Can't find any .bat files on my computer

dsa2591 · Jun 3, 2012

I had a problem with my firewall wanting me to allow batch files for a toolbar I'm running. The toolbar developer said to allow certain files, one being all .bat files. I found all of the other files in the toolbar folder, so I searched for the .bat files.

Well, according to Vista, I have NO .bat files ANYWHERE on my system. I've searched the entire C: drive, including all the files, and no .bat files.

And yes, I did click to search hidden files, etc.

Any help would be appreciated.

Lottiemansion · Jun 3, 2012

Hi,

A little more information on the tool bar would help!

toofast4uzz · Jun 3, 2012

Yeah more info would be nice, and did you try the basic things like re downloading.

dsa2591 · Jun 3, 2012

toofast4uzz said:
Yeah more info would be nice, and did you try the basic things like re downloading.

I'm sorry, but I can't give any more info on the toolbar because it's used explicitly for a place I work, and I had to sign a non-disclosure agreement. It's a toolbar you use to log into and out of the site that enables them to track your work and your time.

Yes, I tried re-installing. The toolbar works, no problem, and I wouldn't have a problem with Comodo if I could find the .bat files I am supposed to list as safe. They have to be on the computer somewhere. Why wouldn't Vista be able to find them, or ANY .bat files for that matter. You can't tell me there are no .bat files on my computer.

I've searched the entire hard drive for *.bat and NOTHING comes up. I can search for any other extension, .mp3, .exe, .cmd....anything...and they come up, but not .bat.

Lottiemansion · Jun 5, 2012

OK,

It sounds as though these files are stored on the "Works server" & not your computer.

dsa2591 · Jun 5, 2012

I have no idea what you're talking about. I don't have a "works server," whatever that is. All I have is a laptop.

tom982 · Jun 6, 2012

Hello dsa2591 and welcome to the forums :party:

Let's have a look to see if there are any .bat files on your computer

System Look

Please download SystemLook from one of the links below and save it to your Desktop.

Download Mirror #1
Download Mirror #2

Double-click SystemLook.exe to run it.
Copy the content of the following codebox into the main textfield:
Code:
```
:filefind
*.bat
```
Click the Look button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

Tom

dsa2591 · Jun 6, 2012

As I thought, there are many .bat files on my computer, but it doesn't seem to be able to find the one I need, which is supposed to be inside a FF add-on toolbar. Oh well, I'll just have to disable Comodo and use Windows firewall while I'm working there.

SystemLook 30.07.11 by jpshortstuff
Log created at 11:50 on 06/06/2012 by dsa2591
Administrator - Elevation successful

