Mobile/PDA About Us Advertise here
User User name Password  
  Not registered yet? Register here.
Lost your password? Click here. 		 
  Home   News   Guides   Downloads   Glossary   Hardware   Profiles   Forums   v4  
 Advertise at AfterDawn.com     Link to us!     Private messages     Compose a private message     List of all updated threads     Threads without replies     Search messages
Saturday 30.8.2025 / 14:23
Search AfterDawn Forums:        In English   Suomeksi   På svenska
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > au_.exe problem
Show topics
 
Forums
Forums
Au_.exe Problem
  Jump to:
 
Posted Message
Lp531
Senior Member
_ 		8. February 2007 @ 20:37 _ Link to this message    Send private message to this user   
I removed Au_.exe from registry...I did a restore...still could not get firewall or AV up...
Did uninstall of firewall and AV...every thing is back-up right now...

I take that back...AV is NOW...NO WHERE TO BE SEEN...AAAHHHH...going to pop a blood vessel..:(
Time to take a deep breath...

I did restart after reinstalling firewall...did not do a restart after AV reinstall...I am thinking I should do another restart to lock in AV...AV is still there now...What do you think?..
Earlier AV just disappeared from start-up tray...it showed still active when I clicked desktop Icon...but was not in start-up tray...

I am running Avira and Comodo...
[ + quote]

This message has been edited since posting. Last time this message was edited on 8. February 2007 @ 20:49
Advertisement
_ 		__
Pop_Smith
Senior Member

2 product reviews
_ 		8. February 2007 @ 20:51 _ Link to this message    Send private message to this user   
If you can't get AV to install you could trying installing one in Safe Mode. If you have a Flash Drive handy I would recommend installing ClamWin to it.

I would recommend you go into Safe Mode and scan your entire computer (all your hard drives if you have more then one) with ClamWin and you could delete what it finds.

If you don't have a Flash Drive you could try installing an AV in Windows and then running it in Safe Mode after you have updated the definitions.

ClamWin does not have a real-time scan engine but once you get your system cleaned you can install one with a real-time engine if you wish.

Do you have any AV program on a CD/DVD?

EDIT: Arrg, I forgot about how the site takes over specific words and re-routes them to Softpedia or the Glossary. You can pick up a Flash-capable copy of ClamWin here.
[ + quote]

This message has been edited since posting. Last time this message was edited on 8. February 2007 @ 21:03
ddp
Moderator
_ 		8. February 2007 @ 20:58 _ Link to this message    Send private message to this user   
[ + quote]

This message has been edited since posting. Last time this message was edited on 8. February 2007 @ 20:59
Lp531
Senior Member
_ 		8. February 2007 @ 20:58 _ Link to this message    Send private message to this user   
AV is still up...
Au_.exe is a trojan...
Still have not done restart after AV reinstall...
I think I will restart to lock in AV...What do you think?..

And Yes...I have a flash drive...

I have ccleaner...Adaware...and Spybot...have not ran them yet...

I did do a sweep of my operating drive with AVIRA...it did not find any thing...
[ + quote]

This message has been edited since posting. Last time this message was edited on 8. February 2007 @ 21:04
ddp
Moderator
_ 		8. February 2007 @ 21:03 _ Link to this message    Send private message to this user   
update them all. also run the issuses in ccleaner as it goes thru the registry for you.
[ + quote]
Pop_Smith
Senior Member

2 product reviews
_ 		8. February 2007 @ 21:07 _ Link to this message    Send private message to this user   
Good points ddp.

If you have an AV program up then you should be ok without using ClamWin. If you want you can try running it off a flash drive. The Portable version (can run entirely off a flash drive) is available here.

However, run those things ddp said. If you cant get them to run (or if they freeze while running) then make sure they are up-to-date and run them (in the order ddp said) in Safe Mode.
[ + quote]
ddp
Moderator
_ 		8. February 2007 @ 21:10 _ Link to this message    Send private message to this user   
run them 1st in safemode than normal mode but run ccleaner 1st
[ + quote]
Lp531
Senior Member
_ 		8. February 2007 @ 21:42 _ Link to this message    Send private message to this user   
Just Downloaded them in Safe Mode with Networking...going to install them...then do a restart in Safe Mode only...then run them...

Do I need to uninstall Avira AV before I install AVG...I am assuming so...
[ + quote]
Pop_Smith
Senior Member

2 product reviews
_ 		8. February 2007 @ 21:48 _ Link to this message    Send private message to this user   
Yes, I would uninstall Avira first. After you uninstall Avira I would reboot again then install AVG.

I am going to bed now as its 1 am here.

I will try and help you more when I get up tomorrow if you need it.
[ + quote]
Lp531
Senior Member
_ 		8. February 2007 @ 21:51 _ Link to this message    Send private message to this user   
Everyone...Thanks...For Everything...Will do...
[ + quote]
ddp
Moderator
_ 		9. February 2007 @ 09:51 _ Link to this message    Send private message to this user   
status?
[ + quote]
Lp531
Senior Member
_ 		9. February 2007 @ 23:21 _ Link to this message    Send private message to this user   
Had to give deposition today...

Things seem fine now...maybe AV disappearing was due to non restart...

Down loaded everything in Safe Mode with networking...in order...Ran in Safe Mode nothing detected...Have not had time to run them in order again in normal start up...will do...

Will watch closely...
@ddp
Dr1 photos up in profile...
[ + quote]

This message has been edited since posting. Last time this message was edited on 10. February 2007 @ 01:00
Lp531
Senior Member
_ 		12. February 2007 @ 17:13 _ Link to this message    Send private message to this user   
Something new I am seeing on above computer...

Is open office part of the preview option in AD posts?..

When ever I preview...Komodo is warning me about a supposed open office program that is wanting to connect to internet...when I deny it permission...it prevents me from making post...or connecting to internet until I open a new browser...First time this has happened...

This is the Komodo warning I am getting...

Quote:
program:firefox.exe
IP:70.85.60.100 Port:http(80)-TCP

C:program files\openoffice.org2.0\program\soffice.bin has tried to use Firefox.exe through OLE Automation, which can be used to hijack other applications, soffice.bin might be using Firefox.exe to connect to the Internet
[ + quote]

This message has been edited since posting. Last time this message was edited on 12. February 2007 @ 17:17
Pop_Smith
Senior Member

2 product reviews
_ 		12. February 2007 @ 18:04 _ Link to this message    Send private message to this user   
You might want to run a virus scan, just on that file, but everything checks out correctly from what I can see.

IP:70.85.60.100 Port:http(80)-TCP is an AfterDawn server.

soffice.bin is just part of Open Office and is in the proper directory so it should be ok.

You could upload soffice.bin to http://virusscan.jotti.org/ which scans it with 15 different AntiVirus applications that are updated hourly.

I don't use Open Office but it seems strange that you can't post without allowing it.
[ + quote]
Lp531
Senior Member
_ 		12. February 2007 @ 18:13 _ Link to this message    Send private message to this user   
Right now I am on one of my other computers...it has open office...it has Norton...not Komodo...never had to allow open office access to make a post...

Never had to before the Au_.exe incident...on the old system...to my knowledge...don't fully trust old system yet...
[ + quote]
Advertisement
_ 		__
 
_
Pop_Smith
Senior Member

2 product reviews
_ 		12. February 2007 @ 18:35 _ Link to this message    Send private message to this user   
Huh, thats weird. I am not sure what to tell you as I don't have a personal firewall or use a Real-Time AV engine.

It is possible that a program could be "piggybacking" on soffice.bin but it sounds unlikely. If I dig anything up I will let you know.

Peace
[ + quote]
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > au_.exe problem
 

Digital video: AfterDawn.com | AfterDawn Forums
Music: MP3Lizard.com
Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
Software: Software downloads
Blogs: User profile pages
RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
International: AfterDawn in Finnish | AfterDawn in Swedish | AfterDawn in Norwegian | download.fi
Navigate: Search | Site map
About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
Contact us: Send feedback | Contact our media sales team
 
  © 1999-2025 by AfterDawn Ltd.

  IDG TechNetwork