Author Topic: SetWallpaper.cmd is a virus?  (Read 11336 times)

0 Members and 1 Guest are viewing this topic.

forgon

  • Guest
SetWallpaper.cmd is a virus?
« on: April 08, 2013, 12:10:42 PM »
My laptop was booting up slow so I was checking the start-up items and I saw a file called "SetWallpaper.cmd". I did a quick search on Google but there were contradicting opinions on whether this is a virüs or an OS file.

Is this file harmfull or just an OS file?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76032
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: SetWallpaper.cmd is a virus?
« Reply #1 on: April 08, 2013, 12:12:31 PM »
Test the file at VT: https://www.virustotal.com and post the result.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

forgon

  • Guest
Re: SetWallpaper.cmd is a virus?
« Reply #2 on: April 08, 2013, 12:19:41 PM »
The problem is msconfig says the file is in "C:\programdata\SetWallpaper.cmd" but when I go to that path I cant see it. I also cant see it when I do a search.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76032
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: SetWallpaper.cmd is a virus?
« Reply #3 on: April 08, 2013, 12:22:05 PM »
Configure your OS to show system & hidden files/folders.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

forgon

  • Guest
Re: SetWallpaper.cmd is a virus?
« Reply #4 on: April 08, 2013, 12:29:22 PM »
I already did that, programdata folder is a hidden folder.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76032
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: SetWallpaper.cmd is a virus?
« Reply #5 on: April 08, 2013, 12:36:22 PM »
I already did that, programdata folder is a hidden folder.

So, can you send it now..??
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

true indian

  • Guest
Re: SetWallpaper.cmd is a virus?
« Reply #6 on: April 08, 2013, 01:15:21 PM »
Just type in C:\ProgramData in  windows explorer and hit enter and it should take you there...then you copy that file to your desktop and upload to VT and post result here

if vt finds it as malicious then open up avast UI>>maintainence>>virus chest>>click add>>select the .cmd file on desktop and click add>>and then right click on the file added in the chest and click send to virus lab>>fill in the form and select Potential Malware as the category and click send>>click OK>>Update the virus defs manually now to send the file.  ;D

now its safe to delete the file in programdata and on desktop.
« Last Edit: April 08, 2013, 01:19:04 PM by true indian »

forgon

  • Guest
Re: SetWallpaper.cmd is a virus?
« Reply #7 on: April 08, 2013, 02:02:15 PM »
I cant see the file in that folder even when I made all files visible. But I can still see it in startup.

true indian

  • Guest
Re: SetWallpaper.cmd is a virus?
« Reply #8 on: April 09, 2013, 11:29:10 AM »
I cant see the file in that folder even when I made all files visible. But I can still see it in startup.

that maybe a missing startup item...but if wanna make sure you are clean you can follow the guide and attach the logs here:
http://forum.avast.com/index.php?topic=53253.0