BleepingComputer.com: Ran Combofix now have code page 1252

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Ran Combofix now have code page 1252 How do I change back to page 437

#1 User is offline   DWHarris 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 09-August 11

Posted 09 August 2011 - 09:38 AM

After running Combofix my computer is set to code page 1252 which displays very weird stuff. I was able to reset it back to code page 437. However when running DOS software it still displays characters from 1252. While my computer is booting up Windows if I launch DOS software it will display 437 characters but if I launch DOS after Windows finishes booting then DOS displays 1252 characters.

I am running Windows XP Media Center Edition, Version 5.1, Service Pack 3

#2 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,388
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 10 August 2011 - 04:47 AM

Can you post a screenshot so we can get a better idea of what is happening?

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#3 User is offline   DWHarris 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 09-August 11

Posted 10 August 2011 - 08:01 AM

On this image http://keyhut.com/chcp.jpg the top is what I get when I start a DOS app, the bottom is correct and is after I use the command CHCP 437 from the command prompt to change the code page.

Dale

#4 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,388
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 10 August 2011 - 08:08 AM

Even when you download the DOS application again, have you changed settings at all on the command prompt window?

Go to Properties and then the Font tab and see if the correct fonts are listed.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#5 User is offline   DWHarris 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 09-August 11

Posted 10 August 2011 - 08:27 AM

I am the author of this application so I do not need to download it. I run this on several computers so I know the app is good. Plus I have many DOS apps and it happens to all of them.

I have checked the properties and they are correct. In fact when I set the font to "raster fonts" I get the correct characters, with Lucinda Console I get the weird stuff. I have had my DOS apps set to Lucinda Console for many years and this only started happening after I ran Combofix.

Dale

#6 User is offline   DWHarris 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 09-August 11

Posted 10 August 2011 - 08:28 AM

I am going to work now and I will not be back for 8 hours

#7 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,388
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 10 August 2011 - 11:12 AM

try reimporting the Lucinda Fonts fonts from another computer and see if that fixes the issue.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#8 User is offline   DWHarris 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 09-August 11

Posted 17 August 2011 - 09:18 AM

I reinstalled Lucinda Console and there was no change.

Dale

#9 User is offline   abauw 

  • Distinguished Member
  • PipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 795
  • Joined: 09-July 10
  • Gender:Male
  • Location:Kebun Kelapa

Posted 17 August 2011 - 07:16 PM

Could you tell why you using Combofix?
If you don't like something, CHANGE it...
If you don't like your job, QUIT...
If you don't have enough time, stop watching tv...
If you looking for the love of your life, STOP...
They will waiting for you when you START DOING THINGS YOU LOVE...

#10 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,388
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 18 August 2011 - 05:07 AM

Would you still happen to have the Combofix log available for analysis if it is required?

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#11 User is offline   DWHarris 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 09-August 11

Posted 18 August 2011 - 12:08 PM

I had a rootkit redirect that would send my Google searches to somewhere else. I could not get rid of it with Norton, Adaware, or MalwareBytes.

Where would ComboFix save the log?

Dale

#12 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,388
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 18 August 2011 - 01:06 PM

the log would be in c:\

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#13 User is offline   DWHarris 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 09-August 11

Posted 18 August 2011 - 02:22 PM

This is what I found...

Mod edit: Combofix logs have been removed - ComboFix logs may only be analyzed in our advanced malware forums.

Thanks,
rigel
BC Moderator

Dale

This post has been edited by rigel: 18 August 2011 - 02:36 PM
Reason for edit: Logs removed


#14 User is offline   Orange Blossom 

  • OBleepin Investigator
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 29,827
  • Joined: 14-July 06
  • Gender:Not Telling
  • Location:Bloomington, IN

Posted 18 August 2011 - 02:38 PM

Hello,

Please follow the instructions in ==>This Guide<== starting at step 6.

Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button. Since you have run ComboFix, please include the ComboFix log in the new topic.

If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, include the information that you were unable to produce the other logs, include the ComboFix log, and describe what happens when you try to create the other logs.

Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Orange Blossom :cherry:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom
An ounce of prevention is worth a pound of cure
SuperAntiSpyware, SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users