ss.bat file

[Joel]

I just transfered within my company to a new location.
The computer I am using has Windows 2000 Professional
installed. Whenever I boot up in the morning, an error
pops up saying that windows cannot find "ss.bat" file and
if it is no longer needed, to remove it from the registry.

I have three questions. How do I know if I need it? If I
do, where do I find it to load it onto the system? And if
I don't need it, how do I remove it from the registry so
this message stops popping up.

 

[Tim Newton [MSFT]]

This file could be anything, but according to Google, it is also a file name
commonly used by the Muma worm. You should be able to easily find where this
batch file is being called from the registry, but I would recommend having
the machine virus checked thoroughly also. Here are a couple of links that I
found that reference a file with this name:

http://www.f-secure.com/v-descs/muma.shtml
http://securityresponse.symantec.com/avcenter/venc/data/bat.mumu.a.worm.html

--
Tim Newton [MSFT]
(e-mail address removed)

Search our Knowledge Base at http://support.microsoft.com/directory
Visit the Windows 2000 Homepage at
http://www.microsoft.com/windows2000/default.asp
See the Windows NT Homepage at http://www.microsoft.com/ntserver/

NOTE: Please reply to the newsgroup and not directly to me. This allows
others to add to and benefit from these threads and also helps to ensure a
more timely response. Thank you!

This posting is provided "AS IS" without warranty either expressed or
implied, including, but not limited to, the implied warranties of
merchantability or fitness for a particular purpose. The views and opinions
expressed in this newsgroup posting are mine and do not necessarily express
or reflect the views and / or opinions of Microsoft.

 

[Tim Newton [MSFT]]

This file could be anything, but according to Google, it is also a file name
commonly used by the Muma worm. You should be able to easily find where this
batch file is being called from the registry, but I would recommend having
the machine virus checked thoroughly also. Here are a couple of links that I
found that reference a file with this name:

http://www.f-secure.com/v-descs/muma.shtml
http://securityresponse.symantec.com/avcenter/venc/data/bat.mumu.a.worm.html

--
Tim Newton [MSFT]
(e-mail address removed)

Search our Knowledge Base at http://support.microsoft.com/directory
Visit the Windows 2000 Homepage at
http://www.microsoft.com/windows2000/default.asp
See the Windows NT Homepage at http://www.microsoft.com/ntserver/

NOTE: Please reply to the newsgroup and not directly to me. This allows
others to add to and benefit from these threads and also helps to ensure a
more timely response. Thank you!

This posting is provided "AS IS" without warranty either expressed or
implied, including, but not limited to, the implied warranties of
merchantability or fitness for a particular purpose. The views and opinions
expressed in this newsgroup posting are mine and do not necessarily express
or reflect the views and / or opinions of Microsoft.