Computer Hope
Microsoft => Microsoft DOS => Topic started by: the_mad_joker on May 09, 2010, 12:59:51 AM
-
Hi Every1
Please Test This Compiled Batch File Wether it Works Or Not
(Compiled With Bat To Exe Converter)
Please Inform Wether If It Contain virus (Usually Never)
Or Any Sort of Problem PLS It Is Very IMPORTANT
[recovering disk space - old attachment deleted by admin]
-
I don't intend to test this, and I don't advise anybody else to either.
-
Salmon Please Dont Make Me Spammer ::)
I Just Wanted To Test The Batch File Converted Into Exe
My Intention Was To Check Wether If A Compiled Batch Runs On Others Pc Or Not (Runs On My PC)
So Please Salmon..... ;D
-
Run in VMWare virtual machine; guest 32 bit Windows XP Professional SP3, host 64 bit Windows 7 Professional.
Scanned in guest OS with Avira Antivirus 9.0.0.422 updated 5 minutes ago - no infection found.
Hex viewer shows packed using UPX 3.02. My guess is it was created in Batch To Exe Converter 1.3.2.
When you press a key the window closes.
(http://i124.photobucket.com/albums/p29/badoit/joker.jpg)
-
Looks useful.
-
Looks useful.
Yes, look at the exciting source.
@echo off
color 0e
echo.
echo This Is A Test File For Malware
echo.
pause
Oh the excitement!
-
How did you view the source? I briefly scrolled down the executable in a text editor, but I could not see any obvious batch code. I also looked in my user temp folder for a batch script.
-
How did you view the source? I briefly scrolled down the executable in a text editor, but I could not see any obvious batch code. I also looked in my user temp folder for a batch script.
Windows 7 task manager allows you to view the command line passed to a program- it seems that the exe creates another exe (the encryption?) which then runs cmd with a temporary batch as an argument, which can be read this way (I actually read it through process explorer since I tried reading strings from the memory image first)
the temporary batch was stored in the application data folder for some reason.
-
I thought you may have used the Possum Reader ....
8)
-
Had Any 1 Tested It On QuickHeal
Coz On My Previous OS (XP) Any Batch Compiled With Bat To Exe Converter Was Caught As An Trojan By Quickheal 10.0
And Any Batch Comipled With QuickBatchFile Compiler Is Caught By Avast 4.8
RESULT
Avast Didnt Catch Batch File Compiled In Bat To Exe...
Quick Heal Didnt Catch Batch File Compiled In QuickBatchFile Compiler
So I Wanted Some1 To Test This On Avast 4.8 And QuickHeal 10.0
-Thnx In Advance
-
So I Wanted Some1 To Test This On Avast 4.8 And QuickHeal 10.0
Why don't you do these things yourself?
-
Why don't you do these things yourself?
As I've Said I've Tested It On My PC And Just Wanna See To Test It on Others PC
-
As I've Said I've Tested It On My PC And Just Wanna See To Test It on Others PC
why? That makes no sense. the two programs mentioned aren't going to magically run different on other peoples PCs.
-
madjoker, in English, only the near-illiterate and childish attention seekers start each word with a capital letter. Which are you? Or do you have another excuse?
-
near-illiterate and childish attention seekers
Deal!!!! The Above Written Words Resemble Me
-
why? That makes no sense
Dude I Cant Install Two Antivirus At A Time :-X
I Had Avast 4.8 , Hence I Wanted The Other One To Check With QuickHeal For The Above Mentioned Reasons :D
-
Yes, look at the exciting source.
@echo off
color 0e
echo.
echo This Is A Test File For Malware
echo.
pause
Oh the excitement!
You Forgot The Exit Command At The Last Line
-
You Forgot The Exit Command At The Last Line
No I didn't.
-
No I didn't
As You Wish ! Who Will Argue With You ::)