-
1. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
Stefan3D Nov 17, 2017 9:56 AM (in response to jlandria)Your virus scanner created a so-called "false positive".
Detection ratio is 0/58 at VirusTotal
Otherwise review previous discussions:
{a6d608f0-0bde-491a-97ae-5c4b05d86e01}.bat keeps getting flagged by Bit9 / Carbon Black.
-
2. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
jlandria Nov 17, 2017 10:57 AM (in response to Stefan3D)No, this answer is completly incorrect and does not apply. As stated, this is not a virus scanner that is blocking the file. It is a tool from Carbon Black called Bit9 which is a corporate file protection tool that prevents unauthorized files from making changes on PCs. Users can not run any exe or batch that is not authorized by Bit9. Symantec handles virus and it doesn't care about the batch file.
None of those linked threads, which I already read, address my original question - HOW TO DISABLE the batchfile from running?
-
3. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
jlandria Nov 21, 2017 5:00 AM (in response to jlandria)I am still in need of a solution for disabling this intel batch file.
How do I open a higher priority case?
-
4. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
jlandria Nov 21, 2017 6:00 AM (in response to jlandria)I have opened another case with Intel directly through the support system. IF I get a working answer I will post it here for the others that will get snagged by this same problem.
-
5. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
sohmageek Nov 21, 2017 6:06 AM (in response to jlandria)1 of 1 people found this helpfulI've opened a case with Carbon black for the same reason, however it seems to not happen every single time, also the details of the block aren't available for me to look into (which they require for their case) It's very frustrating dealing with opening cases with Carbon Black/Bit9 for things that seem to not always happen...
-
6. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
jlandria Nov 21, 2017 6:11 AM (in response to sohmageek)Thanks for the update @sohmageek. We get the block every time, and our IT Security has looked at the situation as well. They say this "looks scummy" even though they know it is from Intel, it still looks malware-like.
We aren't really interested in whitelisting this batch file, thus the need to disable it completely so users stop getting notified.
-
7. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
Nov 21, 2017 10:15 AM (in response to jlandria)This message was posted on behalf of Intel CorporationI am really sorry to hear you are having issues with this matter, I would like to gather more information about this matter so please check the following form, fill it and post it here: Default level information for reporting Graphics issues
Thank you.
Regards,
Amy C.
-
8. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
jlandria Nov 21, 2017 11:22 AM (in response to Intel Corporation)The link posted "Default level..." does not work. It takes me to a "JIVE - OOPS! We can' seem to find that page" error. I am logged in to the site with my profile.
-
9. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
jlandria Nov 22, 2017 6:25 AM (in response to Intel Corporation)UPDATE : link still does not work. I would be happy to provide the information, but I can not.
-
10. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
Nov 22, 2017 11:40 AM (in response to jlandria)This message was posted on behalf of Intel Corporation1 of 1 people found this helpfulPlease try the following: https://communities.intel.com/thread/77761
Regards,
Amy C. -
11. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
jlandria Nov 22, 2017 12:03 PM (in response to Intel Corporation)Category
Questions
Answers (N/A if not applicable)
Description
Provide a detailed description of the issue
After installing the latest intel driver, a batch file wants to run with every log in.
Please place an X to the right of the option showing how often you see this issue using specific steps. (Ex: 'Every few times a game is started it flickers.' <- This would be "Often")
Always (100%): X
Often (51-99%):
Sporadic (20-50%):
Very Sporadic (<20%):
Hardware (HW)
Brand and Model of the system.
Toshiba Portege R-30C
Hybrid or switchable graphics system?
ie Does it have AMD or NV graphics too?No other graphics adapters
Make and model of any Displays that are used to see the issue (see note2 below).
LFP = Local Flat Panel (Laptop panel)
EFP = External Flat Panel (Monitor you plug in)LFP
How much memory [RAM] in the system (see note2 below).
8Gb
Provide any other hardware needed to replicate the issue.
ie: Cables&brand, cable type [vga, hdmi, DP, etc], dock, dongles/adapters, etcN/A
Hardware Stepping (see note1 below).
Intel(R) HD Graphics 520
Software (SW)
Operating System version (see note2 below).
Windows 10 v1607
VBIOS (video BIOS) version. This can be found in “information page” of CUI (right click on Desktop and select “Graphics Properties”.
Due to batch file being blocked, the intel tools are not running so the "Graphics Properties" option is not available.
Graphics Driver version; for both integrated Intel and 3rd party vendors (see note2 below).
Downloaded Intel® Graphics Driver for Windows* [15.60]
Device Manager Reports
Driver Provider: Intel Corporation
Driver Date: 10/27/2017
Driver Version: 23.20.16.4849
SW or Apps version used to replicate the issue.
Carbon Black Bit9 blocks the batchfile.
Configurations
Single display, clone, or extended (see note2 below).
Single
Display resolution & refresh rate setting of each display (see note2 below).
1366x768 (32bit) (60mhz)
AC or DC mode, i.e. is power cable plugged in or not?
Cable plugged in.
How to repro
Please provide steps to replicate the issue. These steps are very crucial to finding the root cause and fix.
A screenshot to illustrate the issue is a huge plus. A video of the failure is even better! Attach to the post or provide the YouTube link.- Install latest intel drivers
- Reboot, login.
- Batchfile listed above attempts to run but is blocked by Bit9 as it looks like malware.
- Notification pops to user that batchfile is blocked and did not run.
- IT Security's log gets flooded with notifications about this intel batchfile trying to run but being blocked.
- The 3 intel exe named in the batchfile do not get started.
-
12. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
AaronMargosis Nov 22, 2017 2:25 PM (in response to jlandria)I'm dealing with a very similar problem, using Windows AppLocker as the whitelisting solution. C:\Intel is a user-writable directory, so we don't want to create a path rule allowing execution of anything that happens to be in C:\Intel, because whitelisting can easily be bypassed by any user simply by copying unauthorized code into that directory and running it.
There are so many ways to get programs to run at user logon -- it seems substandard to do so by creating a batch file in a user-writable directory. There are better ways to do this...
What functionality is lost if this batch file isn't allowed to run?
Thanks.
-- Aaron Margosis
Microsoft
-
13. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
jlandria Nov 23, 2017 5:24 AM (in response to AaronMargosis)1 of 1 people found this helpfulAgreed Aaron. Intel should just put their services in any of the many known/accepted areas available for startup commands/services. This process seems very questionable.
We have difficutly just finding the batchfile to examine it but in this post "What is file: {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat ," the batch file contains the following contents :
@echo off
if exist igfxEM.exe start igfxEM.exe
if exist igfxHK.exe start igfxHK.exe
if exist igfxTray.exe start igfxTray.exe
del /Q {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
And on our end we have noticed the loss of the Intel Tray Icon, the Intel Graphics Properties desktop context (right-click) menu option and, although untested right now, I will guess that the HotKey functionality is also lost (due to igfxHK.exe not starting).
-
14. Re: Seriously, how to disable the intel batch file {A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
Nov 23, 2017 7:26 AM (in response to jlandria)This message was posted on behalf of Intel Corporationjlandria, thank you for that information.
I will review this matter, and update the thread as soon as possible.
Regards,
Amy C.