Originally posted here by Und3ertak3r
didn't find my notes at work regarding where I had encountered X.bat and friends.

But I did find mtrslib2.js source

Found this in the body: "MediaTicketsInstallerDemo"

full JS attached

Sry I can't offer better help..



Cheers
This is great, thank you. I don't have the tools to pull .js apart, so I'm very happy with this.
Looks to be some sort of spyware, but I'm no programmer, so...

Hehe, turns out the kids who wrote this put their real phone number on the domain contact info for mt-download.com.