Nikos' Config

Should i downlaod combofix again and reinstall it prior to uninstall it?
 
yes better. try to reboot and remove the leftover manually first, then if you can't, reinstall it then use the command i gave you above.
 
ok i will. This time it scanned it gave me this:

Infected copy of c:\windows\system32\Services.exe was found and disinfected
Restored copy from - c:\windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe

I was infected? Combofix is a virus removal tool?
 
Also the same 2 directories i was taking about in a p[revious post still cant be deleted....
 
Normally Combofix is only used when instructed to do so, when seeking help from a malware removal expert.
 
I though it was only to rpduce system logs.

btw Panda Cloud and CAV wasnt able to identify the services.exe infection?

please aslo tell me how to remove these persistant folders.
 
What make you think that you were infected? you just used an very advanced user's removal tool without any clues of what it is, what it does and how to interpreting it...

I advise you not using tools that you can't master.

thanks :D
 
Nikos said:
Also the same 2 directories i was taking about in a p[revious post still cant be deleted....
Click to expand...

Download Unlocker 1.9.1 at http://www.filehippo.com/download_unlocker/

Press delete button to delete the folder. if it fails, Unlocker will pop up and you can kill it.

alternative, take ownership might work but that requires changes in the registry.
 
Umbra Corp. said:
What make you think that you were infected? you just used an very advanced user's removal tool without any clues of what it is, what it does and how to interpreting it...

I advise you not using tools that you can't master.

thanks :D
Click to expand...

As i sadi in a previous post of mine:

Infected copy of c:\windows\system32\Services.exe was found and disinfected
Restored copy from - c:\windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services​.exe
 
Nikos, I have posted the solution to remove the folders....
check the link I gave you.
 
Nikos said:
As i sadi in a previous post of mine:

Infected copy of c:\windows\system32\Services.exe was found and disinfected
Restored copy from - c:\windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services​.exe
Click to expand...

Try Hitman pro. If it does not detect services.exe then it may be a false positive. If it does then Hitman pro will replace it.
 
Biozfear said:
Nikos, I have posted the solution to remove the folders....
check the link I gave you.
Click to expand...

I was just doing that, trying unlocker, ir removed one folder but not the other...damn
 
what error message do you get? can you link a screenshot? when I get home I ll have a look.

You can also use FileAssassin by the same company behind Malwarebytes Anti-Malware.

Although I would like to see the screenshot of the error message and perhaps take ownership would do...
 
Wait you're wanting to remove QooBox and Program Data (http://malwaretips.com/Thread-Nikos-Config?pid=65697#pid65697 )

You're not suppose to remove program data.
 
FileAssasin couldnt also delete files inside this folder.

how can i take ownership of that file?

Damn combofix whyditn it have an option to delete this leftovers?

Malware Maniac said:
Wait you're wanting to remove QooBox and Program Data (http://malwaretips.com/Thread-Nikos-Config?pid=65697#pid65697 )

You're not suppose to remove program data.
Click to expand...

Its only a backup of ComboFix.
Its not my actualt live program files.
 
If it is programdata folder, then you must have the take ownership enabled.

several ways: regedit or tweak via software. Google it.

However before you even adventure in deleting programdata, I sure hope you have backed up your system as I said before and you are fully aware of what you are doing...
 
Just tell me how to remove this, iam not in mood for googling that. it captures 400 MBs of mh hdd.
 
You must log in or register to reply here.

You may also like...