Over 1 million tech questions and answers.

combifix isue

Q: combifix isue

Hello, i have tried running combifix but it always blue screens this particular laptop, also it seems to have created a new combo folder in root that contain copy of root, see attached.The question is can deleted this combifix dir?cheers

Preferred Solution: combifix isue

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: combifix isue

ComboFix usage, Questions, Help? - Look hereYou should not be using Combofix unless instructed to do so by a Malware Removal Expert. It is a powerful tool intended by its creator to be "used under the guidance and supervision of an expert", NOT for general public or personal use. Combofix was never meant to be used as a general purpose malware scanner like SuperAntispyware or Malwarebytes' Anti-Malware. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. Please read Combofix's Disclaimer.Unlike what many people think, Combofix is not a fix-all program that's just "run and done". It is a highly specialized tool that should only be used under the supervision of an expert. It's not an "everyday use", clean-all program.If you suspect malware, please post a in the Virus, Trojan, Spyware, and Malware Removal Logs sub-forum (according to this tutorial), with a description of the issues you are having and the contents of the log file(s) (copy and paste the contents of the log into your topic, don't attach it). Please note: the Malware Response team are always overwhelmed, and it could take a few days to get your first reply. Just be patient and don't "bump" your topic by replying to it.

Read other 1 answers

I have been advised to put my pc into safe mode and then install Combifix onto the desktop in order to get rid of a virus that AVG doesn?t seem to fix.

I?ve downloaded Combifix from the suggested site, put it on a stick and copied the application file from the stick to the desktop of the infected virus - however when I double click nothing happens.

I?ve rebooted and put the pc into safe mode 3 times and have tried 3 different sites to download Combifix - however I get the same result. Any thoughts anyone?????



ComboFix is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.Please create a new topic explaining the nature of your problem in the Am I infected? What do I do? forum. Explain what is "going wrong" with your computer. Note any tools you have used and their respective results.If needed, we will direct you to our HJT Preparation Guide.Thank you for using BleepingComputer as your malware removal source.

Read other 1 answers

Hi,I have run combifix and it seems to have fixed everything but it has suggested that I post the log anyway.Your comments would be appreciated.Thanks,KatComboFix 09-08-19.0C - user 20/08/2009 16:50.1.1 - NTFSx86Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.123 [GMT 1:00]Running from: c:\documents and settings\user\Desktop\ComboFix.exeAV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} * Created a new restore point.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\windows\system32\lowsecc:\windows\system32\lowsec\local.dsc:\windows\system32\lowsec\user.dsc:\windows\system32\sdra64.exe.((((((((((((((((((((((((( Files Created from 2009-07-20 to 2009-08-20 ))))))))))))))))))))))))))))))).2009-08-20 12:28 . 2009-08-20 12:28 -------- d-----w- c:\windows\system32\KB9054742009-08-20 12:28 . 2009-03-10 21:26 1403264 ----a-w- c:\windows\system32\KB905474\wganotifypackageinner.exe2009-08-20 12:28 . 2009-03-10 21:18 453512 ----a-w- c:\windows\system32\KB905474\wgasetup.exe2009-08-20 11:58 . 2008-05-03 11:55 2560 ------w- c:\windows\system32\xpsp4res.dll2009-08-20 08:41 . 2009-07-25 08:54 335752 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\... Read more

A:Combifix Log

ComboFix logs should not to be posted or discussed outside the HijackThis forums. It is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.Please create a new topic in the Am I Infected forum.http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/Explain the nature of your problem. Describe pop-ups and system tray or desktop icons that have appeared. Explain what is "going wrong" with your computer. Note any tools you have used and their respective results.If needed, we will direct you to our HJT Preparation Guide.This topic is now closed. The BC Staff

Read other 1 answers

So I've googled this issue as much as i could, most anwsers go you need to reinstall windows and most likely lost all the data on it.
My laptop is medion erazer p6679 on Win 10. I was on a zoom call when it froze and crashed. When turning on it gives me the message shown in the screen and what it the boot menu shows me.
All repair shops are shut near by and I really need it for my uni courses.
Is there anything you guys can suggest(I dont have the original windows 10 and would need to buy new, with the current state of the world might be difficult )

Read other answers

hello guys i got some problems when i play wow i got some huge lagg spike. sometime i run on 15fps on ultra settings?? and it dont seem to be my gpu because its only running at 25% with 50? both

my specs is:
x2 msi gtx 970 4GB
intel i7-4790k
msi gaming motherboard
ssd 500GB and hdd 1TB

Read other answers

I extended my warranty but warranty was tagged with another serial no of laptop and my laptop is out of warranty. For more details, I have marked a mail also and locked a case [Personal Information Removed] in customer care. Its a fraud by HP/partners. Please check and suggest on priority.

