EDITING PIF

[rajivpoddar]

I have an accounting software programmed in Clipper. I have downloaded the decompiler of Clipper from the Internet. Pls let me know how to edit the PIF file so that i can specify my config.sys file.

 

[EzLogic]

PIF files are just ascii files, you can use the edit.com command to open it...

are you asking about how to open it in clipper?? Your thread is a little vague, plz provide more information so we can help you! Please let me know if this helped you

Tekno
Wireless Toyz
Ypsilanti, Michigan

 

[JoseML]

Sorry, but PIF files are binary files, and you risk damaging one if you use a text editor. You should only use the Windows PIF editor (i.e., PIF properties features) to modify a PIF file.

With respect to specifying the CONFIG.SYS, to my knowledge, Windows selects the CONFIG.SYS by default, and cannot be modified. Better to point the PIF to a BAT file that contains whatever Clipper settings you need.

 

[EzLogic]

Ooooops, Interesting, I can swear that I always thought a PIF file was just another ascii file with a different extension.. What do you know! I am wrong!!

Thanx for the Tip JoseML

Please let me know if this helped you

Tekno
Wireless Toyz
Ypsilanti, Michigan

 

[Guest_imported]

I recently received an email from someone that I do not know.

There was an attatchment named "if you.pif"

The subject of the email was The Garden Of Eden.

I tried scanning the attachment with PC-cillin
which did not show any virus.

I then saved this attachment to my HD and and tried
to rescan it. PC-cillin reports that it cannot find
the file.

I then renamed the file to "you", I could open this file
with PC-cillin or notepad.

I ftp'd the file to a linux machine on my LAN and opened
it with emacs.

This just shows a bunch @^e@@@½!@# stuff

Upon closer inspection I seen some snippets of plain text:
Microsoft Visual C++ Runtime Library
GetLastActivePopup
GetActiveWindow
Messagebox
user32.dll

Scrolling down a little further shows:
HELO <-- please note that this is a smtp command
MAIL FROM: <-- another smtp command
RCPT TO: <-- yet another

This .pif file is connecting to a prodigy.net smtp server:
pimout1-ext.prodigy.net with a return address of
<foreverart@sbcglobal.net>

Visiting

http://www.sbcglobal.net

redirects to sbcglobal.prodigy.net
I am assuming that sbcglobal is just an innocent victim here.

I would like to decompile this .pif file if at all possible
in the hopes of maybe locating the origin of this mini-worm.

So could someone please point me in the right direction of
a decompiler that will show this file.

Thank You

Steve Brock

 

[JoseML]

Steve Brock,

Although your file may have a PIF extension, it seems to me from your description of its behavior that it's not actually a PIF file in the standard sense; i.e., as a Program Interface File for DOS applications. To check, click on the file and look at properties.

Under &quot;General&quot; the file should identify its type as:
&quot;Shortcut to MS-DOS Program&quot;

Under &quot;Program&quot; you should see text boxes for:
&quot;Cmd line&quot;, &quot;Working&quot; and &quot;Batch file&quot;.

If you see none of these things, this is not a proper PIF file, but something else using the PIF extension.

There is no need (and to my knowledge, no way) to decompile a PIF file. Windows provides all the editing facilities needed to modify this type of file. I also do not know how a virus could (or would) be attached to a PIF file, but there's always a first time, I suppose.

Hope this helps, but sorry it's not the answer you're looking for.

JoseMML