Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Automatize virus cleaning procedure

  • Please log in to reply
2 replies to this topic

#1 ale5000


  • Members
  • 7 posts
  • Local time:09:31 PM

Posted 26 February 2009 - 08:33 AM

There is a way to automatize the cleaning with command-line options?

Something like:
combofix.exe -display_lang=en -dont_check_updates -ignore_expire_date -dont_display_the_warning -dont_install_recovery_console -dont_open_log_at_the_end -delete_Qoobox_folder_at_the_end

Edit: Sorry, I noticed now that it may be the wrong forum, move to the correct forum, please.

Edited by ale5000, 26 February 2009 - 08:36 AM.

BC AdBot (Login to Remove)


#2 DaChew


    Visiting Alien

  • Members
  • 10,317 posts
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:03:31 PM

Posted 26 February 2009 - 09:32 AM

Combofix by sUBs was never intended to be used in the way that that software such as SuperAntispyware or Malwarebytes Antimalware is done. There are several excellent reasons for this Disclaimer shown when you start the program:
Some that I have observed:

About 1 in 100 times the computer will not longer be able to boot after running Combofix. This requires experienced hands to restore the system to bootability.

There are several malware infections that "target" Combofix. Experienced Helpers are aware of these infections, and take steps to remove them prior to the use of Combofix. If you do not, various things can happen depending on the infection -- from Combofix being unable to run, to the deletion of the folder C:\Windows\System32, requiring a clean install to repair.

Combofix makes some rather significant changes to the internals of XP and Vista in order to work. It has to be removed with special instructions to fully and safely revert these changes. Experienced Helpers are aware of how to accomplish the uninstallation of Combofix.

The real power of Combofix comes not as a general purposed malware remover. It is rather modest in that capacity. Combofix is powerful because it provides to the experienced Helper a convenient and powerful front-end to Scripts. It is because of its scripting strengths, and its unique reporting capabilities, that you see Combofix often recommended. But not because of its abilities as a general malware scanner.

Many malware removal experts will not respond to a request for help if they see that Combofix was run by the end-user without supervision. You might find after running Combofix that your system problems are worse, and nobody is willing to help you.

There are several general purpose anti-malware utilities where the Author(s) intended the application for general use by end-users without Supervision. Combofix is not one of them, and you would be advised to honor that position taken by its Author.

Best regards,
Bill Castner
MS-MVP 2004 - -2008, ASAP Member


No. Try not. Do... or do not. There is no try.

#3 ale5000

  • Topic Starter

  • Members
  • 7 posts
  • Local time:09:31 PM

Posted 26 February 2009 - 10:09 AM

Remove virus, rootkit and other similar things is a big part of my work, I have used Combofix over 100 times and I know all ways to revive a dead Windows.

So there is a way to modify the combofix.exe to make it more automated?
Since I work on many PCs at one time and also I run combofix without the exe extension from another exe as workaround for rootkit that specifically block combofix, it would greatly speed up my work.

Edit:-display_lang=en would be very helpful when I remove virus on windows version in another language like russian that I don't know and combofix display messages in russian.

Edited by ale5000, 26 February 2009 - 10:15 AM.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users