How to remove Au_.exe
Au_.exe
The module Au_.exe has been detected as Adware.SearchSuite
File Details
| Product Name: | Free mp3 Wma Converter |
| Company Name: | Koyote-Lab Inc |
| MD5: | a937cf1d92f18619996ccc285dcd6fef |
| Size: | 127 KB |
| First Published: | 2017-09-04 10:03:41 (7 years ago) |
| Latest Published: | 2018-07-25 10:17:38 (6 years ago) |
| Status: | Adware.SearchSuite (on last analysis) | |
| Analysis Date: | 2018-07-25 10:17:38 (6 years ago) |
Common Places:
| %programfiles%\free mp3 wma converter |
| %programfiles% |
| %temp% |
| %sysdrive% |
| %sysdrive%\hardisk svuotati\disco c copiato 2017-07-04\program files (x86) |
| %sysdrive%\disco locale c copiato 2017-07-04\packard bell\program files (x86) |
| %sysdrive%\wd my passport tutti\disco locale c 2014-04-03\program files (x86) |
| %sysdrive%\metro cars\c\program files (x86) |
File Names:
| Uninstall.exe |
| Au_.exe |
Geography:
| 77.8% | ||
| 11.1% | ||
| 11.1% |
OS Version:
| Windows 10 | 77.8% | |
| Windows 7 | 22.2% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000038af |
PE Sections:
| Name | Size of data | MD5 |
| .text | 30208 | 9d76a7945c7ca1f092ab09fa94601366 |
| .rdata | 11264 | 96ce169cbed20c3aac65e4db6b527c8a |
| .data | 512 | 7f6cbcc98e77e8ac7569dfb5fb12df6c |
| .ndata | 0 | 00000000000000000000000000000000 |
| .rsrc | 10752 | 63bf5c62524530eb12a55ffb7bba48e1 |
| .reloc | 4096 | 57a3379cec4f8fb2facfbd0374a1036f |
More information:
Download GridinSoft
Anti-Malware - Removal tool for Au_.exe
