Ai said :- 

From the batch file alone, I don't see anything that is obviously malware. However, it does install a kernel driver, which is something both legitimate anti-cheat software and malware can do. Whether it's safe depends on the files it launches.

Here's what each part does:

Command	Purpose	Suspicious?

getadmin.vbs	Prompts for Administrator privileges (UAC)	Normal

fsutil dirty query	Checks if already running as admin	Normal

sc.exe create	Creates a Windows kernel driver service	⚠️ Worth checking

Randgrid.sys	Installs a kernel driver named atvi-sigrun\_sr\_offline	⚠️ Main file to inspect

bootstrapper.exe	Launches another executable	Needs checking

sp23-cod.exe	Starts the game	Depends on source

sc.exe delete	Removes the driver afterwards	Normal

taskkill bootstrapperCrashHandler.exe	Cleans up helper process	Normal

rd /s /q %APPDATA%\\r4v3n\_steam\_files	Deletes temporary folder	Not necessarily suspicious

The files that deserve scrutiny are:

Randgrid.sys ⭐ (most important)

bootstrapper.exe

bootstrapperCrashHandler.exe

sp23-cod.exe

The batch file itself doesn't contain malicious commands like:

deleting system files

downloading malware

modifying Defender

stealing passwords

adding persistence

disabling Windows security

Instead, it mainly:

1. Gets admin rights.

2. Installs a kernel driver (Randgrid.sys).

3. Runs the game through a bootstrapper.

4. Removes the driver afterward.

That behavior is consistent with some offline launchers, game mods, or custom anti-cheat systems—but it could also be abused.

How to verify the files

If you still have the folder, check:

Randgrid.sys

bootstrapper.exe

bootstrapperCrashHandler.exe

sp23-cod.exe

using:

Microsoft Defender (right-click → Scan with Microsoft Defender)

VirusTotal (upload or check hashes)

If you want me to inspect them

Upload any of these files (especially Randgrid.sys and bootstrapper.exe) here. I can examine:

embedded strings,

PE headers,

imports,

digital signatures,

suspicious indicators,

and tell you whether they look like legitimate game components or something more concerning.

Is this .bat file INFECTED ? pls help (cod mw3)