A:warranty isue



I have brought your issue to the attention of an appropriate team within HP. They will likely request information from you in order to look up your case details or product serial number. Please look for a private message from an identified HP contact. Additionally, keep in mind not to publicly post personal information (serial numbers and case details).
Thank you for visiting the HP Support Forum.

Read other 1 answers

My wife's laptop is acting crazy. It's been working fine, then the other night the screen starting blinking and became unreadable. It would just blink a ton and flash on and off. She took it in the next day to her work to the tech guys there and it worked fine. Today the same issue. I was able to get it to start in Safe Mode and it works just fine. Trying to start in regular mode it starts out just fine, then goes to blinking/flashing, etc.

Any ideas? Sorry I can't give more details, but that is as good a description as I can give!


A:Video isue

Read other 8 answers


Recently I recieved by mail my brother's laptop to fix,since I`m the "smart" guy inthe family everyone is pushing me with IT or Electronic choirs...anyway, it`s not why I`m here. The laptop has a broken screen, I tried to attach the laptop to another monitor via VGA but didn`t wor, no image at all. So I`m wondering if the mainboard is bustedm since I don`t know if I should order a new display for it or just toss it in the garbage can. The colored leds are on when I start it, no booting sound, but the HDD is working, so is the dvd-rw, I mean it takes commands, all the buttons work, I mean restart and power.is there a chance that the mainboard is bustend and I still have power on cpu/optical device/storage?

Thanks for the answer

A:Mainboard isue

Read other 7 answers

Troubleshooting a constantly flashing desktop (alternates between theme color and normal desktop) and windows that disappear when they refresh.  CombiFix was suggested, but refuses to run because "Windows 2000 is no longer supported".  I've never used Windows 2000 on any of my machines.  Help!

A:CombiFix won't run on Windows 8.1

Combofix should not be run without the guidance of a member of the Malware Removal Team.  Combofix is considered to be a malware tool and can't be posted in the Windows forums.  But the bottom line here is that Combofix is not compatible with Windows 8/8.1.
What is the make and model of this computer?
Have you tried Safe Mode to see if this is present there?

Read other 4 answers

I've never seen anything like this before. I had downloaded Combifix and was trying to download the rootkiller program that was mentioned onto my Windows 7 64 bit PC. 
I've been having difficulty with admin user files seemingly going berserk and not allowing me access to many of the files and folders I've created. These aren't system files but document and ancillary program files. No other malware detection software has been able to detect a problem, mostly (it seems) because much of the havoc is done under the guise of "admin files" I've never heard of. Anyway, to get to the part that I've never heard of or seen before, as I'm running combifix and trying to download the root killer software, a screen that I've never seen (and can't believe it's an actual Windows screen); loads with a mostly blank screen except for an emoticom at the top with a frown and I believe two cliclkable panels, "reload" and "shutdown" at this point the PC is obviously struggling and both the never before seen interface and the actual screen behind it are getting less stable, wavering and flickering. When the screen stabilizes for a moment, I try to get back to Bleepin Computer's home page and the PC acts like Linda Blair with the monitor ready to jump off the desktop in an effort to keep me from returning to bleepin computer.
I'd think this would have to be some sort of malware with the capacity to defend itself. I'd love to hear any similar experiences, if-for no other reason-to k... Read more

A:PC malware vs. combifix

Hello -
Please note that ComboFix is a tool designed for supervised Expert use only.
The program has a text output that must be understood by the people using this, and it can also cause a computer to become unbootable if not used in the correct manner and at the correct time.
This is not a scanner like Malwarebytes Anti-Malware that is simple to use, but it is a complex program only for use at certain times and for certain problems.
If you have an infection and have used this program, please follow this and post the report.
Please follow the instructions in ==>This Prep Guide<== starting at Step #6. 
If you cannot complete a step, skip it and continue.
Once the proper logs are created, then make a NEW TOPIC and post to ==>This Forum Area<== Not here.
Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.
If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.
NOTE : Please Copy / Paste all logs requested, and do not use Attach unless specifically asked -
Good luck and be very patient, as the area can get very busy.
 ... Read more

