firefox helper, it has been like that for a few days. I googled it and some sights say it can be dangerous. I have scanned using KIS several times and everything thing seems ok. Is this a baddie, if so what is it? and should I just put it under untrusted applications or do I need to do more.
Go to the top of the page
 
+Quote Post
King Grub
post 8.03.2010 13:45
Post #2


Kaspersky Fan I
********

Group: Members
Posts: 1585
Joined: 4.04.2006
From: Sweden




Right-click on it in application activity and select "Rules for application". One line reads "Path:". Check what is after that. If it is Ace Utilities, it's safe.
Go to the top of the page
 
+Quote Post
lasercats
post 8.03.2010 13:50
Post #3


Newbie
*

Group: Members
Posts: 9
Joined: 18.02.2010




QUOTE(King Grub @ 8.03.2010 12:45) *
Right-click on it in application activity and select "Rules for application". One line reads "Path:". Check what is after that. If it is Ace Utilities, it's safe.

It's path was c:\documents and settings\hp_administrator\local settings\temp\~nsu.tmp\au_.exe...what does that mean?

This post has been edited by lasercats: 8.03.2010 14:10
Go to the top of the page
 
+Quote Post
King Grub
post 8.03.2010 14:15
Post #4


Kaspersky Fan I
********

Group: Members
Posts: 1585
Joined: 4.04.2006
From: Sweden




Okay, big difference here: au.exe is NOT the same thing as au_.exe. Please check your spelling to avoid misunderstandings.

That au_.exe is used by some uninstallers, Nullsoft Install System in your case. This one creates a temporary folder (nsu.tmp) when you uninstall something with this uninstaller. It is safe.
Go to the top of the page
 
+Quote Post
shukla10
post 8.03.2010 14:15
Post #5


Advanced Member IV
******

Group: Gold beta testers
Posts: 791
Joined: 16.10.2009
From: India




its safe......
its the left over of uninstaller of some programs....

And u can clear it out by cleaning ur temp files by using system cleanup utilities......

This post has been edited by shukla10: 8.03.2010 14:16


--------------------
Prateek Shukla (AKA shukla44)

My Kaspersky Account : Send A Request To VirusLab : Send A Request To Web Content Analysis : How To Take A Screenshot : Create A GSI Log : Clean Install Latest Version : Remove Other Antiviruses : Reset HOST file : Kaspersky's Firefox Addons Incompatibility

ASUSTeK P8H67-M LX, Intel Core i3 2100 @ 3.1Ghz, 8.0Gb DDR3 1333Mhz, Sapphire HD 4350 1GB

Real: Windows 7 Ultimate 64-bit SP1 + IE 11 + FF 33 + Chrome 38 (Latest) + KIS 2015 15.0.0.463(B)
VMware: Windows 7 Ultimate 32-bit SP1 + IE 8 + KIS 2015 MR2 .141


Kaspersky User since '07
Go to the top of the page
 
+Quote Post
lasercats
post 8.03.2010 14:19
Post #6


Newbie
*

Group: Members
Posts: 9
Joined: 18.02.2010




QUOTE(King Grub @ 8.03.2010 13:15) *
Okay, big difference here: au.exe is NOT the same thing as au_.exe. Please check your spelling to avoid misunderstandings.

That au_.exe is used by some uninstallers, Nullsoft Install System in your case. This one creates a temporary folder (nsu.tmp) when you uninstall something with this uninstaller. It is safe.

my mistake..... in my haste I mistyped, I feel like such a dope lol...thanks for the help.
Go to the top of the page
 
+Quote Post
King Grub
post 8.03.2010 14:20
Post #7


Kaspersky Fan I
********

Group: Members
Posts: 1585
Joined: 4.04.2006
From: Sweden




No worries. smile.gif It's just that one little "_" can mean the difference between malware and something perfectly legitimate.
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

 



Lo-Fi Version Time is now: 23.10.2014 08:29