========== filefind ==========

Searching for "*.bat"
C:\autoexec.bat --a---- 24 bytes [10:23 02/11/2006] [21:43 18/09/2006] D9EBEC6668A6092FCBD1713C347AA5E0
C:\DELL\fixtime.bat --a---- 333 bytes [23:53 21/07/2009] [23:53 21/07/2009] 7543A01C4BBB4DEAB09304C3CF56399D
C:\DELL\nosidebar.bat --a---- 110 bytes [23:53 21/07/2009] [23:53 21/07/2009] 3E42E59ACB0EF25A804DBBA1029F3B66
C:\DELL\passed.bat --a---- 11 bytes [21:49 21/07/2009] [21:49 21/07/2009] 75CC60925F835069DD619EB9E93DB15E
C:\DELL\pwrcfg.bat --a---- 1335 bytes [23:52 21/07/2009] [23:53 21/07/2009] C6D37FAD53CA730F5E4F3591FA640BF4
C:\DELL\c645m\eula.bat --a---- 178 bytes [23:56 21/07/2009] [02:29 02/02/2009] DD8FEB0792DEB6DA68C5C99EADA1FEBF
C:\DELL\drivers\R201539\Inst_EAPModules.bat --a---- 1407 bytes [23:37 13/12/2010] [22:17 13/10/2008] 72840BE665B88C247E3C362A3907C0CD
C:\DELL\drivers\R201539\Uninst_EAPModules.bat --a---- 1591 bytes [23:37 13/12/2010] [22:17 13/10/2008] 5B79AF1446E4D72838EBA4BEA60F7EDE
C:\DELL\drivers\R201539\vcredist_x86.bat --a---- 416 bytes [23:37 13/12/2010] [22:17 13/10/2008] 1A92FCB214441E3589E36987DB009986
C:\DELL\drivers\R201539\x64\vcredist_x64.bat --a---- 418 bytes [23:37 13/12/2010] [22:17 13/10/2008] CAD0BB5E900F7DE885C4709522C6F28D
C:\DELL\drivers\R206848\Inst_EAPModules.bat --a---- 1407 bytes [23:33 13/12/2010] [15:29 17/11/2008] 72840BE665B88C247E3C362A3907C0CD
C:\DELL\drivers\R206848\Uninst_EAPModules.bat --a---- 1591 bytes [23:32 13/12/2010] [15:29 17/11/2008] 471CE6FDCD85CA25DAF7FC59B891EBC4
C:\DELL\drivers\R206848\vcredist_x86.bat --a---- 416 bytes [23:32 13/12/2010] [15:29 17/11/2008] 1A92FCB214441E3589E36987DB009986
C:\DELL\drivers\R206848\vs08\vcredist_x86.bat --a---- 451 bytes [23:33 13/12/2010] [15:29 17/11/2008] 12E323EA15149A1C324E692F0D99BDF1
C:\DELL\drivers\R206848\vs08\x64\vcredist_x64.bat --a---- 451 bytes [23:33 13/12/2010] [15:29 17/11/2008] 1C3AC9AD79BD93AA0B94680A3B9912DC
C:\DELL\drivers\R206848\x64\vcredist_x64.bat --a---- 418 bytes [23:33 13/12/2010] [15:29 17/11/2008] CAD0BB5E900F7DE885C4709522C6F28D
C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\ctypes\macholib\fetch_macholib.bat --a---- 74 bytes [05:25 21/05/2010] [05:25 21/05/2010] 624B8E96A277D12EDA9CCA45F3DFAA11
C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\idlelib\idle.bat --a---- 127 bytes [05:24 21/05/2010] [05:24 21/05/2010] 529F11E0E19217421F188D2866ED973E
C:\Windows\uninstallstickies.bat --a---- 607 bytes [16:11 14/12/2010] [16:11 14/12/2010] 9077358888B641CEC220AC7ED3DBC865
C:\Windows\System32\Uninst_EAPModules.bat --a---- 1591 bytes [23:33 13/12/2010] [22:17 13/10/2008] 5B79AF1446E4D72838EBA4BEA60F7EDE
C:\Windows\System32\vcredist_x86.bat --a---- 416 bytes [23:33 13/12/2010] [22:17 13/10/2008] 1A92FCB214441E3589E36987DB009986
C:\Windows\System32\Msdtc\Trace\msdtcvtr.bat --a---- 19429 bytes [07:29 02/11/2006] [21:27 18/09/2006] A4E34518E44880DDC089FD918371F7ED
C:\Windows\winsxs\Backup\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c_autoexec.bat_6d6f4bc5 --a---- 24 bytes [02:36 21/01/2008] [02:27 21/01/2008] D9EBEC6668A6092FCBD1713C347AA5E0
C:\Windows\winsxs\x86_microsoft-windows-com-dtc-tracing_31bf3856ad364e35_6.0.6001.18000_none_17df4ac2f2cf5440\msdtcvtr.bat --a---- 19429 bytes [07:29 02/11/2006] [21:27 18/09/2006] A4E34518E44880DDC089FD918371F7ED
C:\Windows\winsxs\x86_microsoft-windows-iis-legacyscripts_31bf3856ad364e35_6.0.6001.18000_none_7e466ce97736febd\iisswtch.bat --a---- 48 bytes [02:25 21/01/2008] [02:25 21/01/2008] 7F8000D55678FF8655B582EE1A840E3E
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\autoexec.bat --a---- 24 bytes [06:25 02/11/2006] [21:43 18/09/2006] D9EBEC6668A6092FCBD1713C347AA5E0
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\autoexec.bat --a---- 24 bytes [06:25 02/11/2006] [21:43 18/09/2006] D9EBEC6668A6092FCBD1713C347AA5E0
C:\Windows.old\autoexec.bat --a---- 24 bytes [10:23 02/11/2006] [21:43 18/09/2006] D9EBEC6668A6092FCBD1713C347AA5E0
C:\Windows.old\Program Files\Dell\DellComms\sscommon\common\snapins\toolkit\htaRun.bat --a---- 44 bytes [15:44 25/03/2009] [15:44 25/03/2009] 7B7947BC7DFBF0DD0453AF1D851B1F44
C:\Windows.old\Program Files\Dell DataSafe Local Backup\Components\DSUpdate\runhstart.bat --a---- 374 bytes [21:32 21/07/2009] [07:12 09/03/2009] 3099BF433C305BCD45056A38A62815D9
C:\Windows.old\Program Files\Dell Support Center\gs_ctss\custom\util\buildPcdSysInfo.bat --a---- 60 bytes [05:50 30/01/2009] [05:50 30/01/2009] 38476E858FAD92921FB25DA5E270F67A
C:\Windows.old\Program Files\Dell Support Center\sscommon\common\snapins\toolkit\htaRun.bat --a---- 44 bytes [05:50 30/01/2009] [05:50 30/01/2009] 7B7947BC7DFBF0DD0453AF1D851B1F44
C:\Windows.old\Windows\System32\Uninst_EAPModules.bat --a---- 1591 bytes [21:23 21/07/2009] [18:34 21/12/2008] 471CE6FDCD85CA25DAF7FC59B891EBC4
C:\Windows.old\Windows\System32\vcredist_x86.bat --a---- 416 bytes [21:23 21/07/2009] [18:34 21/12/2008] 1A92FCB214441E3589E36987DB009986
C:\Windows.old\Windows\System32\Msdtc\Trace\msdtcvtr.bat --a---- 19429 bytes [07:29 02/11/2006] [21:27 18/09/2006] A4E34518E44880DDC089FD918371F7ED
C:\Windows.old\Windows\System32\oem\clearevt.bat --a---- 831 bytes [23:52 21/07/2009] [23:52 21/07/2009] ACAFFB2F3025F0A217FDD475AAB9027D
C:\Windows.old\Windows\System32\vs08\vcredist_x86.bat --a---- 451 bytes [21:23 21/07/2009] [18:34 21/12/2008] 12E323EA15149A1C324E692F0D99BDF1
C:\Windows.old\Windows\winsxs\Backup\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c_autoexec.bat_6d6f4bc5 --a---- 24 bytes [02:36 21/01/2008] [02:27 21/01/2008] D9EBEC6668A6092FCBD1713C347AA5E0
C:\Windows.old\Windows\winsxs\x86_microsoft-windows-com-dtc-tracing_31bf3856ad364e35_6.0.6001.18000_none_17df4ac2f2cf5440\msdtcvtr.bat --a---- 19429 bytes [07:29 02/11/2006] [21:27 18/09/2006] A4E34518E44880DDC089FD918371F7ED
C:\Windows.old\Windows\winsxs\x86_microsoft-windows-iis-legacyscripts_31bf3856ad364e35_6.0.6001.18000_none_7e466ce97736febd\iisswtch.bat --a---- 48 bytes [02:25 21/01/2008] [02:25 21/01/2008] 7F8000D55678FF8655B582EE1A840E3E
C:\Windows.old\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\autoexec.bat --a---- 24 bytes [06:25 02/11/2006] [21:43 18/09/2006] D9EBEC6668A6092FCBD1713C347AA5E0

