Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Combofix no deletes backup files?


  • This topic is locked This topic is locked
6 replies to this topic

#1 RexGary

RexGary

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:34 AM

Posted 10 December 2010 - 04:52 PM

I have run Combofix many times no problem. But today (Dec 12 2010) the latest version
deleted quite innocent DOS exe files in backup directories (even copied directories on USB
hard drives). See log attached under

----- File Replicators -----

all the deleted exe files are old DOS assembly files I still use- all the
back-up copies were deleted by this version of Combofix this run- but never before.
Anyone know of changes made to Combofix? If so please could it be reverted?


Rex

Attached Files



BC AdBot (Login to Remove)

 


#2 Judicandus

Judicandus

    Bleepin' Pasta


  • Malware Response Team
  • 730 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Around the world
  • Local time:08:34 PM

Posted 19 December 2010 - 08:36 AM

Hi RexGary,

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know.

I have posted your case to the developer of Combofix and will get back to you as soon as I get an answer.

#3 Judicandus

Judicandus

    Bleepin' Pasta


  • Malware Response Team
  • 730 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Around the world
  • Local time:08:34 PM

Posted 20 December 2010 - 05:12 AM

Hi RexGary,

Please take a look at the following folders:

c:\QooBox\Quarantine\Replicators\

If the files that were deleted are there please compress that folder and attach the compressed file to the post. sUBs, the creator of combofix, will create something to recover the deleted files.

#4 RexGary

RexGary
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:34 AM

Posted 20 December 2010 - 04:14 PM

Hello Judicandus
Many thanks for looking into this for me. I had backups of those exe files in another USB drive that was
not connected- so was able to restore all files OK. So dont need to send the QOOBOX unless Combofix
wants to check them for viruses. And give Combofix my regards for a wonderful product please.
Rex

#5 Judicandus

Judicandus

    Bleepin' Pasta


  • Malware Response Team
  • 730 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Around the world
  • Local time:08:34 PM

Posted 20 December 2010 - 08:35 PM

Hi Rex,

I forwarded your message to sUBs. He had said before: "I don't need samples of those files. Something on his machine triggered the replicator routine which will go after the tonnes of identical files he has on that machine."

So I believe he doesn't need a copy of the files.

Let us know if you have any further problems :)

#6 RexGary

RexGary
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:34 AM

Posted 20 December 2010 - 11:13 PM

Thanks Judicandus

I have a lot of directories for ancient assembly code projects which require an equally
ancient DOS extender called DOS4GW. DOS4GW stops working if the Path variable exceeds
255 bytes total, so I need a copy of the exe files in each project directory.

So please would you ask sUBs kindly to lighten up the sense, search. and destroy
of replicated exe files (or backups of them) for oddities like me!

Rex

#7 Judicandus

Judicandus

    Bleepin' Pasta


  • Malware Response Team
  • 730 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Around the world
  • Local time:08:34 PM

Posted 12 January 2011 - 02:44 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users