Jump to content

random autoit error appears out of nowhere, i dont even have autoit installed


mxm200
 Share

Recommended Posts

i believe it might be some malware trying to run the script but my antivirus deleted it, but now every 5 minutes exactly an autoit error appears

Line 0 (.........\nfsc\ggwjt.rne)

Error: Error opening the file.

please help me stop it from popping up, i do not have autoit installed on my pc, at least a visible/reachable one.

Link to comment
Share on other sites

  • Developers

Well, I guess you need to figure out how the program (compiled AutoIt3 script) is shelled.
HiJackThis might be a good option to run and investigate the output for this program.

Jos

SciTE4AutoIt3 Full installer Download page   - Beta files       Read before posting     How to post scriptsource   Forum etiquette  Forum Rules 
 
Live for the present,
Dream of the future,
Learn from the past.
  :)

Link to comment
Share on other sites

  • Developers
24 minutes ago, mxm200 said:

same goes for hijackthis..

Are you sure? it should show all shelled processes by the registry etc..  so can't imagine the info isn't there.

Jos

SciTE4AutoIt3 Full installer Download page   - Beta files       Read before posting     How to post scriptsource   Forum etiquette  Forum Rules 
 
Live for the present,
Dream of the future,
Learn from the past.
  :)

Link to comment
Share on other sites

This error looks like the interpreter (Normally Autoit3.exe) it trying to call a non-existent script file.

 

To trackdown where it is coming from, with the error open: use Microsoft's Process Explorer.

You may need to start process explorer as administrator / use "Show details for all processes" in the file menu.

When the popup shows up, drag the target icon from process explorer to the window.

 

In the process explorer list this will highlight the executable that's generating this error. Right click the executable and "Properties".

 

It will show "Parent" of who called it, and "Autostart location" may show if it was task scheduler that called it. It will also show the path if you want to delete the autoit executable.

 

If it was task scheduler you can then go in and delete the task.

Link to comment
Share on other sites

  • 3 years later...

As @TurionAltec already mentioned ProcessExplorer started "Run as Administrator" will help you -- there is a "crosshair" (?) symbol in the symbol bar of ProcessExplorer: Drag-drop that one on the PopUp you wanna get rid of and Process Explorer will directly jump to the process, this popup window belongs to. Dig into the details of this process, if it's a child, dig into the details of the process(es) above, it was childed from.

Earth is flat, pigs can fly, and Nuclear Power is SAFE!

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...