MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #1  
Old 01-27-10, 16:10
certifiedgeek certifiedgeek is offline
Private E-2
 
Join Date: Jan 2010
Posts: 9
Thanks: 3
Thanked 0 Times in 0 Posts
Default How To Restore Files Delted By Combofix

Could someone please explain how to restore files that were deleted by combofix? I would like more details on how to restore individual files that have been quarantined, but not all of them. For instance, if combofix removed some important files and also removed a rootkit, I would like to only restore the important files. Is there a link somewhere that explains more in detail how to use combofix such as what types of commands can be dropped on combofix using a text file?

Thanks in advance for your help.
Reply With Quote
Sponsored links
  #2  
Old 01-27-10, 16:18
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 46,656
Thanks: 442
Thanked 4,642 Times in 4,382 Posts
Default Re: How To Restore Files Delted By Combofix

You will need to follow the instructions as given in this thread:

http://forums.majorgeeks.com/showpos...28&postcount=4

This restores everything, but then the new run of Combo will remove the infected files only again.
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
  #3  
Old 01-27-10, 18:50
certifiedgeek certifiedgeek is offline
Private E-2
 
Join Date: Jan 2010
Posts: 9
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: How To Restore Files Delted By Combofix

Thanks for your reply. I saw that post earlier which is very helpful if something horrible happens (like deleting critical files), but I am looking for some different options like the ability to restore individual files myself using a text script. I saw in another post where you could write a text file something like:

Killall::

dequarantine::

(list of files to be deleted)


I am wanting to know if there are other types of commands that can be run with combofix. I also would like to know exactly what is happening when it is going through all the phases. This would help me in doing removals now and later if needed. Could you point me to a place that has documentation on the different commands that can be used with combofix?
Reply With Quote
  #4  
Old 01-28-10, 15:23
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 46,656
Thanks: 442
Thanked 4,642 Times in 4,382 Posts
Default Re: How To Restore Files Delted By Combofix

What you have written is just what you need to do to restore the individual files.

As to learning more regarding using ComboFix, may sites have "teaching" forums for malware removal. I don't believe the list of commands is freely available on the web.
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
  #5  
Old 02-01-10, 09:19
certifiedgeek certifiedgeek is offline
Private E-2
 
Join Date: Jan 2010
Posts: 9
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: How To Restore Files Delted By Combofix

I do various types of on-site computer service work and need to know how to restore files in case something happens like files being deleted.

Could you give me the exact command for restoring something like this, but nothing else.

C:\qooboox\deleted folder

Will combofix go through all the scans again if I run the file restore command because I wouldn't want it to go through the whole scan again. I recently had a scare where a whole program directory was deleted to the qoobox folder, but I wasn't sure how to restore it. It was a program that could be reinstalled fairly easily which helped.

Also, which malware academy do you reccommend or has the greatest need for help? I have been removing viruses since 2002 and might be able to help people in need on the side.

Thanks
Reply With Quote
Sponsored links
  #6  
Old 02-02-10, 15:44
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 46,656
Thanks: 442
Thanked 4,642 Times in 4,382 Posts
Default Re: How To Restore Files Delted By Combofix

As to web sites. Check out the below sites:

BootCamp

Geek U!

What the Tech Classroom

The commands would be:
Quote:
KILLALL::

DeQuarantine::
C:\qooboox\deleted folder

Quit::
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
The Following User Says Thank You to TimW For This Useful Post:
certifiedgeek (02-06-10)
  #7  
Old 02-02-10, 18:33
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,318
Thanks: 61
Thanked 7,639 Times in 4,113 Posts
Default Re: How To Restore Files Delted By Combofix

Quote:
Originally Posted by certifiedgeek View Post
Also, which malware academy do you reccommend or has the greatest need for help?
You don't go to these training sites to give help. You go there to learn the process of removing malware from the bottom up. You will not be allowed to perform malware removal on any sites without having gone thru the training or without otherwise demonstrating that you have all the background/experience already required by showing where you have been already doing this work.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #8  
Old 02-03-10, 11:16
certifiedgeek certifiedgeek is offline
Private E-2
 
Join Date: Jan 2010
Posts: 9
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: How To Restore Files Delted By Combofix

Thanks to you both for your information. Since there are many forums to chose from, which one requires the most help at the current moment? I want to go through the training at the forum that needs the help the most since I should be able to get up and running pretty quick.
Reply With Quote
  #9  
Old 02-04-10, 22:41
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,318
Thanks: 61
Thanked 7,639 Times in 4,113 Posts
Default Re: How To Restore Files Delted By Combofix

Quote:
Originally Posted by certifiedgeek View Post
which one requires the most help at the current moment?
Don't know but people who train at any of these sites typically go on to help at multiple websites.

Quote:
Originally Posted by certifiedgeek View Post
since I should be able to get up and running pretty quick.
It will take longer than you think. You have to work thru many many procedures and levels and you have to wait for teachers/instructors to get back to you at each step. They are only there when they can be and some also spend significant time actively helping in removal forums so this is another reason for the process being slow paced.

