View Single Post
  #15  
Old 03-12-2008, 07:41
nando2002 nando2002 is offline
Die Hard Member
 
Join Date: Apr 2007
Location: Portugal
Posts: 431
Thanks: 0
Thanked 2 Times in 2 Posts
nando2002 is on a distinguished road
This is weird:
Avast complains about a Win32:Agent-ACPP [Trj] in the provided RAR but after extract, no files has that virus.

From VirusTotal:
  • Antivírus Versão Última Atualização Resultado
  • AhnLab-V3 2008.12.4.0 2008.12.03 Win-Trojan/Agent.74240.U
  • AntiVir 7.9.0.36 2008.12.03 -
  • Authentium 5.1.0.4 2008.12.03 W32/Trojan2.ZRX
  • Avast 4.8.1281.0 2008.12.02 -
  • AVG 8.0.0.199 2008.12.03 -
  • BitDefender 7.2 2008.12.03 Trojan.Generic.244583
  • CAT-QuickHeal 10.00 2008.12.03 -
  • ClamAV 0.94.1 2008.12.03 Trojan.Agent-13687
  • DrWeb 4.44.0.09170 2008.12.03 Trojan.StartPage.21149
  • eSafe 7.0.17.0 2008.12.02 -
  • eTrust-Vet 31.6.6241 2008.12.03 Win32/Gromny.A
  • Ewido 4.0 2008.12.03 -
  • F-Prot 4.4.4.56 2008.12.03 [b]W32/Trojan2.ZRX
  • F-Secure 8.0.14332.0 2008.12.03 -
  • Fortinet 3.117.0.0 2008.12.03 -
  • GData 19 2008.12.03 Trojan.Generic.244583
  • Ikarus T3.1.1.45.0 2008.12.03 Trojan-Dropper.Win32.Delf
  • K7AntiVirus 7.10.541 2008.12.03 Worm.BAT.Autorun.g
  • Kaspersky 7.0.0.125 2008.12.03 -
  • McAfee 5452 2008.12.02 -
  • McAfee+Artemis 5452 2008.12.02 -
  • Microsoft 1.4205 2008.12.03 -
  • NOD32 3661 2008.12.03 -
  • Norman 5.80.02 2008.12.02 -
  • Panda 9.0.0.4 2008.12.03 -
  • PCTools 4.4.2.0 2008.12.03 -
  • Prevx1 V2 2008.12.03 -
  • Rising 21.06.22.00 2008.12.03 -
  • SecureWeb-Gateway 6.7.6 2008.12.03 -
  • Sophos 4.36.0 2008.12.03 -
  • Sunbelt 3.1.1832.2 2008.12.01 -
  • Symantec 10 2008.12.03 -
  • TheHacker 6.3.1.2.172 2008.12.02 -
  • TrendMicro 8.700.0.1004 2008.12.03 -
  • VBA32 3.12.8.10 2008.12.03 Trojan.Win32.Agent.euj
  • ViRobot 2008.12.3.1498 2008.12.03 -
  • VirusBuster 4.5.11.0 2008.12.03 -
the so called "Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.exe" is a simple Delphi program that creates a hidden batch file in the temp folder with a script for split the files.

The problem is the DVD content must be also in the temp folder or will never run properly.
Code:
@shift
@echo off
title Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
color 1a

:0
if not exist autorun\ goto prob1
if not exist data\ goto prob1
if not exist directx\ goto prob1
if not exist support\ goto prob1
if not exist windows\ goto prob1
if not exist autorun.dat goto prob1
if not exist easetup.exe goto prob1
if not exist autorun.exe goto prob1
if not exist core_0.cab goto prob1
if not exist core_1.cab goto prob1
if not exist core_2.cab goto prob1
if not exist core_3.cab goto prob1
if not exist core_4.cab goto prob1
if not exist core_5.cab goto prob1
if not exist core_6.cab goto prob1
if not exist core_7.cab goto prob1
if not exist group0.cab goto prob1
if not exist launch10.cab goto prob1
if not exist launche1.cab goto prob1
if not exist launche2.cab goto prob1
if not exist launche3.cab goto prob1
if not exist maps_0.cab goto prob1
if not exist maps_1.cab goto prob1
if not exist maps_2.cab goto prob1
if not exist ra3.ico goto prob1
if not exist retaile8.cab goto prob1
if not exist retaile9.cab goto prob1
if not exist lang*.cab goto prob1
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Attention: This file is not guarantee bug-free. Use it with your own risk!
echo.
pause

:1
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
set /p a=Are you sure that you want to continue? [Y]es [N]o ... 
if "%a%"=="Y" goto 2
if "%a%"=="y" goto 2
if "%a%"=="N" goto cancel
if "%a%"=="n" goto cancel
goto cancel

:2
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Do you want to add the files in ISO too? [Y]es [N]o ...
set /p b=If yes,Make sure that you have at least 8 gb free space in your disk...  
if "%b%"=="n" goto 3
if "%b%"=="N" goto 3
if "%b%"=="y" goto 3b
if "%b%"=="Y" goto 3b

goto cancel

:3
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Please Wait...
echo.
if exist "disk 1" goto prob2
if exist "disk 2" goto prob2
md "Disk 1\data"
md "disk 2\data"
move autorun "disk 1"
move data\EnglishAudio.big "disk 1\data"
move data\EnglishMovieAudio.big "disk 1\data"
move directx "disk 1"
move support "disk 1"
move windows "disk 1"
move autorun.dat "disk 1"
move easetup.exe "disk 1"
move autorun.exe "disk 1"
move core_0.cab "disk 1"
move core_1.cab "disk 1"
move core_2.cab "disk 1"
move core_3.cab "disk 1"
move core_4.cab "disk 1"
move core_5.cab "disk 1"
move core_6.cab "disk 1"
move core_7.cab "disk 1"
move group0.cab "disk 1"
move launch10.cab "disk 1"
move launche1.cab "disk 1"
move launche2.cab "disk 1"
move launche3.cab "disk 1"
move maps_0.cab "disk 1"
move maps_1.cab "disk 1"
move maps_2.cab "disk 1"
move retaile8.cab "disk 1"
move retaile9.cab "disk 1"
move lang*.cab "disk 1"
copy ra3.ico "disk 1"
move ra3.ico "disk 2"
move data\movies "disk 2\data"
move data\moviesxml "disk 2\data"
rd /q data
goto 4

