I'm fine with this capable program clearing the temp directories. That would be "\tmp" and "\temp".
But it should be mentioned in the documents and ref materials that Combofix will also treat
"\x" as a temp directory and CLEAR IT. Perhaps others? I don't know. It should be clearly delineated behavior.
This hidden feature wiped 50GB of data I was using during an ISP switch. It will take days to recover.
It spent over six hours scanning the files and then promply erased them all.
Yes, I understand "Don't use the program unless directed to" or some such. But that is no cover for
an omission of functionallity this large. Check the forum logs for this to be mentioned. I've not seen it.
The only temp directories-folders are "\tmp" and "\temp" as set in the environmental variables.
Thanks for reading..
(60K line log file of deletes.. sigh.)
It should also be noted that when you run ComboFix it will automatically delete files from the following locations:
- Windows Recycle Bin
- Temporary Internet Files
- Temp Folder
Edited by hamluis, 18 August 2014 - 05:04 PM.
Moved from Introductions to AV/AM Software - Hamluis.