Read other 1 answers

Hello! Thanks in advance for your help!I had the following viruses (and possibly more) on my computer: hiyoluge.dllmidahehu.dllpularewi.dllAll of which I believe were found by ComboFix, but I am not sure. I ran ComboFix and then HijackThis, respectively. Here are the logs (which I've also uploaded):ComboFixComboFix 09-03-22.01 - Nathan 2009-03-23 22:36:49.1 - NTFSx86Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3583.3049 [GMT -4:00]Running from: c:\documents and settings\Nathan\Desktop\ComboFix.exeAV: AntiVir Desktop *On-access scanning disabled* (Updated)FW: COMODO Firewall *enabled* * Created a new restore pointWARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\docume~1\Nathan\LOCALS~1\Temp\tmp1.tmpc:\docume~1\Nathan\LOCALS~1\Temp\tmp2.tmpc:\documents and settings\Nathan\Application Data\iasna_27FE67F6-017D-4123-8E81-713889A5DAC0.dllc:\program files\INSTALL.LOGc:\windows\system32\bipolapu.dllc:\windows\system32\hidujuku.dllc:\windows\system32\hiyoluge.dllc:\windows\system32\midahehu.dllc:\windows\system32\pularewi.dllc:\windows\system32\ukujudih.inic:\windows\system32\uuddc32.dllc:\windows\system32\... Read more

A:Combifix and HJT logs

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

Read other 3 answers

Hi there all having a bit of a problem with laptop and heard this combifix program is quite good so I ran it and here is my log Could somebody have a look over this and get back to me with suggestions thanks a million ComboFix 10-08-09.03 - Amanda 10/08/2010 16:09:03.1.1 - x86Microsoft Windows XP Professional 5.1.2600.3.1252.353.1033.18.1014.568 [GMT 1:00]Running from: D:\ComboFix.exe.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\windows\system32\Desktop_.ini.((((((((((((((((((((((((( Files Created from 2010-07-10 to 2010-08-10 ))))))))))))))))))))))))))))))).2010-08-08 12:29 . 2010-08-08 12:29 -------- d-----w- c:\program files\The Official Driver Theory Test (4th Edition)2010-08-08 12:29 . 2010-08-08 12:29 -------- d-----w- c:\documents and settings\All Users\Application Data\The Official Driver Theory Test2010-07-28 17:11 . 2010-07-28 17:11 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Mozilla2010-07-16 20:24 . 2010-08-10 14:20 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP2010-07-14 19:31 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe2010-07-13 21:55 . 2010-07-13 21:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Fighters2010-07-13 21:53 . 2010... Read more

A:combifix logs

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

Read other 2 answers

I have a pinnacle vidio capture card and the 1394 dosnt work.....where can i find the drivers please.

A:1394 driver isue

Read other 8 answers

Hi, I'm having issues with accessing BIOS as it's asking a BIOS password and I don't remember ever creating one. The message I get after 3 unsuccessful trials is  73058664. I need help resolving this issue. Thanks.  

A:HP Bios Password Isue

When asked for password try 62930260

Read other 1 answers

Cant get internet connectivity. My NIS is working. Have a valid Ip but Wont connect in firefox or IE7. UNLESS i boot in safe mode. Tried wireless, local, and even my BB and all the same. Valid (but different IP) address and no online connectivity.

A:Vista connection isue

Most likely a 3rd party firewall (internet security) issue. If "NIS" is Norton Internet Security I'm guessing that you are right about it working. It's keeping you perfectly safe from the big bad internet.

Read other 2 answers


I am a novice - I operate xp professional - I had a virus - I loaded combifix in safe made - it said that there was 'rootkit activity' and needed to reboot computer - I shut down during the combifix reboot [silly me] and can't get back into ordinary or safe mode. [ps system restore had been disabled by "group policy"] Any suggestions?


A:Shutdown during combifix reboot

Hi ankersj, and welcome to BleepingComputer.What you are experiencing is why I post the following warning to those using Combofix without the supervision of one of our trained staff members in the security forums.ComboFix is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.If you have the installation CD for your operating system you can try doing a repair installation. The link that rockmilk posted will take you to a site with instructions for this. A repair installation will not affect you data, photos, videos, and documents. That is if combofix didn't damage any of those non Windows files.

