Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

combofix aftermath


  • Please log in to reply
12 replies to this topic

#1 Larryvans

Larryvans

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:09:25 AM

Posted 06 March 2010 - 08:37 PM

Hi a few weeks ago I was helped here with a virus issue. My problem now is, I am not unable to insert a CD into the drive and have it start on its own. I have tried a couple suggestions from other posts, but with no fix. I have downloaded Tweak UI from windows and also downloaded Autofix from a link in a post on this forum. I would like to be able to have this problem fixed. I am running XP Pro sp3 with all the latest updates. Thank You in advance. Larry

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:09:25 AM

Posted 06 March 2010 - 08:56 PM

Keeping Autorun enabled on USB and other removable drives has become a significant security risk due to the increasing number of malware variants that can infect them and transfer the infection to your computer. To learn more about this risk, please read:These types of infections usually involve malware that modifies and loads an autorun.inf (configuration) file into the root folder of all drives (internal, external, removable) along with a malicious executable. When removable media such as a CD/DVD is inserted (mounted), autorun looks for autorun.inf and automatically executes the malicious file to run silently on your computer. In USB drives, it modifies Windows Explorer's right-click context menu and redirects to executing the malicious file if the "Open" command is used or double-clicking on the drive icon. When a flash drive becomes infected, the Trojan will infect a system when the removable media is inserted if autorun has not been disabled.

ComboFix automatically disables autoruns the first time it is used. Since malware writers have begun to exploit the autorun/autoplay feature, the author of ComboFix, in an effort to help protect your computer from becoming infected via that avenue, configured ComboFix to disable it. Many security applications disable this feature as well and even Microsoft recommends doing the same

...Disabling Autorun functionality can help protect customers from attack vectors that involve the execution of arbitrary code by Autorun when inserting a CD-ROM device, USB device, network shares, or other media containing a file system with an Autorun.inf file...

Microsoft Security Advisory (967940): Update for Windows Autorun

Disabling autorun/autoplay does not prevent you from accessing your media sources. They are still available by opening My Computer and accessing the source drive (CD, DVD, USB or external hard drive). Pictures on a camera can still be accessed through My Pictures and selecting "Get Pictures" from a scanner or camera. Media can be accessed via the program you normally use it with such as music CDs via Media Player, blank CDs via burning software, image handling software provided with the camera. We strongly recommend you leave the autorun feature disabled and get into the habit of accessing your media devices manually.



How To Enable/Disable Autorun (Windows XP)
  • Open Windows Explorer by pressing the Windows + "e" key
  • Right-click the desired CD-ROM and select Properties from the menu.
  • Select the AutoPlay tab.
  • Select each item from the pulldown list and for the Action to perform, select "Take no action" to disable autorun, or pick the apporpriate action to take if enabling autorun.
  • Select OK.

Edited by garmanma, 06 March 2010 - 08:57 PM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 Larryvans

Larryvans
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:09:25 AM

Posted 06 March 2010 - 10:26 PM

I have no usb drives, I have two cd drives that i would like to restore. I like the convenance of installing new software without looking through the directory for an install.exe or setup.exe file. I don't understand how I can get an infection through my cd drives. Larry

#4 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:09:25 AM

Posted 06 March 2010 - 11:05 PM

At the bottom of the post tells you how to re-enable autoplay
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#5 Larryvans

Larryvans
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:09:25 AM

Posted 07 March 2010 - 09:23 AM

Hello The steps to enable autoplay does not seem to work as I have tried those steps several times. My cd software still will not begine to install on its own. I have tried two different cd's (both have autorun in their directorys) Is their somthing I'm missing?

#6 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:01:25 PM

Posted 07 March 2010 - 11:26 AM

Can you right click on your cd drive in My Computer and select Auto Play?

#7 Larryvans

Larryvans
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:09:25 AM

Posted 07 March 2010 - 02:21 PM

yes I can do anything with either cd drives. but nither drives will automaticly play or install. I can do thosethings manully but going through the directorys.

#8 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:09:25 AM

Posted 07 March 2010 - 06:24 PM

Is Combofix still installed?

To uninstall ComboFix, press the WINKEY + R keys on your keyboard or go to Posted Image > Run... and in the Open dialog box, type:
ComboFix /Uninstall
  • Posted Image
  • Press OK.
  • Doing this will:[list]
  • Delete ComboFix's related folders and files.
  • Reset the clock settings.
  • Hide file extensions.
  • Hide System/Hidden files.
  • Clear the System Restore cache to prevent possible reinfection.
  • Create a new Restore point.
-- Vista users, users can refer to these instructions: How to Enable Run Command in Vista
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#9 Larryvans

Larryvans
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:09:25 AM

Posted 07 March 2010 - 07:09 PM

I have done this before. My HJT helper and I had problems doing this but after a while we got it removed. I had removed combofix by just deleting it from it's directory. My helper said to reinstall it and them uninstall it with the run command.

#10 Larryvans

Larryvans
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:09:25 AM

Posted 10 March 2010 - 11:33 AM

Was just wondering if we gave-up on my issue. Have'nt heard from anyone for a while.
:thumbsup:

#11 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:09:25 AM

Posted 10 March 2010 - 11:50 AM

My helper said to reinstall it and them uninstall it with the run command.

Did you?

Did your helper have you run OTCleanit?

Please download OTCleanIt.exe and save to your Desktop.
  • Connect to the Internet and double-click on the file to launch the program.
  • Click on the green CleanUp! button.
  • If you get a warning from your firewall or other security programs regarding OTCleanIt attempting to contact the Internet, please allow the connection.
  • When it has finished, OTCleanIt will ask you to reboot so it can remove itself.
-- Note: Doing this will remove any specialized tools (including this one) downloaded and used. All other programs should be kept on your machine and used on a regular basis.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#12 Larryvans

Larryvans
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:09:25 AM

Posted 10 March 2010 - 01:05 PM

I did reinstall combofix then removed it with the run command. I do not know anything about OTcleanit. I will do this step now thanks

#13 Larryvans

Larryvans
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:09:25 AM

Posted 10 March 2010 - 01:20 PM

Ran the clean up tool, rebooted. nothing has changed. when I insert a cd into the drive, the drive starts running, it will run for about a minute and a half then stop, with nothing showing up on the screen. ???????????????????? I went through the other steps again to enable autorun but it still won't work. Help!!!!!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users