Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

repeating nested combofix folders in c: drive


  • Please log in to reply
2 replies to this topic

#1 gnube

gnube

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:41 AM

Posted 27 August 2011 - 12:13 AM

I have a Windows XP Home SP2 which was given to me by a client to transfer data to a new laptop, then remove personal profile before the computer is given to his niece. I updated to SP3, created a new profile in the admin group, logged off original profile, logged in to the new one, then attempted to delete the owner's profile. That process was unsuccessful (the removal hung). I started looking through the computer, and noticed an item on the c: drive named combofix with an icon like 'My Computer'. When I explored it in Windows, I saw a replication of the whole tree of My Computer. I ran CHKDSK, but there were no errors found. When I searched the c: drive for items named combofix, I ended up with a list of 6 of them before I stopped the search, all showing as contained in the c: drive root. I am currently imaging the hard drive for safety, and preparing this post from another computer

Edited by gnube, 27 August 2011 - 02:29 AM.


BC AdBot (Login to Remove)

 


#2 gnube

gnube
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:41 AM

Posted 27 August 2011 - 03:09 AM

After I had imaged the c: drive, I deleted the item c:\combofix, rebooted the computer, and successfully removed the Profile and its files. Consider this resolved. i have no idea how or why it got this way. I not only came in after the performance started, I didn't have a program either! :wink:

#3 hamluis

hamluis

    Moderator


  • Moderator
  • 56,396 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:41 AM

Posted 27 August 2011 - 04:14 PM

Thanks for letting us know that you have resolved it, happy computing :).

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users