When pushing the Symantec Management Agent to a group of desktops, a file is created in the C:\Windows directory named _slfdel.bat. What is it?
"_slfdel.bat" is part of a process used for quite some time for our SMAgent (aka Altiris Agent). _slfdel.bat is our self-deleting mechanism used during agent uninstall and push install. The bat script removes the agent uninstaller AeXTemp.exe when it’s done. The file is generated in run-time, it’s very old, has not been changed in years. It’s started with parameters “_slfdel.bat aextemp.exe”
This is the info contained by the batch file: @echo off REM delay some time to settle ping 127.0.0.1 -n 5 -w 1000 > nul REM repeat on error 20 times set COUNT=!!!!!!!!!!!!!!!!!!!! set ITER= :loop set ITER=%ITER%! del .\\%1 if not exist %1 goto end if %ITER%==%COUNT% goto end goto loop :end del %0 REM cleanup set COUNT= set ITER=
Here is the list of our executable files that starts during the push installation:
Note: The GUIDs in the paths will be different each time. We mention as well about our executables. We don't mention what regsvr32.exe, rundll32.exe, mofcomp.exe and a couple of other system exes do during our installation/uninstall process.
Subscribing will provide email updates when this Article is updated. Login is required.