:3b
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Please Wait...
echo.
if exist "disk 1" goto prob2b
if exist "disk 2" goto prob2b
md "Disk 1\data"
md "disk 2\data"
move autorun "disk 1"
move data\EnglishAudio.big "disk 1\data"
move data\EnglishMovieAudio.big "disk 1\data"
move directx "disk 1"
move support "disk 1"
move windows "disk 1"
move autorun.dat "disk 1"
move easetup.exe "disk 1"
move autorun.exe "disk 1"
move core_0.cab "disk 1"
move core_1.cab "disk 1"
move core_2.cab "disk 1"
move core_3.cab "disk 1"
move core_4.cab "disk 1"
move core_5.cab "disk 1"
move core_6.cab "disk 1"
move core_7.cab "disk 1"
move group0.cab "disk 1"
move launch10.cab "disk 1"
move launche1.cab "disk 1"
move launche2.cab "disk 1"
move launche3.cab "disk 1"
move maps_0.cab "disk 1"
move maps_1.cab "disk 1"
move maps_2.cab "disk 1"
move retaile8.cab "disk 1"
move retaile9.cab "disk 1"
move lang*.cab "disk 1"
copy ra3.ico "disk 1"
move ra3.ico "disk 2"
move data\movies "disk 2\data"
move data\moviesxml "disk 2\data"
rd /q data
goto 4b

:4b
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Please Wait...
echo.
echo [autorun]>"disk 1\autorun.inf"
echo open=Autorun.exe>>"disk 1\autorun.inf"
echo icon=ra3.ico>>"disk 1\autorun.inf"
echo Name=Red Alert 3 >>"disk 1\autorun.inf"
echo [autorun]>"disk 2\autorun.inf"
echo open=0 >>"disk 2\autorun.inf"
echo icon=ra3.ico>>"disk 2\autorun.inf"
echo Name=Red Alert 3 >>"disk 2\autorun.inf"
goto 5b

:5b
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Please Wait...
echo.
echo Creating ISO files...
echo.
%myfiles%\miso.exe "disk 1.iso" -l "disk 1" -a "disk 1\*.*"
%myfiles%\miso.exe "disk 2.iso" -l "disk 2" -a "disk 2\*.*"
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo  ___    ___          ___
echo I   \  /   \ I\   I I
echo I    \ I   I I \  I I__
echo I    / I   I I  \ I I
echo I___/  \___/ I   \I I___
echo.
echo.
echo.
pause
exit

:4
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Please Wait...
echo.
echo [autorun]>"disk 1\autorun.inf"
echo open=Autorun.exe>>"disk 1\autorun.inf"
echo icon=ra3.ico>>"disk 1\autorun.inf"
echo Name=Red Alert 3 >>"disk 1\autorun.inf"
echo [autorun]>"disk 2\autorun.inf"
echo open=0 >>"disk 2\autorun.inf"
echo icon=ra3.ico>>"disk 2\autorun.inf"
echo Name=Red Alert 3 >>"disk 2\autorun.inf"
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo  ___    ___          ___
echo I   \  /   \ I\   I I
echo I    \ I   I I \  I I__
echo I    / I   I I  \ I I
echo I___/  \___/ I   \I I___
echo.
echo.
echo.
pause
exit

:prob1
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Cannot find all the files. Make sure that you have copy all the files from the
echo DVD to your hard disk with a program (exmple: DVDDecrypter).
echo.
pause
exit

:prob2
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo There is already a folder with name "disk 1" or "disk 2"
set /p c=Delete it? [Y]es [N]o ...
if "%c%"=="Y" goto c2
if "%c%"=="y" goto c2
if "%c%"=="N" goto cancel
if "%c%"=="n" goto cancel
goto cancel

:prob2b
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo There is already a folders with name "disk 1" or "disk 2"
set /p c=Delete it? [Y]es [N]o ...
if "%c%"=="Y" goto c2b
if "%c%"=="y" goto c2b
if "%c%"=="N" goto cancel
if "%c%"=="n" goto cancel
goto cancel

:c2b
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
rd /q /s "disk 1"
rd /q /s "disk 2"
if exist "disk 1" goto b3
if exist "disk 2" goto b3
goto 3b


:c2
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
rd /q /s "disk 1"
rd /q /s "disk 2"
if exist "disk 1" goto b3
if exist "disk 2" goto b3
goto 3

:b3
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Please close any program using "disk 1" or "disk 2" folder...
echo.
pause
exit

:cancel
cls
echo Red Alert 3 - DVD9 to 2 DVD5 Auto Splitter.
echo.
echo.
echo Canceled!
echo.
pause
exit
The color makes it look like a old-style pascal program and the tittle is to avoid questions like "why it says cmd.exe?"

I don't like it.

Last edited by nando2002; 03-12-2008 at 07:52. Reason: virustotal report
Reply With Quote