BAT_DELF.OAU spotted in the wild

Dec 18, 2007 11:25 GMT  ·  By
Don't be too amazed to see many of your text documents deleted from the computer
   Don't be too amazed to see many of your text documents deleted from the computer

BAT_DELF.OAU is a new batch file discovered out there in the wild that affects most Windows versions including 2000, XP and Server 2003. Sure you may say 'Oh, come on dude, it's only a batch file, it's not so dangerous!' And I agree with you, batch files are usually discovered by the antivirus technologies, but this one may surprise you. BAT_DELF.OAU attempts to delete all the TXT (text) documents found in the SystemCom folder located in the main folder of the operating system. According to security company Trend Micro, the batch file can easily reach your computer, as it is often dropped by other malware or included in malware packages.

"It manipulates the network routing table by specifying a print and find command for the gateway specified in the IP.TXT file found in a certain folder. It then executes a script malware detected by Trend Micro as VBS_DELF.OAU", Trend Micro wrote.

OK, so I guess it's clear now: BAT_DELF.OAU has to stay away from our computers. But how can we do that? Well, it may be easier than you expect: all you need to do is to update your antivirus to the latest version and apply the newest virus definitions rolled out by developer.

Even if the batch file has a low damage potential, a low distribution potential and a low overall risk rating, it is able to cause serious damages to your computer. Unpatched and unprotected computers are always vulnerable to this kind of attacks and if such a batch file could be installed on a system, it's obvious that it couldn't face other powerful exploits.

Enough talking about BAT_DELF.OAU, just click on the antivirus icon in the System Tray and hit the update button. Simple as that and you're protected before the Christmas Eve.