Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Installed combofix on my own... Still any hope?


  • Please log in to reply
9 replies to this topic

#1 Alex384

Alex384

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 26 February 2013 - 07:29 PM

Hello,
I was another person who installed combofix on my own without reading the warnings. I ran the program and As soon as the stages were over when it was listing these files I was researching combofix more and read that it could do alot of harm. I immediately closed the program in the middle of the scan. Now, I can't access the Internet. I don't know if there's anything else combofix done to my computer. I didn't do anything else to my computer after that nor did I restart it because I don't know if it'll boot or not. I can't find the log either probably because I canceled the scan. I still have combofix on my computer though. Is there ANYTHING I can do to reverse the changes?

Thank you so much.

BC AdBot (Login to Remove)

 


#2 The Dark Knight

The Dark Knight

    The Magician


  • Security Colleague
  • 661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Krypton
  • Local time:09:29 AM

Posted 01 March 2013 - 05:57 PM

Hello and welcome to BleepingComputer. I am The Dark Knight and will be assisting you. Please ask questions if anything is unclear. :welcome:

 

What operating system are you using?

 

You should try a Restore Point. Please let me know if you need help accessing one.


If you make yourself more than just a man, if you devote yourself to an ideal...you become something else entirely. A legend, Mr. Wayne, a legend!


If I have helped you please consider donating to the Neuroscience Research Institute.


Posted Image
Posted Image


#3 Alex384

Alex384
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 01 March 2013 - 08:25 PM

Hi The Dark Night,

 

 

I'm using Windows 7 and I restored back to when I installed a Windows update but I still see ComboFix on my computer.



#4 The Dark Knight

The Dark Knight

    The Magician


  • Security Colleague
  • 661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Krypton
  • Local time:09:29 AM

Posted 02 March 2013 - 08:13 PM

Good afternoon Alex384,

 

Do you have internet now?

 

Please click Start>Run and copy/paste the following text, including the space between "ComboFix and "/uninstall", into the Run box and click OK:

ComboFix /uninstall


If you make yourself more than just a man, if you devote yourself to an ideal...you become something else entirely. A legend, Mr. Wayne, a legend!


If I have helped you please consider donating to the Neuroscience Research Institute.


Posted Image
Posted Image


#5 Alex384

Alex384
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 03 March 2013 - 01:39 PM

Yes I have Internet now but  I wanted to know if the files that were deleted by CF in the quarantine were any important before deleting them and uninstalling CF first.



#6 The Dark Knight

The Dark Knight

    The Magician


  • Security Colleague
  • 661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Krypton
  • Local time:09:29 AM

Posted 03 March 2013 - 03:45 PM

Hello Alex384,

 

I will need you to post the log please in order for me to see what ComboFix deleted.


If you make yourself more than just a man, if you devote yourself to an ideal...you become something else entirely. A legend, Mr. Wayne, a legend!


If I have helped you please consider donating to the Neuroscience Research Institute.


Posted Image
Posted Image


#7 Alex384

Alex384
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 03 March 2013 - 05:01 PM

Good Afternoon,
 
Is this the log you're looking for?

Attached Files



#8 The Dark Knight

The Dark Knight

    The Magician


  • Security Colleague
  • 661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Krypton
  • Local time:09:29 AM

Posted 04 March 2013 - 03:39 PM

Howdy Alex384,

 

That log is rather blank so unfortunately I can't tell what ComboFix deleted. But if you have internet now and you have removed ComboFix then your computer is fine. Are there any issues on your computer or is everything good?


If you make yourself more than just a man, if you devote yourself to an ideal...you become something else entirely. A legend, Mr. Wayne, a legend!


If I have helped you please consider donating to the Neuroscience Research Institute.


Posted Image
Posted Image


#9 Alex384

Alex384
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 04 March 2013 - 03:48 PM

Hello 

 

Everything seems to be running fine so I'll go ahead and uninstall CF.



#10 The Dark Knight

The Dark Knight

    The Magician


  • Security Colleague
  • 661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Krypton
  • Local time:09:29 AM

Posted 05 March 2013 - 03:33 PM

Hey Alex384,

 

Sounds good.

 

=====

 

Please consider using these ideas to help secure your computer.  While there is no way to guarantee safety when you use a computer, these steps will make it much less likely that you will need to endure another infection.  While we really like to help people, we would rather help you protect yourself so that you won't need that help in the future.   :thumbup:


IMPORTANT: Please enable Automatic Updates under Start > Control Panel > Automatic Updates to ensure your Windows updates regularly. This is extremely important in ensuring you remain protected against vulnerabilities and infections. This is a crucial security measure.


As a minimum, you need at least an antivirus, firewall and some type of anti-spyware program.

Please consider installing and running the following program (there is a free version available):

SpywareBlaster
A tutorial on using SpywareBlaster to prevent malware from ever installing on your computer may be found here.


Please keep these programs up-to-date and run them whenever you suspect a problem to prevent malware problems.  A number of programs have resident protection and it is a good idea to run the resident protection of one of each type of program to maintain protection.  However, it is important to run only one resident program of each type since they can conflict and become less effective.  That means only one antivirus, firewall and scanning anti-spyware program at a time.  Passive protectors, like SpywareBlaster, can be run with any of them.  

Note that there are a lot of rogue programs out there that want to scare you into giving them your money and some malware actually claims to be security programs.  If you get a popup for a security program that you did not install yourself, do NOT click on it and ask for help immediately.  It is very important to run an antivirus and firewall, but you can't always rely on reviews and ads for information.  Ask in a security forum that you trust if you are not sure.  If you are unsure and looking for anti-spyware programs, you may be able to find out if it is a rogue here:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

A similar category of programs is now called "scareware."  Scareware programs are active infections that will pop-up on your computer and tell you that you are infected.  If you look closely, it will usually have a name that looks like it might be legitimate, but it is NOT one of the programs you installed.  It tells you to click and install it right away.  If you click on any part of it, including the 'X' to close it, you may actually help it infect your computer further.  Keeping protection updated and running resident protection can help prevent these infections.  If it happens anyway, get offline as quickly as you can.  Pull the internet connection cable or shut down the computer if you have to.  Contact someone to help by using another computer if possible.  These programs are also sometimes called 'rogues', but they are different than the older version of rogues mentioned above.


Please consider using an alternate browser. Mozilla's Firefox browser is a very good alternative.  In addition to being generally more secure than Internet Explorer, it has a very good built-in popup blocker and Add-ons, like Adblock Plus and NoScript, can make it even more secure. To avoid dangerous sites Web of Trust or McAfee SiteAdvisor can be installed. Google Chrome or Opera are other good options.

Two useful programs for keeping your programs up-to-date are FileHippo or Secunia PSI. Running one of these regularly will help you obtain the latest program updates.

Please also read Tony Klein's excellent article: How did I get infected in the first place.

Hopefully these steps will help to keep you error free.  If you run into more difficulty, we will certainly do what we can to help.  :)


If you make yourself more than just a man, if you devote yourself to an ideal...you become something else entirely. A legend, Mr. Wayne, a legend!


If I have helped you please consider donating to the Neuroscience Research Institute.


Posted Image
Posted Image





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users