combofix - 'SORT' is not recognized as an internal or external command. :-(

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by itsho, Aug 6, 2008.

  1. itsho

    itsho Private E-2

    first of all i would like to say huge 'thank you' to everybody here on the forum - i'm always getting answers to questions that i have in mind - all i need to do is search in this forum and walla ! ;)

    so before i start - thank you all - "combofix" creator, and helpful users, who give great advises. :-D

    i'm trying to run Combofix (on Normal mode ! not Safe mode) on one of my computers in my domain (CPU - intel 2.8GHZ, 512MB RAM, 80GB HD, WinXP Pro).
    the result is this:

    Code:
    AutoScan
    
    Scanning for infected files . . .
    This typically doesn't take more than 10 minutes
    However, scan times for badly infected machines may easily double
    'SORT' is not recognized as an internal or external command,
    operable program or batch file.
    
    
    and hangs there for about an hour. so i stopped the process and tried the next steps:
    1 clearing the %TEMP%
    2 deleting the "C:\Combofix" directory,
    3 running HJT and checking the log on
    Code:
    hXXp://wXw.hijackthis.de/
    which seems to be fine.
    4 i'm now shutting the computer and trying to run it on safe mode. if it'l work i'll post immidiatly :major

    thank you again everyone ! :wave :)
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Are you running the below malware cleaning guide?

    READ & RUN ME FIRST. Malware Removal Guide

    If not then why are you running ComboFix to begin with? If you are running the above guide, have you followed the instructions for properly using ComboFix? Is it on your Desktop.....etc.

    sort is a built-in Windows command. Look for C:\WINDOWS\SYSTEM32\sort.exe Do you see this file. If the file exists, and is not being found you may not be running in an administrator account or your PATH environment variable may be incorrectly setup.
     
  3. itsho

    itsho Private E-2

    thank you. i did followed the instructions. and i solve my problem by simply copying the "sort" file from another computer (with xp sp2). and suddenly it works !
    :)

    thank you !

    any ways , what's the meaning of the line that repeats herself :
    that i see at the end of Combofix ?
    is it bad or good ?
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    SED is a Stream Editor being used by ComboFix. Apparently it does not like something in the script it has created.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds