Virus Alert . . . ! ! !

[Replicator]

Since we didn't get this news from Techman, I thought I would share it !

I'll bet 85-100% of you have this virus and don't even know it,

It's basically harmless but renders your DOS functions useless.

Here's how to tell if you have it . . . and if you do how to fix it :

Go to C:\WINDOWS\_default and click it . . . This would normally bring up your

DOS [or] Command.com screen. If you get and error message saying

C:/windows/_default.pif Invalid program then you are infected and

cannot run dos commands.

Good News . . . Simple FIX !

Open your C:\WINDOWS Folder and under the File tab select NEW and

then Shortcut in the blank tab of the screen type command.com and hit

next, in the blank shortcut box type _default and hit finish . . .

You have now repaired your MSDOS/Command prompt program file !

Good Luck . . . and may the FORCE be with you !

oh' yeah, surprisingly every anti-virus software out there missed this one ! - LOL

[Ken]

So what do you mean:
Go to C:\WINDOWS\_default and click it ?
Explain.
Ken

[Replicator]

Look for the icon in your windows directory that is the MSDOS icon . . .

That is the _default.pif file . . .

looks like this :

[Ken]

Like, how many people are running true MS-DOS programs? Is this an issue?
Why?
Thanks.
Ken

[gvgraphics]

Like, how many people are running true MS-DOS programs? Is this an issue?
Why?
Thanks.
Ken



Rep was just giving you a heads up, some programs including windows functions still use dos or dos based items to function correctly.

[Techman]

that gets rid of the virus?
Could you provide a link to help expose this virus?

[gvgraphics]

It sounds to me like it corrupts the shortcut not the dos functions. If replacing the shortcut fixes it then there is no damage or issues with the dos functions them selfs.

[graphicallyg]

Thanks for the heads up. Doing a deep virus scan as we speak. LOL

We use a DOS Prompt once in a blue moon and a techno geek friend of ours showed us the easiest way to pull it up.

Go to Start, go to Run and type in 'CMD'. The DOS window pops up immediately.

cheers
andrew

[signage]

What is the name of this virus???????????

[Lance]

Thanks for the heads up. Doing a deep virus scan as we speak. LOL

We use a DOS Prompt once in a blue moon and a techno geek friend of ours showed us the easiest way to pull it up.

Go to Start, go to Run and type in 'CMD'. The DOS window pops up immediately.

cheers
andrew


OK, just did that, DOS window flashed on the screen for about a smidge of a second and was gone.

Problem maybe ?

[Replicator]

that gets rid of the virus?
Could you provide a link to help expose this virus?

Best I can come up with :

C:\WINDOWS\_default.pif:bsfpxl:$DATA Infected:Trojan.Win32.Agent.bi

C:\WINDOWS\_default.pif:irucvi:$DATA Infected:Trojan-Downloader.Win32.Agent.bc

http://www.viruslist.com/en/viruses/encyclopedia?virusid=74718

http://www.sophos.com/virusinfo/analyses/trojiefeatr.html

The way I found out about this was with a customers computer, tying to

help them find their MAC address, I got the message :

C:/windows/_default.pif Invalid program and DOS closed ! . . . I thought

that was strange so I went to my computer, same thing. So went to all our computers

at both work and home, and guess what . . . same thing ! . . . So I call my relatives

half way around the world, and guess what . . . SAME !

Just wanted to let as many people as I could know, that this was a serious

but easy to fix issue . . . Good Luck ! :cool:

[bob]

Interesting but apparently not particularly crippling.

While windows\_default may not function, windows\system32\cmd.exe, which is the command interpreter itself, works just fine.

Nonetheless, it's an annoyance. Just how do you get rid of it?

[SignosaurusRex]

My God, Rep! You've infected us all! LOL

[Replicator]

Just how do you get rid of it?

That is explained in post #1 of this thread !

[gvgraphics]

Come on Rep, You know Bob doesn't read well, he needs pictures of a step by step.:Big Laugh

[HudsonSignCo]

he he....whats dos? :wink:

[Replicator]

While windows\_default may not function, windows\system32\cmd.exe, which is the command interpreter itself, works just fine.


True the windows\system32\cmd.exe may work just fine to launch DOS,

but I just thought everyone might like to know about a potential virus, as small

as it is . . . Just sharing my findings !

[Techman]

sorry,
i don't see any connection between losing the dos command shorcut and the trojans you listed above..

I don't see any route of infection and I do not see any connection to the virus and the trojans actions you linked above.

Source of your virus alert please?

[Replicator]

sorry,
i don't see any connection between losing the dos command shorcut and the trojans you listed above..

I don't see any route of infection and I do not see any connection to the virus and the trojans actions you linked above.

Source of your virus alert please?

Techman,

I am not the computer guru you are [obviously], but I was just pointing out

a situation in which it appears that the dos command shortcuts were somehow

compromised, I found the only sources on the subject that I could find.

Maybe a virus ? maybe not ?, but a definite glitch, problem, security issue,

whatever you want to call it, and I thought I would share my findings.

Sorry for trying to expose what I felt might be a security flaw. Next time

I'll just keep my mouth shut, as you are the resident expert here !

[Marlene]

Many people want to know the source of the info before they do something and it's not an insult, it's just good sense. Remember the "Teddy Bear" hoax a couple of years ago?

[Sign-Man Signs]

One word AVAST. Best anti-virus on the market and it's free. We've used them all and I do mean all. Avast protects everything. Haven't had a virus or trojan in 3 years.
Here's the link

www.avast.com/eng/avast_4_home.html

[Techman]

Sorry for trying to expose what I felt might be a security flaw. Next time
I'll just keep my mouth shut, as you are the resident expert here !

Sorry, you feel that way,
I am looking to learn something. So I requested that you direct me to more information. I cannot make the connection to the virus and that raises curiosity to a high level. In other words I need to know.

[Replicator]

All I did to try and research this issue was do a search for :

C:/windows/_default.pif Invalid program

That's where I came up with the links above.

At the very least it's some sort of exploit that interferes with DOS shortcuts,

NO BIG DEAL I guess . . . I fixed mine, but that's just me.

I understand peoples skepticism, but I like to keep my computer clean and

virus free at all times, I just felt this was worth a look . . . Virus or not !

I guess I should have posted POSSIBLE VIRUS ALERT !

[mladams7259]

Very interesting.

[Geary]

I love the sound of viruses......as they fly right by my OS. hehe....

Hey Rep, buddy, I for one really appreciate your intention here. Sorry you don't get the same "vibe" from some of your PC buds. :tongue:

[signage]

Well Geary I have been running PC since 1987 on line since 1989 and so far i have never had a virus! knock on wood!

[mediaman]

signage,
I'm with you. I've been a heavy Windows user since 3.1, now on XP Pro, and have never had a virus. I'm online 6-10 hours a day (work and home combined) and I rarely turn my home PC off. I have WinPatrol for cookie alerts, home page alerts and new software alerts and have never had a problem.

[Replicator]

Well, I apologize for rushing to judgment with the word VIRUS . . .

I should have just used the word Exploit instead.

My intentions were good . . . even if my wording was bad !

The fix still works and the shortcuts for those of you that have this problem

can take advantage of fixing the issue, probably just a Microsoft screw-up !