PDA

View Full Version : Hidden extension.bat - a virus?


WE Sim
April 11th, 2002, 02:18 PM
Hi!

I was unpacking some Rar files using WinRar (shareware) *downloaded from cnet.com a couple of hours ago.

After unpacking, I uninstalled WinRar through Add/Remove Programs from the Control Panel and guess what? AVG (v6.0.346) alerted me that there was a virus named 'Hidden extension.bat'. No details of this 'virus' was available from AVG control panel.

I managed to trace the concerned file to C:\Documents and Settings\Administrator\Local Settings\Temp\Uninstaller.Rar and removed it manually. After which I re-ran AVG again and the result was clean.

Prior to the manual removal process I ran NAV2002 but it detected nothing.

Did AVG mis-identified the file as a virus? Any opinion(s) would be appreciated. Thanks

???

Paul Wilders
April 11th, 2002, 08:30 PM
Hi WE Sim,

Always nice having you around!

Since there's obviously no file left anymore to check, it's impossible to state anything with full certainty.

That said, looking at the description you posted, I tend to believe (well, a bit more than that, but anyway), this has been a false positive; "hidden extension.bat" probably triggered it.

Nevertheless, I full deep scan with a good and updated anti-trojan would be recommended, to be on the sure side.

regards.

paul