BleepingComputer.com > Combofix Question.

BleepingComputer.com > Security > AntiVirus, Firewall and Privacy Products and Protection Methods

howard_hopkinso

Feb 15 2007, 03:42 PM

This is my first post here and I would like to ask a question regarding the current situation with Combofix.

I am getting reports that Combofix has been withdrawn.

Here is what is displayed when attempting to run Combofix.

QUOTE

The tool, ComboFix has been temporarily withdrawn.

The author discovered a rootkit infection that will intefere with ComboFix's running.

This will cause Combofix to be UNSAFE FOR USE on your machine.

Even if you manage to find a mirror for the tool, PLEASE DO NOT RUN THIS TOOL

Apologies for any inconvenience caused

Can someone please tell me if this is A: Legitimate B: If it is, when are we likely to be able to use Combofix again? C: Is there another application available that will do the same as Combofix?

Thanks for your time.

Regards Howard

tg1911

Feb 15 2007, 04:56 PM

A quote from the author of Combofix:

QUOTE("sUBs")

I have just encountered a rootkit that will cause CF to recursively delete all files from SystemDrive.

Pulling the tool till further notice.

Please inform your users not to use CF. Who knows if that rootkit is in there.

Please spread the word. Also have users delete their copies of CF

I, would take his advice.

howard_hopkinso

Feb 16 2007, 02:01 AM

Thankyou very much for the info, it`s very much appreciated.

Damn those rootkits.

Regards Howard

tg1911

Feb 16 2007, 02:07 AM

You're welcome, Howard.
Glad to be of help.

howard_hopkinso

Mar 8 2007, 10:03 PM

Just to let everyone know. Combofix has now been fixed and is safe to use once more.

Regards Howard

quietman7

Mar 10 2007, 08:56 AM

Combofix is an advanced tool normally used by malware removal experts who are helping others to investigate and remove malware infections in the Hijackthis forum. It is intended to be used under the guidance and supervision of an expert.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.