Lizardking141

AutoIT Error at Startup

8 posts in this topic

So a little background first, I am part of an IT team for a company and this error popped up on a computer of one of my users. We do not use AutoIT for anything in our company and I am just now getting into it after hitting this error. The error I am seeing is:

Line 0 (File "C:\Users\username\YBcL1gilQRdZq0G1\FBbtK"):
Error: Error opening the file.

So I tracked down what was causing the error and there was a shortcut in the users' windows startup folder that was pointing to this file that no longer exists. I do not see any record of it being deleted in my AV manager. I got rid of the shortcut and it got rid of the error as expected.

So my question is without the original file or records of it being gone is there any way for me to make sure it is completely gone from the system? I don't know quite how robust AutoIT is and what it could have done before it was deleted or if it would have deleted itself for some reason.

I know this is kind of vague but this is all I have to go off of as well and am just trying to get more information and make sure this problem is fixed and doesn't pop up anymore.

Thanks for any info. 

Share this post


Link to post
Share on other sites



You could search for it on the hard drive to see if it still exists anywhere. The Line 0 part says that something is running, not a shortcut, but the actual program. You may have stopped it from being executed, but if all you deleted was the shortcut then the program might still be lurking somewhere.

Without having a snapshot of the contents of the computer prior to the file being placed onto it and executed, you'd have a hard time finding out what it might have done while it was there and running.


If I posted any code, assume that code was written using the latest release version unless stated otherwise. Also, if it doesn't work on XP I can't help with that because I don't have access to XP, and I'm not going to.
Give a programmer the correct code and he can do his work for a day. Teach a programmer to debug and he can do his work for a lifetime - by Chirag Gude
How to ask questions the smart way!

I hereby grant any person the right to use any code I post, that I am the original author of, on the autoitscript.com forums, unless I've specifically stated otherwise in the code or the thread post. If you do use my code all I ask, as a courtesy, is to make note of where you got it from.

Back up and restore Windows user files _Array.au3 - Modified array functions that include support for 2D arrays.  -  ColorChooser - An add-on for SciTE that pops up a color dialog so you can select and paste a color code into a script.  -  Customizable Splashscreen GUI w/Progress Bar - Create a custom "splash screen" GUI with a progress bar and custom label.  -  _FileGetProperty - Retrieve the properties of a file  -  SciTE Toolbar - A toolbar demo for use with the SciTE editor  -  GUIRegisterMsg demo - Demo script to show how to use the Windows messages to interact with controls and your GUI.  -   Latin Square password generator

Share this post


Link to post
Share on other sites

That is what I was worried about, it still lurking around somewhere. I can not find the program or even the containing folder that the shortcut was pointing to on the drive. It should have clicked in my head that if it is an AutoIT line 0 error instead of say a windows "The file this link is pointing to is no longer available" esque error that it would still be there somewhere and trying to run but something is stopping it. 

Thanks for the info, I will go do some more searches and see if I can find an traces of it again. 

Share this post


Link to post
Share on other sites

Found the .au3 file, was hiding in User\AppData\Roaming. Any way if I have the file I can tell what it was trying to do when it was running?

Thanks.

Share this post


Link to post
Share on other sites

It is definitely readable, wouldn't really consider it easily readable due to the fact that the shortest variable is $HCUKCVEgeE and they only get more convoluted with functions like MUMUOKCWUYGDiDFPZNGOeHcX, but it is a good starting point and I will definitely be digging into it to try to figure it out. Guess this gives me an excuse to learn a new language which isn't a bad thing.

Thanks for the all the help and information. 

Share this post


Link to post
Share on other sites

Lizardking141,

That does not sound like good news. If you want to PM me the file, I would be happy to take a look and see if I can work out what it does.

M23


Any of my own code posted anywhere on the forum is available for use by others without any restriction of any kind._______My UDFs:

Spoiler

ArrayMultiColSort ---- Sort arrays on multiple columns
ChooseFileFolder ---- Single and multiple selections from specified path treeview listing
Date_Time_Convert -- Easily convert date/time formats, including the language used
ExtMsgBox --------- A highly customisable replacement for MsgBox
GUIExtender -------- Extend and retract multiple sections within a GUI
GUIFrame ---------- Subdivide GUIs into many adjustable frames
GUIListViewEx ------- Insert, delete, move, drag, sort, edit and colour ListView items
GUITreeViewEx ------ Check/clear parent and child checkboxes in a TreeView
Marquee ----------- Scrolling tickertape GUIs
NoFocusLines ------- Remove the dotted focus lines from buttons, sliders, radios and checkboxes
Notify ------------- Small notifications on the edge of the display
Scrollbars ----------Automatically sized scrollbars with a single command
StringSize ---------- Automatically size controls to fit text
Toast -------------- Small GUIs which pop out of the notification area

 

Share this post


Link to post
Share on other sites

If you don't mind doing it I have no objections to more eyes on it. 

I will PM it to you.

Thanks, 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now