BleepingComputer.com: Combofix Question.

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Combofix Question.

#1 howard_hopkinso

New Member

Group: Members
Posts: 5
Joined: 11-January 07

Posted 15 February 2007 - 03:42 PM

This is my first post here and I would like to ask a question regarding the current situation with Combofix.

I am getting reports that Combofix has been withdrawn.

Here is what is displayed when attempting to run Combofix.

Quote

The tool, ComboFix has been temporarily withdrawn.

The author discovered a rootkit infection that will intefere with ComboFix's running.

This will cause Combofix to be UNSAFE FOR USE on your machine.

Even if you manage to find a mirror for the tool, PLEASE DO NOT RUN THIS TOOL

Apologies for any inconvenience caused

Can someone please tell me if this is A: Legitimate B: If it is, when are we likely to be able to use Combofix again? C: Is there another application available that will do the same as Combofix?

Thanks for your time.

Regards Howard :thumbsup:

#2 tg1911

Lord Spam Magnet

Group: Site Admin
Posts: 18,421
Joined: 06-May 04
Gender:Male
Location:SW Louisiana

Posted 15 February 2007 - 04:56 PM

A quote from the author of Combofix:

"sUBs" said:

I have just encountered a rootkit that will cause CF to recursively delete all files from SystemDrive.

Pulling the tool till further notice.

Please inform your users not to use CF. Who knows if that rootkit is in there.

Please spread the word. Also have users delete their copies of CF

I, would take his advice.

This post has been edited by tg1911: 15 February 2007 - 04:58 PM

MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, GPU: eVGA GeForce 9800 GTX+, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#3 howard_hopkinso

New Member

Group: Members
Posts: 5
Joined: 11-January 07

Posted 16 February 2007 - 02:01 AM

Thankyou very much for the info, it`s very much appreciated.

Damn those rootkits.

Regards Howard :thumbsup:

#4 tg1911

Lord Spam Magnet

Group: Site Admin
Posts: 18,421
Joined: 06-May 04
Gender:Male
Location:SW Louisiana

Posted 16 February 2007 - 02:07 AM

You're welcome, Howard.
Glad to be of help.

#5 howard_hopkinso

New Member

Group: Members
Posts: 5
Joined: 11-January 07

Posted 08 March 2007 - 10:03 PM

Just to let everyone know. Combofix has now been fixed and is safe to use once more.

Regards Howard :thumbsup:

#6 quietman7

Bleepin' Janitor

Group: Global Moderator
Posts: 25,095
Joined: 09-July 05
Location:Virginia, USA

Posted 10 March 2007 - 08:56 AM

Combofix is an advanced tool normally used by malware removal experts who are helping others to investigate and remove malware infections in the Hijackthis forum. It is intended to be used under the guidance and supervision of an expert.

Microsoft MVP - Consumer Security 2007-2012