What is Au_.exe?

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the Au_.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for Au_.exe related errors

Au_.exe file information

The process known as Yahoo! Toolbar Setup or Yahoo! Toolbar Uninstall Setup or Toolbar Uninstall Setup or Coupon Companion Plugin Installer or oberontb Module or thriXXX WebLaunch Installer

belongs to software Adobe® Flash® Player ActiveX Installer or ${PRDCT_DSP or Coupon Companion Plugin or oberontb Module or thriXXX WebLaunch

by Yahoo! ( or AnchorFree ( or ( or thriXXX ( or Industriya or Adobe Systems ( or 215 Apps or TVersity.

Description: Au_.exe is not essential for Windows and will often cause problems. The file Au_.exe is located in a subfolder of "C:\Documents and Settings". Known file sizes on Windows 8/7/XP are 103,982 bytes (3% of all occurrences), 75,524 bytes and 47 more variants. 
The program has no file description. The file is not a Windows system file. Au_.exe is able to monitor applications. Therefore the technical security rating is 37% dangerous, however you should also read the user reviews.
In case of any problems with Au_.exe, you can also do the following:

Recommended: Identify Au_.exe related errors

Important: Some malware also uses the file name Au_.exe, for example Gen:Adware.Heur.nu8@RGcOD8ni (detected by BitDefender), and 180solutions (detected by Sophos). Therefore, you should check the Au_.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

