mxm200 Posted December 29, 2018 Share Posted December 29, 2018 i believe it might be some malware trying to run the script but my antivirus deleted it, but now every 5 minutes exactly an autoit error appears Line 0 (.........\nfsc\ggwjt.rne) Error: Error opening the file. please help me stop it from popping up, i do not have autoit installed on my pc, at least a visible/reachable one. Link to comment Share on other sites More sharing options...
Earthshine Posted December 29, 2018 Share Posted December 29, 2018 (edited) It’s malware. Scan with malware bites Edited December 29, 2018 by Earthshine My resources are limited. You must ask the right questions Link to comment Share on other sites More sharing options...
Developers Jos Posted December 29, 2018 Developers Share Posted December 29, 2018 Well, I guess you need to figure out how the program (compiled AutoIt3 script) is shelled. HiJackThis might be a good option to run and investigate the output for this program. Jos SciTE4AutoIt3 Full installer Download page - Beta files Read before posting How to post scriptsource Forum etiquette Forum Rules Live for the present, Dream of the future, Learn from the past. Link to comment Share on other sites More sharing options...
mxm200 Posted December 29, 2018 Author Share Posted December 29, 2018 malware bites doesn't seem to find anything same goes for hijackthis.. is there a way to atleast stop it from running? i have a bitdefender but i do not have any option to block a program that is not detected as malware Link to comment Share on other sites More sharing options...
Developers Jos Posted December 29, 2018 Developers Share Posted December 29, 2018 24 minutes ago, mxm200 said: same goes for hijackthis.. Are you sure? it should show all shelled processes by the registry etc.. so can't imagine the info isn't there. Jos SciTE4AutoIt3 Full installer Download page - Beta files Read before posting How to post scriptsource Forum etiquette Forum Rules Live for the present, Dream of the future, Learn from the past. Link to comment Share on other sites More sharing options...
TurionAltec Posted December 29, 2018 Share Posted December 29, 2018 This error looks like the interpreter (Normally Autoit3.exe) it trying to call a non-existent script file. To trackdown where it is coming from, with the error open: use Microsoft's Process Explorer. You may need to start process explorer as administrator / use "Show details for all processes" in the file menu. When the popup shows up, drag the target icon from process explorer to the window. In the process explorer list this will highlight the executable that's generating this error. Right click the executable and "Properties". It will show "Parent" of who called it, and "Autostart location" may show if it was task scheduler that called it. It will also show the path if you want to delete the autoit executable. If it was task scheduler you can then go in and delete the task. Link to comment Share on other sites More sharing options...
AutoHelper15 Posted July 6, 2022 Share Posted July 6, 2022 Hey, I had the same issue. What I did was open task manager and use that to find the file location of the error and then delete it. Hope this helps! Link to comment Share on other sites More sharing options...
rudi Posted July 7, 2022 Share Posted July 7, 2022 As @TurionAltec already mentioned ProcessExplorer started "Run as Administrator" will help you -- there is a "crosshair" (?) symbol in the symbol bar of ProcessExplorer: Drag-drop that one on the PopUp you wanna get rid of and Process Explorer will directly jump to the process, this popup window belongs to. Dig into the details of this process, if it's a child, dig into the details of the process(es) above, it was childed from. Earth is flat, pigs can fly, and Nuclear Power is SAFE! Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now