TIP: Click on subject to list as thread! ANSI
echo: batpower
to: BEN RITCHEY
from: Gerald Miller
date: 2003-12-09 20:49:22
subject: Batch file virus ???

Hello BEN,

    Responding to a post in the BATPOWER area:
    On Tuesday December 09 2003 at 12:25,
    BEN RITCHEY [1:393/68] wrote to GERALD MILLER,
    about: Re: Batch file virus ???

 BR> * An ongoing debate between Gerald Miller and Bat Lang rages on ...

I don't think Bat has seen my post yet, so it's not much of a rage...  ;-))

 GM: >> Today, I ran the F-Prot anti virus program and got the
 GM: >> following error
 GM: >> message:  C:\U\GG.BAT  Infection: BAT/Backdarter.D
 GM: >> I would like to post the batch file so that someone can tell me
 GM: >> how this file contains a virus and how to decontaminate it,
 GM: >> #_*BUT*_#, I don't want to propagate a viral infection to other
 GM: >> systems.

 BR> Right, you should NEVER post a virus/trojan in any public forum. Pack
 BR> the infected file into a Zip archive and submit to the F-Prot site, or
 BR> if you don't have internet access, crash the Zip direct to me
 BR> (1:393/68) and I'll verify the infection, submit it to Frisk and let
 BR> you know how to fix it.

 BR> Of course, if Bat wants to handle it, that's up to him. :-)

Thanks for your response and I knew it was more prudent to ask rather than
blindly post the sucka... 

Since I am a registered user of F-Prot, I submitted a request on their site
and received the "auto-response" from the support department.  I am still
waiting for them to respond fully via email.

If I don't receive an email response from them by the weekend, I'll have to
go back to the site and see what the process is for submitting an infected
file.  I didn't realized that you could submit infected file to them UNTIL
after I had completed the "Support Request" form.

I was really astounded to find out that a batch file could harbor a virus.

And, yes, I would like to get Bat's view on the situation.  Has anyone one
else encountered a viral infection in a batch file?

           Cheers ... Gerald

... There is a solution to every problem. The hard part is finding it.
--- GoldED+/DPMI32 v1.1.5-30512
* Origin: Hard Drive Backed Up? Try Hex-Lax! (1:342/512)
SEEN-BY: 633/267 270
@PATH: 342/512 5 140/1 106/2000 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.