This is one of the reasons why we recommend not to use ComboFix on your own (see here
). There are risks involved and we would prefer it if someone (a trained expert) who knows how to resolve any issues that may arise when running the tool, is supervising it's use.
As a general policy, Bleeping Computer does not offer advice
on how to run ComboFix unless we asked someone to run it or
if there is a problem with the computer caused by running the tool. We recommend that people should not be using ComboFix without being advised to do so by a trained expert (see here
) who is assisting them deal with a malware problem. When issues arise due to complex malware infections, problems running ComboFix (i.e. stalling, hanging, crashing) or with other security tools causing conflicts, experts are usually aware of them and can advise what should or should not be done while providing individual assistance. When false detections are identified, experts have access to the developer and can report them so he can investigate, confirm and make corrections. Those attempting to use ComboFix on their own do not have such information and are at risk when running the tool in an unsupervised environment.
While our policy is not to offer advice on running ComboFix unless we asked someone to run it, we are willing to assist with resolving problems caused after using it. As part of its routine ComboFix creates a folder named Qoobox in C:\QooBox\Quarantine\ to keep all files removed and renamed by ComboFix so they no longer pose a threat. Restoring any files from that location will require reviewing the ComboFix log to determine exactly what was removed and most likely the use of a script to restore them. ComboFix should have saved a log to the root directory, usually C:\ComboFix.txt
Please follow the instructions in the Preparation Guide For Requesting Help
starting at Step 6.
- If you cannot complete a step, then skip it and continue with the next.
- In Step 6 there are instructions for downloading and running DDS which will create two logs. (Note: Windows 8.1 Users will not be able run DDS and create a log)
When you have done that, post your logs
to include your ComboFix log
in the Virus, Trojan, Spyware, and Malware Removal Logs forum
, NOT here
. A member of the Malware Removal Team will be able to review your log and advise how to recover any files placed in Qoobox.
-- ComboFix logs are not permitted
in this forum. If no log was created by ComboFix or you cannot post its log, then ignore this part and just post the other requested log(s) as follows.Start a new topic
, give it a relevant title and post your log(s) along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. If you cannot produce any of the required logs or you're using Windows 8.1, then still start the new topic anyway. Explain that you followed the Prep. Guide, were unable to create the logs, and describe what happened when you tried to create them.
After doing this, please reply back in this thread with a link to the new topic so we can close this one.