PDA

View Full Version : Importan Question regarding AU_.EXE Prefetch



Jordan_L
2008-07-16, 00:15
Hi there, I was going through my prefetch.exe's to delete the Fraps.exe after I uninstalled Fraps. I came across the Prefetch AU_2.EXE and read that it may or may not be malware on the internet. So at the moment I'm not sure.

The AU_2.EXE comes from the Temp Folder ~nsu.tmp, when I click the folder a grey recycling bin appears with the name Au_. I'm guessing this was part of an Uninstaller/installer that I somehow used. When I double click the grey bin named AU_ an error message pops up saying " NSIS ERROR: Error Launching Installer.

The AU_2.EXE does not show up in my Processes Tab which is hope that it is not malware, it only shows up in the list of Prefetch. My only concern is that whenever I delete the Temp Folder ~nsu.tmp, it re-creates itself, is there anything I should know about whats going on ? Thanks for the advice. :bigthumb:

Note: I use AVG Free 8.0, Adaware 2008, Spybot 5.2+
( I read it could be related to a Nullsoft Uninstaller )

Images Resized:

http://i233.photobucket.com/albums/ee11/Jordanx133/rsz_1.jpg

http://i233.photobucket.com/albums/ee11/Jordanx133/rsz_22.jpg

Jordan_L
2008-07-16, 00:17
I also forgot to mention that I recently Installed and Uninstalled 7-ZIP extracting program ( quite popular ) and FRAPS, which after looking up, seem to use it, and is probably why it asks to reboot your pc after installing ?

Jordan_L
2008-07-16, 00:23
LOL see that Setup Icon on my desktop, I guess that was it, anyways I deleted the Setup, Prefetch, and Folder, and restarted, and they remain gone. So I guess it was just the installer to FRAPS.

Jordan_L
2008-07-16, 00:24
SOLVED :funny:

Jordan_L
2008-07-16, 00:25
images deleted for privacy :bigthumb:

Jordan_L
2008-07-16, 00:28
AU_.EXE not AU_2.EXE :bigthumb:

tashi
2008-07-22, 19:16
Hello Jordan_L,

FYI: This is the malware removal forum and the procedure is here:
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Glad you resolved the problem, cheers.