Downloader.auo Downloads Additional Items, How to Remove

VilmaTech Onlione Support and this website
should not be mistakenly taken to be
associated, affiliated, sponsored
or owned by Downloader.auo’s creator
or distributors. The provision of
information and solution
is the one and only intent.

OUTLINE

1. Brief introduction of Downloader.auo
2. If anti-virus program can remove downloader.auo?
3. How Downloader.auo spreads?
4. List of Downloader.auo affection scenarios
5. Purpose of downloader.auo
6. Expert shows how to remove Downloader.auo
7. Removal tips

Something about Downloader.auo

Downloader.auo is a Trojan horse that mainly takes charge of downloading and releasing vicious codes. “auo” is no more than a variant code. In such case, it can be inferred that there are many other downloader alive on the Internet.

If Anti-virus Programs Manage to Remove Downloader.auo?

It is believed that the very first thing people come up with when encountering virus is to run anti-virus programs. However, Downloader.auo still persists even when the security utilities said that the Trojan horse has been removed successfully.

According to Global PC Support Center, the reasons for Downloader.auo’s persistence are:

• The Trojan horse affects drivers concerning security parts.
• The downloader calls the internal processes to run errands.
• The Downloader.auo virus opens up backdoor to download new commands and some complementary components for permanent stay on a target machine.

The very first thing when Downloader.auo penetrates a machine, the drivers regarding pivotal parts such as security services and the processes/.dll files to call and co-ordinate mechanical operations will be numerated and modified slightly to ensure a settlement. With the modified drivers, some processes and memory modules would follow Downloader.auo’s order to:

• disable internal security defense.
• generate items randomly in local disk.
• affect all restore points to restore any deleted items when incomplete removal occurs.
• open up backdoor without permission.
• insert some of its files and folders in Windows protected zone to prevent automatic removal.

Conclusion: Anti-virus programs would not be able to remove Downloader.auo completely as some of the internal processes are utilized by the Trojan horse, without vicious attribute code, the security utilities can’t take down the processes and the Trojan horse thereafter. Thus, manual removal method is highly recommended.

How Do I Get Downloader.auo?

As one of the Trojan horses, Downloader.auo could piggyback on some counterfeit websites or programs created by cyber criminals. Therefore, one should be careful about the programs one is planning on installing, especially computer-friendly programs when rogueware rages.

Also as an aggressive virus, Downloader.auo could simply attack the vulnerability/loophole within a system, bug on a website that a machine accesses and the backdoor on a machine. Therefore, it is necessary to run scan for computer health regularly.

Downloader.auo can also hide on some pop-up ads or messages such as Flash Player update messages popping up from nowhere.

List of Downloader.auo affection scenarios

• Freezes and crashes would occur both on computer and browsers.
• Redirect and hijacks could happen.
• More junks and unknown items are generated on the affected machine to trigger error messages and other unknown malfunctions.
• More processes are caught to run in the background to hog CPU.
• The firewall might be disabled not to automatically start and would shut itself down without reasons.
• Additional infections could be downloaded by Downloader.auo.

Purpose of downloader.auo

Though to have Downloader.auo would suffer from mechanical problems, what the Trojan horse aims is money. To make sure that it would stay long enough to get valuable information for money (log-in credential could lead to empty bank account and online whereabouts can be resold to online operators who want to know where to put ads or products for better promotion and more potential businesses), mechanical damages are required so that automatic removal could be prevented effectively.

Therefore, to safeguard our information is the exact reason to remove Downloader.auo instead of regaining back perfect operation. Below are the steps to help remove the Trojan horse. If you are not that computer savvy, it is advisable to consult security assistance from VilmaTech Online Support for quick fix so that no mistake would be made to result in unexpected issues.

Expert Shows How to Remove Downloader.auo from Computers

A - Please log off / disconnect the Internet.




B - remove restore file that help Downloader.auo to recover from removal.

Win+R key combination > Run box > type "CMD" > hit Enter key > type "-h -r C:\_RESTORE" > hit Enter key > type "DELETE _RESTORE" > hit Enter key.




C – end the processes related to Downloader.auo.
(tip: if you are not able to access Task Manager with the key combination, please access Run box from Start menu and type “CMD”; hit Enter key to put in “taskkill.exe /im msblast.exe” or “taskkill.exe /im teekids.exe” or “taskkill.exe /im penis32.exe”)

Access Task Manager > View >　select columns > tick "PID" and "Path name" > go to open up System Information > end the process with path name directing to  Downloader.auo's path(according to the threat alert) or the path that doesn't belong to system.




D – Remove temp files created by Downloader.auo.
(tip: if one owns Windows XP, it is suggested to execute the following steps after closing down System Restore function: right click on “My Computer”/”Computer” > Property > navigate to System Restore tab > tick “Turn off System Restore”)

turn off system restore to remove Downloader.auo

1. Press Win key and R key together, you’ll get a pop-up Run box.
2. Type “%Temp%” in the box and hit Enter key, you’ll be led to all temp files.
3. Remove the ones that are not loaded by system.
4. When done, return to the previous menu to click open “Temporary Internet Files”.
5. Locate the folder ”Content.[the browser you are using]+[the version you are using] ”, for example, content.ie5.
6. Remove all the files there (except index.dat).

E – show hidden files and folders to remove the ones created by Downloader.auo.

Windows 7/XP/Vista - Control Panel > user accounts and family safety > Folder Options > View tab > tick ‘Show hidden files and folders’ > non-tick ‘Hide protected operating system files (Recommended)’ > OK button.

Windows 8 - Windows Explorer > View tab > tick ‘File name extensions’ and ‘Hidden items’ > OK button.

• Access the detected path and remove all the items there.
• Access the following folders to remove the items generated on the day when  Downloader.auo was firstly detected:

C:\Windows
C:\Windows\System32
C:\windows\winstart.bat
C:\windows\wininit.ini
C:\windows\Autoexec.bat
C:\Users\[your username]\Documents\
C:\users\user\appdata\local\
C:\Program Files\

 (tip: to filter out the items generated on the day when Downloader.auo appeared, please right click on the space of a window that is under inspection to select "Arrange by"; then select "day" in the drop-down list)

Arrange by day to remove the items generated by downloader.auo

Downloader.auo Removal Tips

Log file is not going to help with average PC users in removing virus like Downloader.auo as it shows where’s wrong to the system. Without computer skills and virus knowledge, it is hard to make the most out the log file and achieve complete removal. It is recommended to remove Downloader.auo with the above offered steps manually and run the reputable anti-virus programs to optimize the affected computer by removing corrupted and defragment.

As what we have learned from the above paragraphs that Downloader.auo, as a Trojan horse, has the capability of allowing additional infiltration. If it is the case, one should remove them altogether so that Downloader.auo will not re-appear by attacking the vulnerability by other infections. If one does not know how to figure out if there’s another infection or the solution to certain virus, please do not hesitate to get exclusive help according to your concrete situation by contacting VilmaTech Online Support.

Reference:

Memory module – Wikipedia