What is Au_.exe?

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the Au_.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for Au_.exe related errors

Au_.exe file information

The process known as Yahoo! Toolbar Uninstall Setup or McAfee Security Scan Plus Installer or Yahoo! Toolbar Setup or Dropbox (version 3.8.8 Installer) or Desktop Temperature Monitor or Installs PCSX2, a Playstation (version 2 Emulator for the PC.) or Setup Application or Toolbar Uninstall Setup

belongs to software McAfee Security Scan Plus or Adobe® Flash® Player ActiveX Installer or Desktop Temperature Monitor or ${PRDCT_DSP or IdleCrawler or PCSX2 1.2.1 (version (r5875)) or Coupon Companion Plugin or oberontb Module

by Yahoo! ( or AnchorFree ( or McAfee ( or ( or Nik Software or Dropbox ( or thriXXX ( or Internet Deep Research Foundation.

Description: Au_.exe is not essential for Windows and will often cause problems. The file Au_.exe is located in a subfolder of the user's profile folder. Known file sizes on Windows 10/8/7/XP are 103,982 bytes (3% of all occurrences), 75,524 bytes and 47 more variants. 
The program has no file description. The file is not a Windows system file. Au_.exe is able to monitor applications. Therefore the technical security rating is 38% dangerous, however you should also read the user reviews.

Uninstalling this variant: In case of any problems with Au_.exe, you can also do the following:
  • get help from the software vendor Wajam
  • uninstall the software Wajam using the Uninstall a Program function of Windows Control Panel (Windows: Start, Settings, Control Panel, Uninstall a Program)

Recommended: Identify Au_.exe related errors

Important: Some malware also uses the file name Au_.exe, for example Win32:Conduit-C [PUP] or Win32:BrowseFox-JQ [PUP] (detected by Avast), and Gen:Adware.Heur.nu8@RGcOD8ni (detected by F-Secure). Therefore, you should check the Au_.exe process on your PC to see if it is a threat. If Yahoo! Toolbar Uninstall Setup has changed your browser's search engine and start page, you can recover your browser's default settings as follows:

Reset default browser settings for Internet-Explorer ▾
  1. In Internet Explorer, press the key combination Alt + X to open the Tools menu.
  2. Click Internet options.
  3. Click the Advanced tab.
  4. Click the Reset... button.
  5. Enable the Delete personal settings option.
This will reset your Internet Explorer to its default settings. Your browser will start with the familiar start page and search engine—without popups, ads, cookies, but all browser add-ons are deleted too [1]. Make cleaning up your browser and your computer simpler and safer with Security Task Manager.