TimW only list 3 sites. There are more, some I would not recommend, however the below is also another good one:


BleepingComputer Malware Removal Training Program
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
The Following User Says Thank You to chaslang For This Useful Post:
certifiedgeek (02-06-10)
  #10  
Old 04-23-10, 10:36
certifiedgeek certifiedgeek is offline
Private E-2
 
Join Date: Jan 2010
Posts: 9
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: How To Restore Files Delted By Combofix

Just curious... why didn't you recommend MajorGeeks for training?
Reply With Quote
Sponsored links
  #11  
Old 04-23-10, 11:48
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,318
Thanks: 61
Thanked 7,639 Times in 4,113 Posts
Default Re: How To Restore Files Delted By Combofix

Quote:
Originally Posted by certifiedgeek View Post
Just curious... why didn't you recommend MajorGeeks for training?
Because we do not really have a formal training program and forum in place and do not have enough volunteers here to train you since we are all extremely busy performing malware removal.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #12  
Old 04-23-10, 11:54
certifiedgeek certifiedgeek is offline
Private E-2
 
Join Date: Jan 2010
Posts: 9
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: How To Restore Files Delted By Combofix

It seems the Bleeping Computer site is full and requires a pass code to enter the training program. Any helpful info on how to get in in the near future?
Reply With Quote
  #13  
Old 04-23-10, 13:17
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,318
Thanks: 61
Thanked 7,639 Times in 4,113 Posts
Default Re: How To Restore Files Delted By Combofix

Quote:
Originally Posted by certifiedgeek View Post
It seems the Bleeping Computer site is full and requires a pass code to enter the training program. Any helpful info on how to get in in the near future?
Just see the note posted in the link I gave you
Quote:
Please Note:
Due to the large numbers of requests for training, we utilize an automated program that will open a training slot to applicants when one becomes available. If the classes are full, please check back often to see if there is an opening. Additionally we request that you have a minimum of 20 posts on the Bleeping Computer forum. This will be used in conjunction with the application process to help us get an understanding of your posting style an ability to interact on a forum style help site.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #14  
Old 04-24-10, 22:30
certifiedgeek certifiedgeek is offline
Private E-2
 
Join Date: Jan 2010
Posts: 9
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: How To Restore Files Delted By Combofix

Posted over thirty times today in hopes of being accepted as soon as slots become available. thanks again for your help.

btw, could you pm the forums that you wouldn't train in so i know? I would like to learn from the best program using the latest tools available.

Last edited by certifiedgeek; 04-24-10 at 22:35..
Reply With Quote
  #15  
Old 04-24-10, 23:57
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,318
Thanks: 61
Thanked 7,639 Times in 4,113 Posts
Default Re: How To Restore Files Delted By Combofix

Quote:
Originally Posted by certifiedgeek View Post
Posted over thirty times today in hopes of being accepted as soon as slots become available. thanks again for your help.
Then stop posting, before they consider it an annoyance.

Quote:
Originally Posted by certifiedgeek View Post
btw, could you pm the forums that you wouldn't train in so i know? I would like to learn from the best program using the latest tools available.
Just refer to the ones already list here for you. They are also in the below link. It it is not listed here, then it is not one we recommend.

Becoming A Malware Forum Helper
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
The Following User Says Thank You to chaslang For This Useful Post:
certifiedgeek (04-25-10)
Sponsored links
  #16  
Old 04-25-10, 08:56
certifiedgeek certifiedgeek is offline
Private E-2
 
Join Date: Jan 2010
Posts: 9
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: How To Restore Files Delted By Combofix

Yes, maybe I got a little carried away!

Thanks again and I will wait and see what happens before I post too much more.
Reply With Quote
  #17  
Old 04-26-10, 17:33
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,318
Thanks: 61
Thanked 7,639 Times in 4,113 Posts
Default Re: How To Restore Files Delted By Combofix

You're welcome.

Remember that you could try one of the other training sites if BPC is too busy to allow you in.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #18  
Old 04-26-10, 17:38
certifiedgeek certifiedgeek is offline
Private E-2
 
Join Date: Jan 2010
Posts: 9
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: How To Restore Files Delted By Combofix

OK, I know that I said I wouldn't post any more in there forum, but after talking to about 3 or 4 of their mods, it seemed it wasn't minded. I also made sure they knew that I was there to help and please let me know if I am doing anything they don't approve of.

I applied to GeekU, Tech Support Forums, and BC about 3 days ago so if I don't hear back within a week, I will check on the other forums. I just like the feel and look of those forums, as yours which is why I applied there.

Since I will be obligated to help in the forum that trains me, I thought it would be good if I did some checking before I applied.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
All Files gone after combofix, Spyware is still here! niktsk Malware Removal 2 01-26-10 11:54
ComboFix named all files *.vir dkingery Malware Removal 1 01-25-10 11:31
How to restore ComboFix changes? Imhtp Malware Removal 15 03-26-08 10:56
Accidentally delted Java registry file alhodg Software 1 08-27-07 08:26
Delted a system 32 file by mistake raygt13 Malware Removal 1 10-28-04 23:09


All times are GMT -5. The time now is 22:28.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger