MS Spyware Deleted all EXEs in my Windows System 32 Directory

[Jeff Laney]

I ran a script that lives in my W: drive and deletes the last built EXE before it starts a new build. Well the MS Sypware tool warns of a new running batch file and asks if you want to allow it. If you click yes it runs it, BUT it has changed the process to be in C:\Windows\System32!

Therefore I deleted all *.exe files from my system folder. There is no way around this other than to add an out in the script to test for the current directory. If you say you don't allow it will ask you every time you run the batch file. If you select allow to allow the batch file it will change it on the first run, but each subsequent run will be from the correct location.

Jeff Laney

(e-mail address removed)

 

[Bill Sanderson]

Thanks for this report Jeff, and for your equanimity in the face of the
occurrence!

This is a known issue with these beta builds--and, checking the release
notes in the Help file for build .509, it is one which is not yet covered in
the release notes.

By known issue I mean that it has been reported multiple times in these
groups, and that Microsoft is, in fact, working on fixing it.

It is covered in an excellent article located here, which our attention was
drawn to by a poster in the Announcements group, as I recall:

http://www.microsoft.com/technet/scriptcenter/resources/articles/antispy.mspx

I'm sorry this happened, and impressed at your reserve in describing the
occurrence.

Thanks for posting the warning clearly for others, as well.