|
Posted by Richard Urban on May 29, 2009, 1:54 pm
If you were Registered and logged in, you could reply and use other advanced thread options
newsgroups!
--
Richard Urban
Microsoft MVP
Windows Desktop Experience
> Claire Bennette wrote:
>> Dear all Recently I noticed that My Computer creating funny bat file
>> called xh319r9b.bat.
>> It uses autorun.inf and when I delete those 2 files it creates again in 5
>> seconds. How
>> can I remove those 2 files I tried to scan those 2 files in Mcafee and
>> Norton Both Its
>> not recognize it.
>
> Hello Claire:
>
> This can be looked at from several directions. This might be a legitimate
> file whose name is purposefully randomized for its protection.
>
> or...
>
> This could be malware that's also protecting itself with the same
> randomized name technique.
>
> You could try submitting the batch file (through upload) to:
>
> <https://www.virustotal.com/>
>
> If the contents of the batch file isn't too long, you could post its
> contents here in a follow-up post for our analysis.
>
> Although you've called them by their manufacturer names, you haven't told
> us which exact and specific products you are scanning the batch file with.
>
> Are you also running antispyware applications? Please reveal as much
> system information as is available.
>
> Pete
> --
> 1PW @?6A62?FEH9:DE=6o2@=]4@> [r4o7t]
| 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map