BleepingComputer.com: AV Security 2012 Removal Caused consrv to Not Be Found

Hey guys,

My girlfriend's computer, running Windows Vista, was recently infected with the AV Security 2012 malware. I ran AVG Free(with latest updates), Spybot S-D(latest), MalwareBytes Free(latest), and ComboFix. Apparently, one of these programs targeted consrv, and possibly other vital components, as infected and deleted them.

Now, the computer boots to a blue screen with a "Stop: c0000135 consrv not found" error. I guess I have several questions:

1) My girlfriend has been through several moves recently and it's an old computer, so I doubt she has the boot disk. Can I fix this problem without one? Or is there somewhere that is free and legal to download one?

2) I have no idea whether or not I fully rid her computer of the malware. I thought it was similar to the SpySheriff family of malware, but this one is much more devious apparently.

3) Is it safe for me to be transferring files back and forth from my computer to hers? I don't want both of our computers to be infected.

Thanks in advance for your time and trouble.

ETA: The computer will not run in Safe mode either. And I am not sure how to run these logs if it won't boot to the desktop.

This post has been edited by Tedium: 16 November 2011 - 11:17 AM

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
  
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  
• Click on Repair your computer menu item.
  
• Select US as the keyboard language settings, and then click Next.
  
• Select the operating system you want to repair, and then click Next.
  
• Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

• Select Command Prompt
  
• In the command window type in notepad and press Enter.
  
• The notepad opens. Under File menu select Open.
  
• Select "Computer" and find your flash drive letter and close the notepad.
  
• In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
  Note: Replace letter e with the drive letter of your flash drive.
  
• The tool will start to run.
  
• When the tool opens click Yes to disclaimer.
  
• Press Scan button.
  
• It will make a log (FRST.txt) in the flash drive. Please copy and paste it to your reply.

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!