Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

zero access/consrv installing when I un-install a program


  • Please log in to reply
3 replies to this topic

#1 Stevesey

Stevesey

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:06:21 AM

Posted 28 March 2012 - 03:03 PM

Have to admit defeat on this one and ask for help (have never failed to fix friends computers, bit out of practice at present and this one has got me stuck). Windows 7 btw.

If I uninstall a program - I get a virus blocked message from Panda Cloud. Comsrv.dll. Did a MBAM scan, it picked up a couple of files in the GAC (something like tmp\U in the path). Rebooted afterwards and bang - I then get the %hs file missing blue screen.

I have a recent windows image backup - so restored, after a restore MBAM doesn't pickup anything, but if I uninstall (a different program this time). Panda pops up again, and if I check the registry I find and entry pointing to comsrv (if I change back to winsrv the system can re-boot).

Just restoring again - to get back to a system that is not actively infected, but of course as soon as I uninstall (and possibly install) I will be.

Suggestions on how to go about fixing?

BC AdBot (Login to Remove)

 


#2 TheForgottenGod

TheForgottenGod

  • Members
  • 39 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:21 AM

Posted 28 March 2012 - 03:18 PM

try running rkill and post the results here

then use TDSSkiller and post results here,

a moderatore will be with you shortly to help you further.

#3 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:21 AM

Posted 28 March 2012 - 03:22 PM

We need advanced tools for 64 bit zero access

Read the guide here on preparing logs

http://www.bleepingcomputer.com/forums/topic34773.html

and create a topic here

http://www.bleepingcomputer.com/forums/forum22.html

Good luck

#4 Stevesey

Stevesey
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:06:21 AM

Posted 28 March 2012 - 04:10 PM

New topic here: http://www.bleepingcomputer.com/forums/topic447955.html




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users