AUP.EXE

[aimeer]

I have a user who keeps getting an error message. AUP.EXE has
encountered a problem and must close down. She clicks the Send
button (to send info to Microsoft) and then a Debugging Visual C++ on
the iexplore.exe file.

She got an email yesterday advising she had a Valentine's Day Card
from American Greetings. She went to the web site and it took forever
for the card to come up....but it did come up. I had to go into the
options of the email to figure out that the email did not come from
American Greetings. So, I'm assuming she must have downloaded a virus/
spyware/malware. However I've run the virus
scan....nothing.....spyware/malware scan....nothing.

I've looked up aup.exe on the internet and found that it might be a
trojan, but when I've looked on Symantec's web site, it doesn't say
anything about aup.exe.

I don't want to delete a necessary file and go into the registry to
remove the settings for aup.exe unless I know it's a virus or
something else bad.

Does anyone have experience with this?

Amy (e-mail address removed)

 

[Lem]

I have a user who keeps getting an error message. AUP.EXE has
encountered a problem and must close down. She clicks the Send
button (to send info to Microsoft) and then a Debugging Visual C++ on
the iexplore.exe file.

She got an email yesterday advising she had a Valentine's Day Card
from American Greetings. She went to the web site and it took forever
for the card to come up....but it did come up. I had to go into the
options of the email to figure out that the email did not come from
American Greetings. So, I'm assuming she must have downloaded a virus/
spyware/malware. However I've run the virus
scan....nothing.....spyware/malware scan....nothing.

I've looked up aup.exe on the internet and found that it might be a
trojan, but when I've looked on Symantec's web site, it doesn't say
anything about aup.exe.

I don't want to delete a necessary file and go into the registry to
remove the settings for aup.exe unless I know it's a virus or
something else bad.

Does anyone have experience with this?

Amy (e-mail address removed)

This most likely IS a worm/trojan. See
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_RBOT.ACD&VSect=T

From frequent poster David Lipman:
<quote>
Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe {Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE
to go through your FireWall to allow it to download the needed AV vendor
related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode. This way all the components can be downloaded from each AV
vendor's web site. The choices are; Sophos, Trend, McAfee, Kaspersky,
Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed
files or you can download the files and perform a scan in Normal Mode.
Once you have downloaded the files needed for each scanner you want to
use, you should reboot the PC into Safe Mode [F8 key during boot] and
re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal
Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm

* * * Please report back your results * * *
</quote>


Also see the general malware removal instructions from MS-MVP Malke at:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

[Rock]

I have a user who keeps getting an error message. AUP.EXE has
encountered a problem and must close down. She clicks the Send
button (to send info to Microsoft) and then a Debugging Visual C++ on
the iexplore.exe file.

She got an email yesterday advising she had a Valentine's Day Card
from American Greetings. She went to the web site and it took forever
for the card to come up....but it did come up. I had to go into the
options of the email to figure out that the email did not come from
American Greetings. So, I'm assuming she must have downloaded a virus/
spyware/malware. However I've run the virus
scan....nothing.....spyware/malware scan....nothing.

I've looked up aup.exe on the internet and found that it might be a
trojan, but when I've looked on Symantec's web site, it doesn't say
anything about aup.exe.

I don't want to delete a necessary file and go into the registry to
remove the settings for aup.exe unless I know it's a virus or
something else bad.

Malware Removal
http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

[aimeer]

I have a user who keeps getting an error message. AUP.EXE has
encountered a problem and must close down. She clicks the Send
button (to send info to Microsoft) and then a Debugging Visual C++ on
the iexplore.exe file.

She got an email yesterday advising she had a Valentine's Day Card
from American Greetings. She went to the web site and it took forever
for the card to come up....but it did come up. I had to go into the
options of the email to figure out that the email did not come from
American Greetings. So, I'm assuming she must have downloaded a virus/
spyware/malware. However I've run the virus
scan....nothing.....spyware/malware scan....nothing.

I've looked up aup.exe on the internet and found that it might be a
trojan, but when I've looked on Symantec's web site, it doesn't say
anything about aup.exe.

I don't want to delete a necessary file and go into the registry to
remove the settings for aup.exe unless I know it's a virus or
something else bad.

Does anyone have experience with this?

Amy (e-mail address removed)

This most likely IS a worm/trojan. Seehttp://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%...

From frequent poster David Lipman:
<quote>
Download MULTI_AV.EXE from the URL --http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe {Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE
to go through your FireWall to allow it to download the needed AV vendor
related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode. This way all the components can be downloaded from each AV
vendor's web site. The choices are; Sophos, Trend, McAfee, Kaspersky,
Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed
files or you can download the files and perform a scan in Normal Mode.
Once you have downloaded the files needed for each scanner you want to
use, you should reboot the PC into Safe Mode [F8 key during boot] and
re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal
Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:http://pcdid.com/Multi_AV.htm

* * * Please report back your results * * *
</quote>

Also see the general malware removal instructions from MS-MVP Malke at:http://www.elephantboycomputers.com/page2.html#Removing_Malware
--
Lem MS MVP -- Networking

To the moon and back with 64 Kbits of RAM and 512 Kbits of ROM.http://en.wikipedia.org/wiki/Apollo_Guidance_Computer- Hide quoted text -

- Show quoted text -

Thanks!