Thane,
Thank you! I will now go back and try this protocol. Completely forgot
this idea.
Lastly, is it possible for an application to set access rights such that
even the
system admin account can NOT reset same via the ATTRIB command in DOS?
Combofix seems to create a directory in root (c:\) called "Qoobox" which
I think is
its' quarantine area. Fine. But, inside this directory is a
sub-directory called
"BackEnv" that appears to be empty. This sub-directory is so well
protected, I can NOT
make it just go away.
Best,
Duncan
On 11/30/2010 05:18, Thane Sherrington wrote:
At 06:07 PM 29/11/2010, DSinc wrote:
Thane,
Is that a CMD line tool/command?
If so, I may be farqued!
But, I'll give it a try.
Just run it out the same folder you ran combofix out of before. (If
you've already deleted combofix, redownload it, run it, and then run
the uninstall.) You can also manually delete the extra driver with no
problems.
T
