aimeer wrote:
> I have a user who keeps getting an error message. AUP.EXE has
> encountered a problem and must close down. She clicks the Send
> button (to send info to Microsoft) and then a Debugging Visual C++ on
> the iexplore.exe file.
>
> She got an email yesterday advising she had a Valentine's Day Card
> from American Greetings. She went to the web site and it took forever
> for the card to come up....but it did come up. I had to go into the
> options of the email to figure out that the email did not come from
> American Greetings. So, I'm assuming she must have downloaded a virus/
> spyware/malware. However I've run the virus
> scan....nothing.....spyware/malware scan....nothing.
>
> I've looked up aup.exe on the internet and found that it might be a
> trojan, but when I've looked on Symantec's web site, it doesn't say
> anything about aup.exe.
>
> I don't want to delete a necessary file and go into the registry to
> remove the settings for aup.exe unless I know it's a virus or
> something else bad.
>
> Does anyone have experience with this?
>
> Amy (E-Mail Removed)
>
This most likely IS a worm/trojan. See
http://www.trendmicro.com/vinfo/viru...%2EACD&VSect=T
From frequent poster David Lipman:
<quote>
Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe
To use this utility, perform the following...
Execute; Multi_AV.exe {Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close
Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }
NOTE: You may have to disable your software FireWall or allow WGET.EXE
to go through your FireWall to allow it to download the needed AV vendor
related files.
C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode. This way all the components can be downloaded from each AV
vendor's web site. The choices are; Sophos, Trend, McAfee, Kaspersky,
Exit this menu and Reboot the PC.
You can choose to go to each menu item and just download the needed
files or you can download the files and perform a scan in Normal Mode.
Once you have downloaded the files needed for each scanner you want to
use, you should reboot the PC into Safe Mode [F8 key during boot] and
re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal
Mode.
When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help file.
http://www.ik-cs.com/multi-av.htm
Additional Instructions:
http://pcdid.com/Multi_AV.htm
* * * Please report back your results * * *
</quote>
Also see the general malware removal instructions from MS-MVP Malke at:
http://www.elephantboycomputers.com/...moving_Malware
--
Lem MS MVP -- Networking
To the moon and back with 64 Kbits of RAM and 512 Kbits of ROM.
http://en.wikipedia.org/wiki/Apollo_Guidance_Computer
