Welcome To Signs101.com: Largest Forum for Signmaking Professionals

Signs101.com: Largest Forum for Signmaking Professionals is the LARGEST online community & discussion forum for professional sign-makers and graphic designers.

 


  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Virus Alert . . . ! ! !

Discussion in 'Computer Hardware' started by Replicator, May 10, 2007.

  1. Replicator

    Replicator Major Contributor

    10,230
    9
    38
    Nov 19, 2006
    Sun City, AZ
    Since we didn't get this news from Techman, I thought I would share it !

    I'll bet 85-100% of you have this virus and don't even know it,

    It's basically harmless but renders your DOS functions useless.

    Here's how to tell if you have it . . . and if you do how to fix it :

    Go to C:\WINDOWS\_default and click it . . . This would normally bring up your

    DOS [or] Command.com screen. If you get and error message saying

    [SIZE=-1]C:/windows/_default.pif Invalid program[/SIZE][SIZE=-1] then you are infected and

    cannot run dos commands.

    Good News . . . Simple FIX !

    Open your C:\WINDOWS Folder and under the File tab select NEW and

    then Shortcut in the blank tab of the screen type command.com and hit

    next, in the blank shortcut box type _default and hit finish . . .

    You have now repaired your MSDOS/Command prompt program file !

    Good Luck . . . and may the FORCE be with you !

    oh' yeah, surprisingly every anti-virus software out there missed this one ! - LOL
    [/SIZE]
     
    Tags:
  2. Ken

    Ken Major Contributor

    5,484
    2
    38
    Feb 7, 2005
    BC
    So what do you mean:
    Go to C:\WINDOWS\_default and click it ?
    Explain.
    Ken
     
  3. Replicator

    Replicator Major Contributor

    10,230
    9
    38
    Nov 19, 2006
    Sun City, AZ
    Look for the icon in your windows directory that is the MSDOS icon . . .

    That is the _default.pif file . . .

    looks like this :
     

    Attached Files:

    • dos.jpg
      dos.jpg
      File size:
      2.9 KB
      Views:
      298
  4. Ken

    Ken Major Contributor

    5,484
    2
    38
    Feb 7, 2005
    BC
    Like, how many people are running true MS-DOS programs? Is this an issue?
    Why?
    Thanks.
    Ken
     
  5. gvgraphics

    gvgraphics Very Active Member

    2,182
    2
    0
    Mar 23, 2006


    Rep was just giving you a heads up, some programs including windows functions still use dos or dos based items to function correctly.
     
  6. Techman

    Techman Major Contributor

    8,520
    8
    38
    Jun 24, 2003
    michigan
    that gets rid of the virus?
    Could you provide a link to help expose this virus?
     
  7. gvgraphics

    gvgraphics Very Active Member

    2,182
    2
    0
    Mar 23, 2006
    It sounds to me like it corrupts the shortcut not the dos functions. If replacing the shortcut fixes it then there is no damage or issues with the dos functions them selfs.
     
  8. graphicallyg

    graphicallyg Member

    26
    0
    0
    Jun 23, 2006
    Thanks for the heads up. Doing a deep virus scan as we speak. LOL

    We use a DOS Prompt once in a blue moon and a techno geek friend of ours showed us the easiest way to pull it up.

    Go to Start, go to Run and type in 'CMD'. The DOS window pops up immediately.

    cheers
    andrew
     
  9. signage

    signage Major Contributor

    9,315
    41
    48
    Oct 5, 2005
    Penn
    What is the name of this virus???????????
     
  10. Lance

    Lance Member

    351
    1
    18
    Feb 6, 2005
    Melbourne, Australia

    OK, just did that, DOS window flashed on the screen for about a smidge of a second and was gone.

    Problem maybe ?
     
  11. Replicator

    Replicator Major Contributor

    10,230
    9
    38
    Nov 19, 2006
    Sun City, AZ
    Best I can come up with :

    C:\WINDOWS\_default.pif:bsfpxl:$DATA Infected:Trojan.Win32.Agent.bi

    C:\WINDOWS\_default.pif:irucvi:$DATA Infected:Trojan-Downloader.Win32.Agent.bc

    http://www.viruslist.com/en/viruses/encyclopedia?virusid=74718

    http://www.sophos.com/virusinfo/analyses/trojiefeatr.html

    The way I found out about this was with a customers computer, tying to

    help them find their MAC address, I got the message :

    [SIZE=-1]C:/windows/_default.pif Invalid program [/SIZE][SIZE=-1]and [/SIZE][SIZE=-1]DOS closed ! . . . I thought

    that was strange so I went to my computer, same thing. So went to all our computers

    at both work and home, and guess what . . . same thing ! . . . So I call my relatives

    half way around the world, and guess what . . . SAME !

    Just wanted to let as many people as I could know, that this was a serious

    but easy to fix issue . . . Good Luck ! :cool:
    [/SIZE]
     
  12. bob

    bob Major Contributor

    5,233
    299
    83
    Nov 4, 2005
    earth
    Interesting but apparently not particularly crippling.

    While windows\_default may not function, windows\system32\cmd.exe, which is the command interpreter itself, works just fine.

    Nonetheless, it's an annoyance. Just how do you get rid of it?
     
  13. SignosaurusRex

    SignosaurusRex Major Contributor

    8,439
    423
    83
    Mar 7, 2007
    Washington State
    My God, Rep! You've infected us all! LOL
     
  14. Replicator

    Replicator Major Contributor

    10,230
    9
    38
    Nov 19, 2006
    Sun City, AZ
    That is explained in post #1 of this thread !
     
  15. gvgraphics

    gvgraphics Very Active Member

    2,182
    2
    0
    Mar 23, 2006
    Come on Rep, You know Bob doesn't read well, he needs pictures of a step by step.:Big Laugh
     
  16. Signsforwhile

    Signsforwhile Very Active Member

    1,401
    0
    36
    Feb 17, 2006
    New York
    he he....whats dos? :wink:
     
  17. Replicator

    Replicator Major Contributor

    10,230
    9
    38
    Nov 19, 2006
    Sun City, AZ
    True the windows\system32\cmd.exe may work just fine to launch DOS,

    but I just thought everyone might like to know about a potential virus, as small

    as it is . . . Just sharing my findings !
     
  18. Techman

    Techman Major Contributor

    8,520
    8
    38
    Jun 24, 2003
    michigan
    sorry,
    i don't see any connection between losing the dos command shorcut and the trojans you listed above..

    I don't see any route of infection and I do not see any connection to the virus and the trojans actions you linked above.

    Source of your virus alert please?
     
  19. Replicator

    Replicator Major Contributor

    10,230
    9
    38
    Nov 19, 2006
    Sun City, AZ
    Techman,

    I am not the computer guru you are [obviously], but I was just pointing out

    a situation in which it appears that the dos command shortcuts were somehow

    compromised, I found the only sources on the subject that I could find.

    Maybe a virus ? maybe not ?, but a definite glitch, problem, security issue,

    whatever you want to call it, and I thought I would share my findings.

    Sorry for trying to expose what I felt might be a security flaw. Next time

    I'll just keep my mouth shut, as you are the resident expert here !
     
  20. Marlene

    Marlene Major Contributor

    10,970
    264
    83
    Jun 8, 2004
    Vermont
    Many people want to know the source of the info before they do something and it's not an insult, it's just good sense. Remember the "Teddy Bear" hoax a couple of years ago?
     
Loading...

Share This Page

 


Loading...