Read other 2 answers

Hi everyone,

I am getting help from a French help forum and the tech asked me to launch Combifix, he gave me this tutorial site's link and told me to post him the report, once done.

I installed Combifix, the problem is that when I try to launch it, I get an error message saying that it is only compatible with Windows XP or 2000. Is that normal ? Is there another version or a way to solve this ?

PS : I have Windows Vista as OS, Mozilla as browser.


A:Combifix not compatible with Vista ?

There were problems that were taken care of last weekUninstall it Click START then RUN Now type Combofix /u in the runbox and click OK
Note: There's a space between Combofix and /
Then try a fresh download

Read other 11 answers

Hello my name is Gringoyle

Let me start from the very begining, I was play Ever Quest 2 when my key board started acting up i found that it was my mouse, when my mouce was in movement the keyboard was inop so if was to use the (W,A,D,S) keys to navigate than use the mouce to move the cursor i would stop movment.

So I decided to test the mouce in safe mode, I and made a big mistake by using msconfig to do so. Well it started an endless loop of chrashing when windows would boot causing the loop to start over. I can however use F8 still which i did to to try and repair my system, it recommended that I use the recovery, that had failed. I than used the F8 last knowen good configuration option to start windows and I am running again, I than when to change the settings in msconfig i had made but i am unable to. When in msconfig under the general tab the "Selective Startup" is selected, under the boot tab the options are normal, safe mode is not selected. However if I select the Normal Startup option under the general tab the safe mode box becomes check under the boot tab and if I uncheck the safe boot box, the Selective Startup option is than selected again under the general tab.

And my dang mouce is still causing the keyboard to be inop when in use.

Thank for any advice you fellas can offer me,

A:Windows 7 safe boot isue

I do not believe this is an infection so I'm moving it to the Windows 7 forumI know little about Windows 7 If you scroll to the bottom of this page you will see how to repair it, I believehttp://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/

Read other 2 answers

I was trying to forward ports for some programs using a http://portforward.com guide.
Open a web browser like internet explorer or Netscape. Enter the ip address of your router in the address bar of your browser. By default the ip address should be set to to expand...

You should see a box prompting you for your username and password. Enter your username and password now. By default both the username and password are root. Click the Ok button to log in to your router. Click to expand...

...it says, but doesnt work, I did search a bit with google about it but found nothing certain.
The actuall question is: "How do I find my router's IP adress?[to get the router admin box]"

My router is a Lucent Technologies CELL-21A-BX-AR

A:Solved: Port forwarding isue

Read other 12 answers

I have installed a wireless card onto my PC, the card sees the network tells me I have connection, but IE does not connect.

I have cleared DNS cache, repaired IP/TCP Winsock. And

IPCONFIG shows that I have no default gateway.

Any ideas?

A:[SOLVED] Suspect DNS Isue with Vista

Your Default Gateway is your Router. Unplug the power plug to the Modem and the Router. Plug the power into just the Modem (unless you have a modem/router combo) When all the lights come up, plug in the power to the Router (unless combo of course) Go to Start/Search and type inetcpl.cpl and press enter/Connections/LAN Settings. Make sure all the boxes are unchecked. Now go to Start/Search and type ncpa.cpl and press enter. Right click the Local Area connection/Properties scroll down to Internet Protocol IPV4 (TCP-IP)/Properties. Make sure Obtain an IP Address and DNS Server Address Automatically are both checked. Now go to Start/Search and type CMD right click the Command Prompt link in the Search Results and choose Run As Administrator. IN the Command Prompt type ipconfig /release and press enter. the IP Address changes to Now type ipconfig /flushdns and press enter. Now type ipconfig /renew. Now type ipconfig /all. You should have a new IP address try it again. If you still cannot connect please include the text output of your ipconfig /all in your next post

Read other 3 answers

Please some body tell me abaut this problem if you can read this.I attach the combofix log in the end of proces if some body can help me please do it ....

