locked
Is AttachmentWiper.exeBatchRun Malware or should it be there? RRS feed

  • Question

  • Hello

    In the client's directory under C:\Users\<Profile name>\Forefront UAG Remote Access Agent\<UAG POrtal>\<profile> I have a folder called 'AttachmentWiper.exeBatchRun'.  Within here I have a single batch file called 'Run'

    Is this normal as I have a user complaining that it is being seen as Malware

    Thanks

    Tuesday, March 13, 2012 9:44 AM

Answers

  • Hello,

    It's normal on this folder you must have a run.bat file with the following content :

    @echo off
    "C:\Users\<Profile name>\Forefront UAG Remote Access Agent\<UAG Portal>\<portal profile>\AttachmentWiper.exe" -d <portal URL> -c https://<portal URL>/InternalSite/Conf/<portal profile>AWDirs.ini -t 1 -1 -o NLSessionS<portal profile>=<ID> -p "C:\Users\<Profile name>\Forefront UAG Remote Access Agent/<UAG Portal>/<portal profile>\log\" -3 -c file://C:\Users\<Profile name>\AppData\Local\Temp\<ID>.tmp -t 15

    Follow me on Twitter http://www.twitter.com/liontux | My Blog (French/English) : http://security.sakuranohana.fr/


    • Edited by Lionel LEPERLIER Tuesday, March 13, 2012 10:55 AM
    • Marked as answer by Clarkeyi Tuesday, March 13, 2012 3:34 PM
    Tuesday, March 13, 2012 10:54 AM