Arrived with download of IE7PRO. Deleted it through a DOS boot from floppy. Massive resource hog.
  Joe Usseglio  
suddenly appeared when removing a program called Regiry Helper
It really depends on the actual file, 99% are probably harmless, but its possible to call a file by any name so its impossible to say if its safe or not
When trying to remove a program it installed its self. Gutten ;/ it has locked me out of the folder
it installed with the latest flash player
It apeared when an update was made to flash player activeX
suddenly appeared when removing Mozila Firefox 3.5
part of installer/uninstaller process which was discovered while uninstalling pre-installed gateway games off a gateway laptop. could be used to install/uninstall legit/safe software or malware in the event a software author used it as its installer. this task should only show up in taskman while installing/uninstalling applications. if seen running all the time then it is most likely an imposter/malware binary sucking up your system resources at the very least.
I uninstalled Veoh from my system and AU_.exe appears
I had a pc come in with a Au_.exe file in the Appdata\local\tmp\~nsu.tmp directory together with OphCrack. When running the Au_.exe it made a Bu_exe.
  Tom Leppens  
Task Manager
part of uninstall for xampp, uninstall stopped when i stoped process
Used during doubletwist uninstall process
I was on a uninstallation window for mozilla and when I ended the process the uninstallation window was closed so yeah, it's also an uninstallation process.
It suddenly apeared when an update was made of the DivX player. Update is not running now as it is blocked by Anti-Virus. i will test now what will happen if i let AU_exe run...There was written Twonky Media Server i think its a programm
    (further information)
I think it stands for Auto Update
One instance of this file appears to be ActivInspire Web Installer setup It appeared when installing the software.
it appeared when i was uninstalling an app (IMVU) when i was uninstall the i noticed my processor speed gat very high (90%) and i saw it in the processes . At one time it even made my laptop turn off atomaticaly
i had installed a player called Veoh and when i unistalled it my firewall informed me that Au_.exe is trying to access ""
I think it appeared while trying to uninstall IMVU, a virtual chat software. At least, I've never seen it before doing this..
Uninstalled kdiff3 and au_.exe tried to install itself -- it was blocked by my ZoneAlrm.
SpyWare, Many Google Searches bring about Spyware results and many hits in 'Trojan, Adware,' etc... DELETE IF SPOTTED.
  RomanBell   (further information)
Appeared in temp folder when I uninstalled WinPcap(Also not installed by me)
Threadfire detection of AU_.EXE opun uninstall of Comodo Geekbuddy. Believe it to be harmless in this case..
I just got a warning from my Firewall preventing Au_.exe from using a Windows messaging system component. This happened while uninstalling Widi 3.2 Trial. However you look at it , Au_exe is used to send/ collect information to a server. The people behind the server may be legitimate. Even if they are its still a breach of our privacy, and is therefore a sort of Trojan. The last Au_exe I had connected to a Russian server and tried to download more viri. This penetrated both firewall and virus scanner, my router firewall and other security software. My advice is kill it, block it, delete it.
Yahoo toolbar uninstall program, runs to instal and uninstall the program, when i uninstalled yahoo this file ran in the temp folder and then once yahoo was removed the file was automatically deleted.
  Kyle   (further information)
I believe it came in with update to flsh player. Has captured my home page and blocked email access. Definitely a malware program. Now shows up in task manager using 98% of resources
  peter yule   (further information)
showed up trying to uninstall yahoo toolbar I got from infrarecorder. Resource hog 99% cpu.
It's actually supposed to be part of the MiniyLyrics program
Au_.exe appeared when I tried to uninstall Spotify. Avast suggested I open it in a Sandbox, so did, then it popped up with another warning for Bu_.exe - in the end I uninstalled without using sandbox feature.
Zone Alarm Outgoing Program Block for au_.exe in tmp\~nsu.tmp folder
it stands for AUTO-UNINSTALLATION.. goes away once uninstallation finished
This is a nasty little thing that came about when I installed iLiVid and Real Player when I couldn't get the programming I wanted from Graboid (REALLY stupid move).
Something to do with facemoods
found when unustalling windows ilivid toolbar (hijacked FF keyword.url)
my anti virus has detected as low level risk and i deleted with norton anti virus
won't let you uninstall yahoo toolbar
For me, Process Manager lists it's parent as "Uninstall Dragon Age.exe", which makes sense because that's the first I've seen it - uninstalling Dragon Age.
Found when downloading epicbot, it connects to a russian server as I used wireshark.
AU_.exe appeared as ahigh-level threat (AVG) when uninstalling a spyware toolbar. Removal significantly improved system performance. My guess based on incidental reports: malware that ties itself to other software and triggers on uninstallation.
Antivir alerted after updating TeamViever and Teamspeak. Killed 5 process and 51 files. Could be used by TeamViever to uninstall the outdated client.
My Kerio firewall alerted an outgoing TCP/IP request as soon as I removed Searchya toolbar for IE (from control panel add/remove) . Searchya toolbar was nagging / behaved like a mal-ware.
Au_.exe is used by Yahoo toolbar, apparently to make it persistent (hard to completely uninstall)
Showed up during uninstallation of BT broadband helper
All of my Antivirus/malware/spyware programs point to this as the central cause of many issues on my computer: Freezes, denied access to files, unwriteable temp folder(which results in installation of programs being impossible. I don't know how to remove it for the life of me but if you can then get rid of the damned thing!
I have it on multiple computers. Seems it has to do with uninstallers, but it can also be malware... or maybe you guys are talking about Au.exe, which has a difference.
it stands for AUTO-UNINSTALLATION..(or only a part of its scripting) only appeared while uninstalling DAEMON Tools Pro (^^although in this case it did not ask for net access)
Prevents Nik add-ins for Photoshop or Lightroom from running. It is a nuisance but does not afflict my 32 bit system. Only my 64 bit HP laptop.
  Rick Hurst  
Starts running when attempting to uninstall Ccleaner
  eharv   (further information)
Au_.exe appeared after attempting to uninstall Delta Toolbar via windows control panel. cannot uninstall toolbar now.
Appeared when uninstalling Razer Synapse software, blocked it by Kaspersky
was un installing yahoo toolbar and locked up and would not delete the yahoo tool bar. and is using now half of my cpu resources, will try and reboot and try again this tool bar seems to be used on several differerent programs
Au_.exe is inside (~nsu.tmp) a folder and it is not a windows program at all
  Mr. Lee  
Pops up when trying to uninstall malware
starts up when i attempt to get rid of coupon savings.

Rating chart

Summary: Average user rating of Au_.exe: based on 57 votes with 55 user comments. 6 users think Au_.exe is essential for Windows or an installed application. 6 users think it's probably harmless. 15 users think it's neither essential nor dangerous. 13 users suspect danger. 17 users think Au_.exe is dangerous and recommend removing it. 13 users don't grade Au_.exe ("not sure about it").

Do you have additional information?
What do you know about Au_.exe:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving Au_ issues

A clean and tidy computer is the key requirement for avoiding problems with Au_. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off doing a repair of your installation, or in the case of Windows 8, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the Au_.exe process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

Au_.exe [all]