Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Combofix changes default codepage


  • Please log in to reply
4 replies to this topic

#1 LittleBit17

LittleBit17

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:49 AM

Posted 22 May 2013 - 03:03 AM

My default codepage in a command/dox-bos running on WinXP was 850.

After runnnig Combofix the default codepage is changed to 1252.

I see that Combofix is running a setpath batchfile with a chcp command,

so Combofix is indeed setting/changing the CodePage.

Any suggestions about restoring the default codepage to the original value (850) ?

(OK, I can use MS recovery but perhaps there is an easier way).


Edited by hamluis, 23 May 2013 - 07:15 AM.
Moved from XP to AV, Firewall, etc. - Hamluis.


BC AdBot (Login to Remove)

 


#2 .X.

.X.

  • Members
  • 490 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:49 AM

Posted 22 May 2013 - 03:27 AM

http://stackoverflow.com/questions/7432545/change-codepage-in-cmd-permanently

See 2nd answer.

#3 LittleBit17

LittleBit17
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:49 AM

Posted 23 May 2013 - 04:41 AM

> http://stackoverflow.com/questions/7432545/change-codepage-in-cmd-permanently

Thanks for your reply,
I checked -see picture- and both OEMCP and ACP keys are already set to the correct codepage 850.
Still -even after system reset- my Command-box starts with codepage 1252.
So Combofix has changed something else probably.

 

PIqqu0P.png


Edited by LittleBit17, 23 May 2013 - 06:31 AM.


#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:49 PM

Posted 28 May 2013 - 08:31 PM

Hi -

I am sure you do not want this, but I will still post the "general link" regarding ComboFix usage -

http://www.bleepingcomputer.com/forums/t/273628/combofix-usage-questions-help-look-here/#entry1511502

The tool comes with no warranty (implied or other) from the designer sUBs for the reason that it should only be used under supervision.

Did you run the tool to remove a "specific infection", or as part of your "regular" operations ?

 

If there was no specific infection, a new restore point should have been created that may help you.

 

Regards -



#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,136 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:49 AM

Posted 29 May 2013 - 08:21 AM

If you ran Combofix due to malware infection, its log should be thoroughly reviewed by trained experts before proceeding further. ComboFix should have saved that log to the root directory, usually C:\ComboFix.txt.

Please follow the instructions in the Preparation Guide For Requesting Help starting at Step 6. When you have done that, start a new topic and post the required logs to include your ComboFix log in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team Experts. After doing this, please reply back in this thread with a link to the new topic so we can closed this one.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users