ComboFix is a program written by sUBs, that removes spyware, malware, rogue antispyware apps and Vundo infections. Also it deletes a bunch of files related to the infections and is updated fairly regularly. When Combofix finished, it will produce a report for you. Power user can use the report to search and remove infections that are not automatically removed.
Download Combofix
How to use combofix:
Please use the official ComboFix guide bleepingcomputer.com/combofix/how-to-use-combofix or the following steps:
1. Temporarily disable your antispyware, antivirus and any antimalware real-time protection, so they may interfere with running of ComboFix.
2. Download Combofix.
Download combofix from the direct link above and save it to your Desktop.
3. Install Recovery console. (only Windows XP)
Skip the step, if the Windows Recovery Console is already installed.
- If you have Windows XP disk, then read the article: How to install and use the Windows XP Recovery Console.
- You should know version of Windows. Right click the My computer icon. Click Properties. In the window read information about your Windows version.
- Click here for open Microsoft’s website.
- Scroll down.
- Select the download that’s appropriate for your operating system and download setup boot disk installation to your Desktop. Use Service pack 2 version, if your Windows XP is Windows XP Service pack 3.
- Now close all open windows and programs.
- Drag the setup package and drop onto ComboFix.exe.
- Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console.
- At the next prompt, click ‘Yes’ to run the full ComboFix scan.
- When the tool is finished, it will produce a report for you.
4. Run combofix.
- Close all programs. Your Task Bar should be clear of any program entries including your Internet Browser.
- Double click Combofix.exe icon on your Desktop to start it.
- If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it’s malware removal procedures, if no, then follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console. Once installed, you should see the following message:
The recovery console was successfuly installed.
Click ‘YES’ to continue scanning for malware
Click ‘NO’ for exitClick YES button.
- The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your “drive access” light. If it is flashing, Combofix is still at work.
- When finished, it shall produce a log for you.
Note: Do not mouseclick combofix’s window while its running. That may cause it to stall
Questions and Answers:
1. I ran combofix which can affect autorun so now autorun and autoplay is not working.
Combofix prevents autorun of all CDs, floppies and USB devices to assist with malware removal & increase security. Read how to disable/enable autorun and autoplay.
2. No internet connection after running Combofix.
Restart your computer to restore back your connection. If it does not work, then click Start ->Settings -> Control Panel. Double click to Network connections. Locate your connection and right click on it. In the menu click to Repair option. When repair proccess has finished, your connection should be working again.
3. I ran combofix and got error message saying “This copy of combofix has expired”.
Download an updated copy from here or change your PC system time to some days ago (7days for example). Warning, only if first option don`t work.
4. How to uninstall combofix.
After using Combofix, you may uninstall it from your PC. Read how to uninstall combofix.
5. What should i do with QooBox and Combofix files ?
Use command: combofix /uninstall for uninstalling of combofix and removing all combofix files and QooBox directory. Read more here
6. Combofix is virus ?
No, No, No. Some security programs will incorrectly identify this tool as potentially or actually malicious due to some of it’s components. Although these files can be used maliciously, they are an integral part of the fix and I recommend you disable your antivirus.
I strongly suggest that you post your log at My AntiSpyware Forum and finally remove the items as directed by the Member helping you. This involves no analysis of the list contents by you. That will be done by the Help Forum Staff.
More Free Antispyware Tools: MalwareBytes Anti-malware – free spyware, malware, trojan remover, SDFix free trojan remover tool, SUPERAntiSpyware – free antispyware program.
nice antispy
I find it works good & also helped me in removing many bugs…so u pls send me some other usefull links for latest protection & plz updating combofix ….. thanking u…
Thanks a lot. It finally did delete the autorun.inf in my flash drive! I’ve been trying all possible resolutions for four hours already. Thanks again.
These files below did quite a horror job on my system. I am not sure if it was one or two infections, but these were fingered with Combofix.
dbfb.dll
svCKknnn.ini
urqRIYpo.dll
nnnkKCvs.dll
The desktop and taskbar disappeared. There were registry entries connected to Winlogon. Deleting the files concerned was impossible until Combofix did it’s job. Great program, worked well, but be patient, as it works hard. Thanks a bunch!
I dont get how these peeps dont see what this program really does,,why would you run something that is going to stop your antivirus and remove files w/o your permission,there are alot of proggys out there to do what is needed,,there is no such thing as a all in 1 fix,so im very much appauled as to this company even thinking about giving this program to regular peeps,,im sure the ones who wrote these comments had no 3rd party fwall running or sygate or uniblue,,,no reason to ever run a program thas going to delete files that your computer needs,,thas defeating the purpose of not reformating,,,i ran this program, and i work on networks and computers daily.Im an IT guy for a big corp..but anyway,,when i ran this program it deleted the main AV,,and alot of files that were needed for the server and network.I ran this program on a brand new puter out of box and it del files that were needed to run the main kernal,,whyyyyy would u release a program that does that ,,doesnt make any sense,,and i knew what I was doing,,i feel sorry for those peeps that didnt comment ,,they probably dont have a computer now to get online,trust me folks when i say,theres plenty of programs to do what this so called 1 fix does without you having to reinstall 20 of your programs,,,This was the worst program by far i have ever seen released to the public,,i will be in touch ,,im investigating your sources as we speak,,anywayy,,,sad ,,try anything else ..plezzz,,thas my 25 cents,,thxxxx
very useful
Just Me
I think your are just jealous. You are the only one who have problems with ComboFix. As I use it on 4 of my network pc’s and resolved a lot of problems. In any way ComboFix did not delete any of my operating system files like you insinuate. Go use your stupid macfee and leave these people alone.Just follow your instructions carefully and you will see. My 50 cent,,thxxxxx Mr
ya
gracias
thank for the tool
how i got the latest updates of combofix
thanks
For updating of Combofix, remove old file and download a fresh copy from here.
I have installed to my desktop the combofix from the above link. I ran it 4 times in safe mode and 2 times in normal mode and each time it came up with the following message before printing the \
whats message ?
Thank you so much.
First I thought spyware doctor and AVG gonna destroy these viruses but it can’t.
I tried delete manually using cmd still the autorun.inf can’t be deleted.
Eventhough it say turn off my antivirus, I don’t care much cause I lose hope and I was thinking about reinstall my windows.
After I run the software, It doesn’t just deleted the autorun.inf but other viruses as well.
before I can’t view my hidden files and now I can.
This is the best software ever… THANK YOU
It is great software. But How can it be store and frequently resused. As it expired after a few time application?
Second I have problem, that a file ctfmon.exe come automaticaly to my windows start up, and activate even remove from startup.Is it a virus?
ctfmon is not virus, if it located in the WINDOWS\system32 folder.
a freakin’ million thanks to this one!
cheers!
U know..I had to thanks whoever that build this software. I tried many time to remove PRINTDRV.EXE, at last i found this software. Thanks!
Thanks a lot. COMBOFIX really works. ‘kavo’ removed. i can now see my hidden files. 🙂
Thanks for the Combo Fix. I hope it works!!
V V Thanks.Fine..!
“ComboFix” fantastic utility! but it works only on xp can anyone give me ComboFix url for win2000
Try Malwarebytes Anti-malware.
i am facing a problem newfolder.now i will try comofix tool.
very usefull to us
Thank you!
you people are gods!
combo fix rocks.
Good Site.
Good Site…………
Thank You……………. Help