User Comments

Arrived with download of IE7PRO. Deleted it through a DOS boot from floppy. Massive resource hog.
  Joe Usseglio  
suddenly appeared when removing a program called Regiry Helper
It really depends on the actual file, 99% are probably harmless, but its possible to call a file by any name so its impossible to say if its safe or not
When trying to remove a program it installed its self. Gutten ;/ it has locked me out of the folder
it installed with the latest flash player
It apeared when an update was made to flash player activeX
suddenly appeared when removing Mozila Firefox 3.5
part of installer/uninstaller process which was discovered while uninstalling pre-installed gateway games off a gateway laptop. could be used to install/uninstall legit/safe software or malware in the event a software author used it as its installer. this task should only show up in taskman while installing/uninstalling applications. if seen running all the time then it is most likely an imposter/malware binary sucking up your system resources at the very least.
I uninstalled Veoh from my system and AU_.exe appears
I had a pc come in with a Au_.exe file in the Appdata\local\tmp\~nsu.tmp directory together with OphCrack. When running the Au_.exe it made a Bu_exe.
  Tom Leppens  
Task Manager
part of uninstall for xampp, uninstall stopped when i stoped process
Used during doubletwist uninstall process
I was on a uninstallation window for mozilla and when I ended the process the uninstallation window was closed so yeah, it's also an uninstallation process.
It suddenly apeared when an update was made of the DivX player. Update is not running now as it is blocked by Anti-Virus. i will test now what will happen if i let AU_exe run...There was written Twonky Media Server i think its a programm
    (further information)
I think it stands for Auto Update
One instance of this file appears to be ActivInspire Web Installer setup It appeared when installing the software.
it appeared when i was uninstalling an app (IMVU) when i was uninstall the i noticed my processor speed gat very high (90%) and i saw it in the processes . At one time it even made my laptop turn off atomaticaly
i had installed a player called Veoh and when i unistalled it my firewall informed me that Au_.exe is trying to access ""
I think it appeared while trying to uninstall IMVU, a virtual chat software. At least, I've never seen it before doing this..
Uninstalled kdiff3 and au_.exe tried to install itself -- it was blocked by my ZoneAlrm.
SpyWare, Many Google Searches bring about Spyware results and many hits in 'Trojan, Adware,' etc... DELETE IF SPOTTED.
  RomanBell   (further information)
Appeared in temp folder when I uninstalled WinPcap(Also not installed by me)
Threadfire detection of AU_.EXE opun uninstall of Comodo Geekbuddy. Believe it to be harmless in this case..
I just got a warning from my Firewall preventing Au_.exe from using a Windows messaging system component. This happened while uninstalling Widi 3.2 Trial. However you look at it , Au_exe is used to send/ collect information to a server. The people behind the server may be legitimate. Even if they are its still a breach of our privacy, and is therefore a sort of Trojan. The last Au_exe I had connected to a Russian server and tried to download more viri. This penetrated both firewall and virus scanner, my router firewall and other security software. My advice is kill it, block it, delete it.
Yahoo toolbar uninstall program, runs to instal and uninstall the program, when i uninstalled yahoo this file ran in the temp folder and then once yahoo was removed the file was automatically deleted.
  Kyle   (further information)
I believe it came in with update to flsh player. Has captured my home page and blocked email access. Definitely a malware program. Now shows up in task manager using 98% of resources
  peter yule   (further information)
showed up trying to uninstall yahoo toolbar I got from infrarecorder. Resource hog 99% cpu.
It's actually supposed to be part of the MiniyLyrics program
Au_.exe appeared when I tried to uninstall Spotify. Avast suggested I open it in a Sandbox, so did, then it popped up with another warning for Bu_.exe - in the end I uninstalled without using sandbox feature.
Zone Alarm Outgoing Program Block for au_.exe in tmp\~nsu.tmp folder
it stands for AUTO-UNINSTALLATION.. goes away once uninstallation finished
This is a nasty little thing that came about when I installed iLiVid and Real Player when I couldn't get the programming I wanted from Graboid (REALLY stupid move).
Something to do with facemoods
found when unustalling windows ilivid toolbar (hijacked FF keyword.url)
my anti virus has detected as low level risk and i deleted with norton anti virus
won't let you uninstall yahoo toolbar
For me, Process Manager lists it's parent as "Uninstall Dragon Age.exe", which makes sense because that's the first I've seen it - uninstalling Dragon Age.
Found when downloading epicbot, it connects to a russian server as I used wireshark.
AU_.exe appeared as ahigh-level threat (AVG) when uninstalling a spyware toolbar. Removal significantly improved system performance. My guess based on incidental reports: malware that ties itself to other software and triggers on uninstallation.
Antivir alerted after updating TeamViever and Teamspeak. Killed 5 process and 51 files. Could be used by TeamViever to uninstall the outdated client.
My Kerio firewall alerted an outgoing TCP/IP request as soon as I removed Searchya toolbar for IE (from control panel add/remove) . Searchya toolbar was nagging / behaved like a mal-ware.
Au_.exe is used by Yahoo toolbar, apparently to make it persistent (hard to completely uninstall)
Showed up during uninstallation of BT broadband helper
All of my Antivirus/malware/spyware programs point to this as the central cause of many issues on my computer: Freezes, denied access to files, unwriteable temp folder(which results in installation of programs being impossible. I don't know how to remove it for the life of me but if you can then get rid of the damned thing!
I have it on multiple computers. Seems it has to do with uninstallers, but it can also be malware... or maybe you guys are talking about Au.exe, which has a difference.
it stands for AUTO-UNINSTALLATION..(or only a part of its scripting) only appeared while uninstalling DAEMON Tools Pro (^^although in this case it did not ask for net access)
Prevents Nik add-ins for Photoshop or Lightroom from running. It is a nuisance but does not afflict my 32 bit system. Only my 64 bit HP laptop.
  Rick Hurst  
Starts running when attempting to uninstall Ccleaner
  eharv   (further information)
Au_.exe appeared after attempting to uninstall Delta Toolbar via windows control panel. cannot uninstall toolbar now.
Appeared when uninstalling Razer Synapse software, blocked it by Kaspersky
was un installing yahoo toolbar and locked up and would not delete the yahoo tool bar. and is using now half of my cpu resources, will try and reboot and try again this tool bar seems to be used on several differerent programs
Au_.exe is inside (~nsu.tmp) a folder and it is not a windows program at all
  Mr. Lee  
Pops up when trying to uninstall malware
starts up when i attempt to get rid of coupon savings.
Probably it's Adobe Updater of Adobe Reader. After instalation of Adobe Reade program was deletable (befor no).
It means Application Uninstaller if you uninstall a program. It's a system essential.
FlightGear Uninstaller
i herd it is malware and to get ride of it as fast as possible its to be called a Trojan/spyware
Things that probably got me the Au_.exe are: Adobe Flash Player update, KMPlayer update. Or even the Crome browser update. Only updated these three and Au_.exe appeared between the processes.
For me, it was the uninstaller for Google calendar sync
  J Maurice  
Symantec did not like it so I deleted it. It was installed in the C:\users\appdata...\temp folder
  Smedley O'Hara  
Almost impossible to remove. Prevents any installation from running. Access denied to user\appdaa\local\temp
  Stuart Grant  
Appeared when trying to uninstall DriverRestore. Norton blocked it from running
  Lao Yin  

Rating chart

Summary: Average user rating of Au_.exe: based on 69 votes with 64 user comments. 8 users think Au_.exe is essential for Windows or an installed application. 7 users think it's probably harmless. 17 users think it's neither essential nor dangerous. 15 users suspect danger. 22 users think Au_.exe is dangerous and recommend removing it. 15 users don't grade Au_.exe ("not sure about it").

Do you have additional information?
What do you know about Au_.exe:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving Au_ issues

A clean and tidy computer is the key requirement for avoiding problems with Au_. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the Au_.exe process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

Au_.exe [all]