A:I Run combifix and after this proces my PC work slowly

Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:The fixes are specific to your problem and should only be used for the issues on this machine.It's often worth reading through these instructions and printing them for ease of reference.If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.Please reply to this thread. Do not start a new topic.If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.Please be sure to subscribe to this topic so that you can see when there are new responses.IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data. Having said that.... Let's get going!!----------Please download DDS from either of these linksLINK 1LINK 2and save it to your Desktop.Disable any script blocking protectionRight-click and Run as Administrator dds to run the tool.When done, two DDS... Read more

Read other 3 answers


I use vista 32 home premium; firewall enabled.

I got a virus of some kind that resdtarted the pc and locked on logging in, and tried to remove it using a variety of tools in safe mode, including malwarebytes - it found and removed several viruses but on restart they appeared again. I searched online and found and used combofix twice. While it seems to have removed the virus (according to malwarebytes) when logging on it says "an unauthorized change has been made to windows". I have disabled all startup programs and uninstalled divx (which is when the virus happened) in appwiz, this hasnt worked. I cant get online on my desktop and am using my laptop wlan. Howefver i plugged the mobile broadband from my desktop into my laptop (didnt work onn the laptop either - the virus seems to have done something to it), so I may be infected, although nothing bad is happening on the laptop so maybe not - malwarebytes detects no virus on the laptop.

I've attached the dds logs as requested, and the other logs from various tools that i could find.

Looking on this forum I see now I shouldnt have used combofix on my own - sorry. I know you ask not to attach the combofix log but since the problem of logging on happened after using combofix I'm guessing you will want to look at the log.

I cant find details of the virus itself anymore except that one of the detections was "ebcebddbde.dll"

I would really appreciate your help/advice, thank you.


Edit - To add, I... Read more

A:Please help - Computer 1/malware, tried combifix, cant log into vista

Hello sach_1600Welcome to BleepingComputer ========================Download this program:submit files packerHighlight the files listed below in bold and right-click and selecting copy.C:\fxtf.exeC:\sgxwd.exeC:\sgslrvrs.exeC:\nlfheu.exeC:\tjanj.exeC:\jdimk.exeC:\pahonbrd.exeThen start the file packer program and right click in the white box and select paste to paste the copied file names in the field.Then press the Continue button.I will create an archive with these files and a small log on your Desktop that starts with a name like requested-file[date].cab.Rename this file to samples.Click Here to upload the files please.============After that please post an updated dds log.

Read other 1 answers

i got a virus receantly. it converts all my files of pendrive and other usb drives to shortcut.morever some random search engine named tuvaro comes up.morever i am unable to run any antivirus programs. not even able to install. i ran combofix following instructions of a previous thread after closing avg etc.now got some log and dunno wha to do. saw only lately that u need a expert to help in combofix. what to do.help please. i ran combifix by mistake i generated a notepad log...


A:risky virus ran combifix by mistake

Since you ran Combofix... Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Read other 3 answers

I am working on a PC that I suspect is infected. It was running Symantec Antivirus which detected nothing. I removed Symantec as a precaution and ran the Symantec removal tool just to be sure.

Combofix keeps hanging just before it shows Completed Stage_1... I see this in the screen when it hangs.

Scanning for Infected Files . . .
This typicaly doesn't take more then 10 minutes.
However, scan times for infected machines may easily double.

I have waited over an hour and it doesn't continue. I can control the PC and even close the combofix box. When I look at the process list I see CF1441.cfxxe and mbr.cfxxe is running. If i kill the mbr.cfxxe process combofix moves on.

If I try and boot the computer in safe mode I get no video but It acts like its booting properly, so I ran msconfig and set diagnostic mode but CF still hangs with the same symptoms. I tried running malwarebytes. Malwarebytes starts off fine but after 5 minutes it comes to a crawl and only scans 1 file every 5-10 seconds.

I did a fixmbr and a fixboot in the recovery console and it didn't help.

I ran HijackThis and didn't see anything exceptional.

I am guessing something is hooked into the disk access code and is blocking combofix from reading the mbr and also slowing down malwarebytes. It may be a virus or maybe is part of some antivirus/antispyware app that left hooks on the system.

I have the combofix log and the HJT log but I just noticed that Im not supposed to post ... Read more

A:Combifix Hangs on possibly infected computer

UPDATE: Ran RKill and it found nothing.

UPDATE: Ran SuperAntiSpyware only found 301 cookies. It did not run slow like MBAM does.

Trying to see what GMER does/shows now. But if anyone has any thoughts I could use some ideas. Im just guessing now.

Read other 10 answers