- Jun 16, 2014
- 781
One of the problems with ComboFix is that if you run it uninstructed, let's say an important Windows system file has been infected, if Combofix goes ahead and removes that file (picking up a malicious signature in it, for example) and using very aggressive removal techniques then your system may end up not even loading up.
I've seen ComboFix remove registry entries before that have caused people's computers to not open any programs, to get a little technical let's say the exefile association has been changed, ComboFix picks up on it and just removes the key detecting the path to the malicious file. Bye bye programs, hello angry users cursing ComboFix for all the damage it's done. I've seen it happen a number of times first hand when people have downloaded and double clicked with their eyes closed.
I think many people forget that ComboFix is a specialist tool that needs to be used with extreme caution, I have seen users who have had the above situation happen to them so whilst TwinHeadedEagle may sound quite harsh to many of you, he has an excellent point, and one that should not be underestimated.
I've seen ComboFix remove registry entries before that have caused people's computers to not open any programs, to get a little technical let's say the exefile association has been changed, ComboFix picks up on it and just removes the key detecting the path to the malicious file. Bye bye programs, hello angry users cursing ComboFix for all the damage it's done. I've seen it happen a number of times first hand when people have downloaded and double clicked with their eyes closed.
I think many people forget that ComboFix is a specialist tool that needs to be used with extreme caution, I have seen users who have had the above situation happen to them so whilst TwinHeadedEagle may sound quite harsh to many of you, he has an excellent point, and one that should not be underestimated.