PC Review Forums Newsgroups Microsoft AntiSpyware Spyware Discussion URGENT: Catastrophic behaviour

Reply

URGENT: Catastrophic behaviour

 
Thread Tools Rate Thread
Old 02-03-2005, 08:10 PM   #1
Juhani Suhonen
Guest
 
Posts: n/a
Default URGENT: Catastrophic behaviour


While AntiSpyware notices before allowing .BAT to run,
the default folder is changed from original to
C:\windows\system32 ! UGLY!

try this :

-- test.bat
DEL *.* /Q /S /F

doubleclicking .BAT file on explorer (whatever the actual
folder is) deletion will begin in c:\windows\system32
folder when user accepts the operation


Juhani Suhonen


  Reply With Quote
Old 02-03-2005, 08:28 PM   #2
Andre Da Costa
Guest
 
Posts: n/a
Default Re: URGENT: Catastrophic behaviour

The last time I played with .bat, was when I was trying cutomize my
autoexec.bat file for Windows 3.1.

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

"Juhani Suhonen" <anonymous@discussions.microsoft.com> wrote in message
news:39e001c51f63$ece60c90$a401280a@phx.gbl...
> While AntiSpyware notices before allowing .BAT to run,
> the default folder is changed from original to
> C:\windows\system32 ! UGLY!
>
> try this :
>
> -- test.bat
> DEL *.* /Q /S /F
>
> doubleclicking .BAT file on explorer (whatever the actual
> folder is) deletion will begin in c:\windows\system32
> folder when user accepts the operation
>
>
> Juhani Suhonen
>
>



  Reply With Quote
Old 02-03-2005, 08:41 PM   #3
plun
Guest
 
Posts: n/a
Default Re: URGENT: Catastrophic behaviour

Andre Da Costa wrote:
> The last time I played with .bat, was when I was trying cutomize my
> autoexec.bat file for Windows 3.1.


Well, you are for sure no hacker.........

You can do a lot within cmd if you try or remember.

Its really fun to do things with cmd and old fashioned dos
tricks.

About this DEL, I dont know what he means. Too lazy to find
my DOS manual.

--
plun

  Reply With Quote
Old 02-03-2005, 08:44 PM   #4
Bill Sanderson
Guest
 
Posts: n/a
Default Re: URGENT: Catastrophic behaviour

You are absolutely right--and thanks for reporting this, and helping
publicize the issue.

This issue is know to Microsoft and being fixed.

Further guidance on issues around use of scripting can be found in this
article:

http://www.microsoft.com/technet/sc...es/antispy.mspx

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

"Juhani Suhonen" <anonymous@discussions.microsoft.com> wrote in message
news:39e001c51f63$ece60c90$a401280a@phx.gbl...
> While AntiSpyware notices before allowing .BAT to run,
> the default folder is changed from original to
> C:\windows\system32 ! UGLY!
>
> try this :
>
> -- test.bat
> DEL *.* /Q /S /F
>
> doubleclicking .BAT file on explorer (whatever the actual
> folder is) deletion will begin in c:\windows\system32
> folder when user accepts the operation
>
>
> Juhani Suhonen
>
>



  Reply With Quote
Old 02-03-2005, 08:48 PM   #5
Robert de Vos
Guest
 
Posts: n/a
Default Re: URGENT: Catastrophic behaviour

plun wrote:

> Andre Da Costa wrote:
>
>> The last time I played with .bat, was when I was trying cutomize my
>> autoexec.bat file for Windows 3.1.

>
>
> Well, you are for sure no hacker.........
>
> You can do a lot within cmd if you try or remember.
>
> Its really fun to do things with cmd and old fashioned dos tricks.
>
> About this DEL, I dont know what he means. Too lazy to find
> my DOS manual.


Even for that there is a function in XP. At the prompt C:>help del




Robert (Netherlands)
  Reply With Quote
Old 02-03-2005, 09:07 PM   #6
plun
Guest
 
Posts: n/a
Default Re: URGENT: Catastrophic behaviour

Robert de Vos wrote:
> Even for that there is a function in XP. At the prompt C:>help del
>
>


Thanks

It was "UGLY"..............

--
plun
  Reply With Quote
Old 02-03-2005, 09:34 PM   #7
Tester
Guest
 
Posts: n/a
Default Re: URGENT: Catastrophic behaviour

I hope no one trys this in their windows folder or the root of C.

