BleepingComputer.com: consrv.dll blowing up machine

Forum Guidelines

Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help

Posted Image

Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.

Posted Image

DO NOT RUN ComboFix unless requested to.

Posted Image

Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.

Posted Image

When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.

Posted Image

Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.

2 Pages
←
1
2

You cannot start a new topic
This topic is locked

consrv.dll blowing up machine whenever avg or malwarebytes deletes consrv.dll machine will not start

#16 D-FRED-BROWN

Resident Bracketologist

Group: Malware Response Team
Posts: 266
Joined: 26-December 08
Gender:Male
Location:Kansas, USA

Posted 08 December 2011 - 02:14 PM

Looking better! Please run RegSearch & SystemLook as before and attach the results :thumbup2:

Proud graduate of SpywareInfo Bootcamp
Follow me on Twitter! @dfredbrown
Posted Image

Unified Network of Instructors and Trained Eliminators
If I have personally helped you, please consider making a donation so I can keep helping people like you.
Every little bit helps! Thank you!

#17 Matt Rosenblum

Member

Group: Members
Posts: 29
Joined: 28-November 11

Posted 08 December 2011 - 03:02 PM

Ok...looking at the log files that are attached, I think we're in good shape.

Let me know if we need to do anything else or if I'm finally safe to load AVG.

Attached File(s)

RegSearch.txt (680bytes)
Number of downloads: 1
SystemLook.txt (7.6K)
Number of downloads: 1

#18 D-FRED-BROWN

Resident Bracketologist

Group: Malware Response Team
Posts: 266
Joined: 26-December 08
Gender:Male
Location:Kansas, USA

Posted 08 December 2011 - 04:16 PM

Indeed, ComboFix cleared up the main infection. Before we move on to the next step, let's see if there are any remnants that need taking care of:

Please run a free online scan with the ESET Online Scanner
Note: You will need to use Internet Explorer for this scan.

Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the ActiveX control to install
Click Start
Make sure that the options Remove found threats is Unchecked and the option Scan unwanted applications is checked
Click Scan
Wait for the scan to finish
Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
Copy and paste that log as a reply to this topic

Proud graduate of SpywareInfo Bootcamp
Follow me on Twitter! @dfredbrown
Posted Image

Unified Network of Instructors and Trained Eliminators
If I have personally helped you, please consider making a donation so I can keep helping people like you.
Every little bit helps! Thank you!

#19 Matt Rosenblum

Member

Group: Members
Posts: 29
Joined: 28-November 11

Posted 09 December 2011 - 08:01 AM

Well, there wasn't much listed in the log file (even though ESET said it found some stuff). Here's the complete content of the log file:

ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK

#20 D-FRED-BROWN

Resident Bracketologist

Group: Malware Response Team
Posts: 266
Joined: 26-December 08
Gender:Male
Location:Kansas, USA

Posted 09 December 2011 - 05:25 PM

Let's run another one to make sure there's nothing else:

Please use the Internet Explorer and run a BitDefender Online scan from Here

Please check I agree with the Terms and Conditions and click Start Here
You will need to allow an Active X install for the scan to run.
Leave the scanning options at default and click Start Scan

Please post the results in your next reply.

Proud graduate of SpywareInfo Bootcamp
Follow me on Twitter! @dfredbrown
Posted Image

Unified Network of Instructors and Trained Eliminators
If I have personally helped you, please consider making a donation so I can keep helping people like you.
Every little bit helps! Thank you!

#21 Matt Rosenblum

Member

Group: Members
Posts: 29
Joined: 28-November 11

Posted 14 December 2011 - 09:38 AM

I think we're all set. Bit Defender didn't find anything with is quickscan. I've gone ahead and loaded AVG onto the machine and scanned with that. It found two minor issues and cleared them. I rebooted after the scan and rescanned. AVG found nothing.

Thank you again for all your help with this! Couldn't have gotten here w/o ya!

#22 D-FRED-BROWN

Resident Bracketologist

Group: Malware Response Team
Posts: 266
Joined: 26-December 08
Gender:Male
Location:Kansas, USA

Posted 14 December 2011 - 11:22 PM

Sounds good! Let's see what programs need updating:

Please download Security Check by screen317 from here or here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Proud graduate of SpywareInfo Bootcamp
Follow me on Twitter! @dfredbrown
Posted Image

Unified Network of Instructors and Trained Eliminators
If I have personally helped you, please consider making a donation so I can keep helping people like you.
Every little bit helps! Thank you!