TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
BAT_DELWIN.AA
Overview

Malware type: Batch file

Aliases: No Alias Found

In the wild: Yes

Destructive: Yes

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

High

Distribution potential:

Low

Description: 

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

BAT_DELWIN.AA Behavior Diagram

Malware Overview

This batch file may be downloaded unknowingly by a user when visiting malicious Web site(s).

When executed, it displays the following message box:

It then removes the Hidden, System, and Read-only attributes from several key system files. This removes the system's protection of the said files, making them easier to delete. It then deletes the said files. Deleting these critical files renders Windows unable to boot.

It then displays the following message box:

The batch file then issues a command that shuts down the system after ten seconds.

For additional information about this threat, see:
Solution
Technical Details

Description created: Feb. 24, 2009 11:20:38 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.