• Welcome Guest, to the Spybot Forums! It's 2025, and we just upgraded our forum software.

    Today is Safer Internet Day, and with our new forum, you can finally use passkeys to login. That was about time!

    Of course, you could ask if a forum is still useful, with so many social media networks out there where you might already have an account, and met a lot of users. You can now use your login from some of those networks to log in here. And by posting here, your question and data is stored on our servers and not automatically shared with a whole social media network.

    We'll also start using the forum for small bits of information, announcements and more again.

ComboFix.exe time adjustment

P

PiKapp504

New member
Ok, so I've been searching and reading up on the forums to remove some severe spyware that infected my computer. So far I think I've gotten it ALL! I have 2 questions though:

a) According to the ComboFix.exe program, the time is supposed to adjust itself back to how it was before it ran. Well, it's still stuck in military time and I'd like it back to how I used to have it. How do I go about doing this?

and lastly

b) Every time on boot up now, I receive a rundll error message stating it can't find the following file: "C:\WINDOWS\System32\chuwfehd.dll". Is this a needed file, or more spyware/malware that's trying to "fix itself"? Thanks in advance!
 
Hello PiKapp504

Welcome to Safer Networking.

Please read Before YouPost
That said, All advice given by anyone volunteering here, is taken at own risk.
While best efforts are made to assist in removing infections safely, unexpected stuff can happen.

Download Trendmicros Hijackthis to your desktop.
  • Double click it to install
  • Follow the prompts and by default it will install in C:\Program Files\Trendmicro\Hijackthis\Highjackthis.exe
  • Open HJT Scan and Save a Log File, it will open in Notepad
  • Go to Format and make sure Wordwrap is Unchecked
  • Go to Edit> Select All/Edit > Copy and Paste the new log into this thread
    DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.

Time for some housekeeping


  • Click START then RUN
  • Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.

    • CF_Cleanup.png

  • When shown the disclaimer, Select "2"

The above procedure will:
  • Delete the following:
    • ComboFix and its associated files and folders.
    • VundoFix backups, if present
    • The C:\Deckard folder, if present
    • The C:_OtMoveIt folder, if present
  • Reset the clock settings.
  • Hide file extensions, if required.
  • Hide System/Hidden files, if required.
  • Reset System Restore.




If your still getting that error than your system is not fully clean. Post the Hijackthis log
 
You must log in or register to reply here.
Back
Top