Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

500+ Spyware removed, combofix still stalls


  • This topic is locked This topic is locked
4 replies to this topic

#1 mysterbrody

mysterbrody

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Location:Seagrave
  • Local time:10:01 AM

Posted 05 December 2009 - 07:37 PM

Hello,

I am trying to rid my fiancee's cousins computer, running Windows XP SP3, of all spy-ware because he seems to know exactly how to accumulate it. Using MalwareBytes Anti-Malware and SuperAntiSpyware I have managed to take off roughly 500 or so of the usual spy-ware/malware. Normally my cocktail of anti-virus/spyware and removal program starts with combo-fix, then Malware-Bytes and lastly SuperAntiSpyware, repeat when necessary, but this time combo fix wouldn't even work. First it said that the version was corrupt and to re-download, but that was just some malware causing that, I have seen that before. Eventually I managed to get combo-fix to start up, and it went through the creation of the restore point, but it stalls at the:

"Scanning for infected files...
This typically doesn't take longer than ten minutes,
However scanning times for badly infected machines may easily double...
and a continually blinking under-score"

I have let the scan run for two and a half hours and it does not get past that step, it doesn't even get to the first scanning stage. Am I just not letting it run long enough?, because in my experience with combo-fix it never takes that long, and always at least gets to stage one before bogging down.

Any help is appreciated,

Thanks alot

Brody

Edited by mysterbrody, 05 December 2009 - 07:40 PM.


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:01 AM

Posted 05 December 2009 - 08:17 PM

Hello You really should not run Combofix on your own. This from the Blue text atop this forum..

When posting your problem, do not run and post a ComboFix logs. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


Now you will need to Post an HJT log to see what happened and get it clean.
You will need to run HJT/DDS.
Please follow this guide. go and do steps 6 thru 8 ,, Preparation Guide For Use Before Using Hijackthis. Then go here HijackThis Logs and Virus/Trojan/Spyware/Malware Removal ,click New Topic,give it a relevant Title and post that complete log.

Let me know if it went OK.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 mysterbrody

mysterbrody
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Location:Seagrave
  • Local time:10:01 AM

Posted 05 December 2009 - 09:38 PM

Yes I do know that, and thanks for the concern, but I have experience with this, maybe not as much as some but I am a PC technician, almost technologist, so I would hope that that might qualify me. Though I realize that a title doesn't mean anything if there is nothing to back it up and I am always more than happy to learn alternate methods and learn from the experience of others. I have used it many a time before, and used the log to manually remove malware before...

I have made my post and will update with the outcome,

Thanks for your advice, I really appreciate it.

Brody.

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:01 AM

Posted 05 December 2009 - 10:36 PM

Hi Brody ,I understand a can appreciate you ability. It's just that we have many many novice users and we try to keep them from making things worse. So we only allow those and HJT logs in the other forum where any problems can be fixed.

Thanks for coming by.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,947 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:11:01 AM

Posted 06 December 2009 - 09:29 PM

Hello,

Now that you have posted a log here: http://www.bleepingcomputer.com/forums/t/276694/500-malware-removed-combofix-still-not-working/ you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the HJT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days, up to two weeks perhaps less, to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

To avoid confusion, I am closing this topic. Good luck with your log.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users