/Q Queit mode, do not ask if ok to delete on global wildcard
/S Delete Specified files from all subdirectories (in this case *.*
everything)
/F Force deleting of read-only files.

So it's going to try deleting everything without asking for permission. I
hope you are on a test machine if you try this at the root of C.

"Juhani Suhonen" <anonymous@discussions.microsoft.com> wrote in message
news:39e001c51f63$ece60c90$a401280a@phx.gbl...
> While AntiSpyware notices before allowing .BAT to run,
> the default folder is changed from original to
> C:\windows\system32 ! UGLY!
>
> try this :
>
> -- test.bat
> DEL *.* /Q /S /F
>
> doubleclicking .BAT file on explorer (whatever the actual
> folder is) deletion will begin in c:\windows\system32
> folder when user accepts the operation
>
>
> Juhani Suhonen
>
>



  Reply With Quote
Old 02-03-2005, 09:49 PM   #8
JohnF.
Guest
 
Posts: n/a
Default Re: URGENT: Catastrophic behaviour

A trojan poster?


"Tester" <tester@fcgi.com> wrote in message
news:thX8j$2HFHA.2000@cpmsftngsa06.privatenews.microsoft.com...
>I hope no one trys this in their windows folder or the root of C.
>
> /Q Queit mode, do not ask if ok to delete on global wildcard
> /S Delete Specified files from all subdirectories (in this case *.*
> everything)
> /F Force deleting of read-only files.
>
> So it's going to try deleting everything without asking for permission. I
> hope you are on a test machine if you try this at the root of C.
>
> "Juhani Suhonen" <anonymous@discussions.microsoft.com> wrote in message
> news:39e001c51f63$ece60c90$a401280a@phx.gbl...
>> While AntiSpyware notices before allowing .BAT to run,
>> the default folder is changed from original to
>> C:\windows\system32 ! UGLY!
>>
>> try this :
>>
>> -- test.bat
>> DEL *.* /Q /S /F
>>
>> doubleclicking .BAT file on explorer (whatever the actual
>> folder is) deletion will begin in c:\windows\system32
>> folder when user accepts the operation
>>
>>
>> Juhani Suhonen
>>
>>

>
>



  Reply With Quote
Old 02-03-2005, 09:50 PM   #9
Andre Da Costa
Guest
 
Posts: n/a
Default Re: URGENT: Catastrophic behaviour

Bill saves the day. We can go home now.

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

"Tester" <tester@fcgi.com> wrote in message
news:thX8j$2HFHA.2000@cpmsftngsa06.privatenews.microsoft.com...
>I hope no one trys this in their windows folder or the root of C.
>
> /Q Queit mode, do not ask if ok to delete on global wildcard
> /S Delete Specified files from all subdirectories (in this case *.*
> everything)
> /F Force deleting of read-only files.
>
> So it's going to try deleting everything without asking for permission. I
> hope you are on a test machine if you try this at the root of C.
>
> "Juhani Suhonen" <anonymous@discussions.microsoft.com> wrote in message
> news:39e001c51f63$ece60c90$a401280a@phx.gbl...
>> While AntiSpyware notices before allowing .BAT to run,
>> the default folder is changed from original to
>> C:\windows\system32 ! UGLY!
>>
>> try this :
>>
>> -- test.bat
>> DEL *.* /Q /S /F
>>
>> doubleclicking .BAT file on explorer (whatever the actual
>> folder is) deletion will begin in c:\windows\system32
>> folder when user accepts the operation
>>
>>
>> Juhani Suhonen
>>
>>

>
>



  Reply With Quote
Old 04-03-2005, 10:07 PM   #10
Robert de Vos
Guest
 
Posts: n/a
Default Re: URGENT: Catastrophic behaviour

Andre Da Costa wrote:

> The last time I played with .bat, was when I was trying cutomize my
> autoexec.bat file for Windows 3.1.
>

For me it was 5 seconds ago. I was editing for my keyboard. I have a
dutch keyboard , but some programmes are thinking in US mode. So i have
problems with dots and commas (This can be a problem in financial
programs), so i must make a .bat file with the kb16 command in it. The
most serious financial software in our country is stil DOS. (Call us
ignorant )

But now the problem: When i start a .bat file on the desktop MSAS alerts
me that i am starting a .bat file. So far so good. But when i dont start
it from my desktop but in a dos windows it doesnt give a warning. I dont
know if this is an error or not, but i mention it.


ps on my other computer i still have windows 3.1 32bits (ecomstation)

--
Greetings Robert.

The Netherlands
  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off