Hack Forums
[SOLVED] Is This A Virus [SOLVED] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [SOLVED] Is This A Virus [SOLVED] (/showthread.php?tid=2525137)



[SOLVED] Is This A Virus [SOLVED] - l Anonymous l - May 25, 2012

Just download Winpatrol and I noticed this suspicious file. Don't know what It Is. Any help is appreciated.

[img]http://s19.postimage.org/ej76v8a7n/image.png[/img]


* - Feminist - May 25, 2012

Maybe show us the source code of the bat file? Open it with notepad. .bat extensions could also execute executable files.


* - l Anonymous l - May 25, 2012

C:\Users\MRHappy\AppData\Local\LogMeIn Rescue Applet


* - Raz3d - May 25, 2012

Please right click on it and press edit or open with notepad.

Edit would be easier to do.

Copy the code and paste it here.


* - l Anonymous l - May 25, 2012

@echo off
echo Cleaning up LogMeIn Rescue Applet folder...
:RemoveFiles
rd /S/Q "C:\Users\MRHappy\AppData\Local\LOGMEI~1\LMIR0001.tmp\" > NUL
:end
del "C:\Users\MRHappy\AppData\Local\LOGMEI~1\LMIR0001.tmp.bat"
del "C:\Users\MRHappy\AppData\Local\LOGMEI~1\LMIR0001.tmp_r.bat"


* - Raz3d - May 25, 2012

(May 25, 2012 10:04 AM)l Anonymous l Wrote:  @echo off
echo Cleaning up LogMeIn Rescue Applet folder...
:RemoveFiles
rd /S/Q "C:\Users\MRHappy\AppData\Local\LOGMEI~1\LMIR0001.tmp\" > NUL
:end
del "C:\Users\MRHappy\AppData\Local\LOGMEI~1\LMIR0001.tmp.bat"
del "C:\Users\MRHappy\AppData\Local\LOGMEI~1\LMIR0001.tmp_r.bat"

It deletes the files : LOGMEI~1\LMIR0001.tmp_r.bat"

LOGMEI~1\LMIR0001.tmp.bat"


* - l Anonymous l - May 25, 2012

(May 25, 2012 10:06 AM)Cudd Wrote:  It deletes the files : LOGMEI~1\LMIR0001.tmp_r.bat"

LOGMEI~1\LMIR0001.tmp.bat"
Ok thank's for the help, much appreciated.