TheTechGuide Forum
General Category => Software => Topic started by: andrew on June 14, 2004, 12:53:53 PM
-
Is anyone aware of a worm that behaves as follows:
Somehow, a batch file, c.bat, and a file called " .pif" are present in the windows\system32 directory. The .pif file contains a script to ftp to a server ( in this case, it was a local machine on my network) and download a file called spsc.exe This is invoked through c.bat, after which point c.bat and .pif are deleted. I have yet to determine what, if any, harm is done by this worm.