ass.cmd in my startup folder - what is it?

[Leros]

i noticed a file called ass.cmd in my startup folder and im not sure what it is. I googled it and didnt really find anything. Anybody know?

And nobody has access to my computer except me.

Edit: Figured I would include the code.

Sink started at 2005/07/11 18:13:53.0796
cmdow @ /HID :
@echo off :
@start /b mshta C:\cmd.hta /s :
Sink stopped at 2005/07/11 18:13:53.0796
Sink started at 2005/07/11 18:14:15.0765
cmdow @ /HID :
@echo off :
@start /b mshta C:\cmd.hta /s :
Sink stopped at 2005/07/11 18:14:15.0765

 

[CreativeTom]

Well if I had to guess you have some sort of malware on your machine. I think it sounds more like some type of virus rather then spyware, I would try multiple things to remove it, the easiest things to do are start with any resource you can find to search and remove virii from your machine.

 

[Leros]

Ive done ad-aware, ms antispyware, norton antivirus 2004 and spybot search and destroy. They have all come up clean.

 

[Mark R]

Can you track down the c:\cmd.hta file, and post the contents (or provide a link)?

It should be a text file, so notepad is likely to be able to read it.

 

[Leros]

Well, it doesnt seem to exist. Of course due to the file (ass.cmd) notepad opens two instances of it, but they are both blank.

 

[TheCorrigan]

Hi,
I found that cmd as well. Actually Norton's kept stopping a malicious script, cmd.hta . So I tracked it down and in a blind panic I deleted it. Then when I restarted blank cmd windows went up, 8 of them. So in another blind panic I found ass.cmd in my start up and deleted that. It seems to have stopped the problem... Or did it?

Clueless in Sarasota