-= EOF =-

dsa2591 · Jun 6, 2012

P.S. I used it to search specifically for that file and it didn't find it. I have no idea why Comodo can find it and nothing else can. Is there such a thing as a .bat file that is created as it is needed? According to the toolbar tech team, there are several .bat files under different numbers, and we are supposed to allow them all with a wildcard where the numbers are. I even searched for one of the numbers, and nothing. It is truly a "hidden" file.

tom982 · Jun 6, 2012

dsa2591 said:
P.S. I used it to search specifically for that file and it didn't find it. I have no idea why Comodo can find it and nothing else can. Is there such a thing as a .bat file that is created as it is needed? According to the toolbar tech team, there are several .bat files under different numbers, and we are supposed to allow them all with a wildcard where the numbers are. I even searched for one of the numbers, and nothing. It is truly a "hidden" file.

Would you mind taking a screenshot of the Comodo screen indicating the presence of this file and uploading it for us please?

SystemLook will display files with any attributes, be it read only, hidden or system. It won't, however, show files that are hidden by rootkits etc., don't worry, I don't think that you're infected, but some software can use rootkit like technologies to hide files. I'm hoping this isn't the case in something as simple as a FF toolbar.

What is the name of the toolbar?

Tom

Cytherian · Jun 6, 2012

^ Why does some legitimate software use rootkit like technologies to hide files? Is that more for trial control and licensing? I can't think of why they'd want to do it otherwise.

tom982 · Jun 6, 2012

Cytherian said:
^ Why does some legitimate software use rootkit like technologies to hide files? Is that more for trial control and licensing? I can't think of why they'd want to do it otherwise.

It's legitimate software, but they're using illegitimate methods. I haven't heard of it being used for licensing before, but I could see the advantages of that. The example that comes to mind is the Sony copy protection rootkit:

Sony BMG copy protection rootkit scandal - Wikipedia, the free encyclopedia

It was revealed that they were using such technologies in their copy protection features and, as you can understand, it didn't go down too well with the online community. They promptly released a removal tool, which only revealed the rootkit hidden files but left the rootkit intact. After a blogger revealed this, they released "new and improved" removal tool which had even more security issues. It's all in that Wikipedia article if you want to know any more

townsbg · Jun 8, 2012

1) Your antivirus might have flagged your bat files as potential threats and either quarantined or even deleted them.
2) IMO if this is a work computer you should engage your employer's technicians. That's what they are there for and your employer may have policies prohibiting you from seeking outside help. I'm not saying that we won't help you but if I where you I would go to them first. They are more familiar with the software and settings than we are which can vastly differ from a typical home computer. For instance that toolbar that you can't talk to us about is undoubtedly special software that only those technicians know how to support. That leads to my next suggestion:
3) Your employer might have blocked certain file types from being used or shown on their systems.

Can't find any .bat files on my computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

~~тσωηsвg~~

My Computers

тσωηsвg