Author Topic: Another consrv.dll Victim Needing Help  (Read 11232 times)

0 Members and 1 Guest are viewing this topic.

adc

  • Guest
Re: Another consrv.dll Victim Needing Help
« Reply #15 on: February 03, 2012, 10:15:26 PM »
Spybot is uninstalled, and machine rebooted.

Waiting to restart OTL.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another consrv.dll Victim Needing Help
« Reply #16 on: February 03, 2012, 10:21:24 PM »
OK you will notice the biggest difference when aswMBR has done its thing

adc

  • Guest
Re: Another consrv.dll Victim Needing Help
« Reply #17 on: February 03, 2012, 10:24:19 PM »
OK you will notice the biggest difference when aswMBR has done its thing

Don't we need to re-run OTL with your script first before running aswMBR?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another consrv.dll Victim Needing Help
« Reply #18 on: February 03, 2012, 10:26:37 PM »
When you ran the OTL fix resetting hosts is the last element - so it did the other removals


So go straight to aswMBR fix run now please

adc

  • Guest
Re: Another consrv.dll Victim Needing Help
« Reply #19 on: February 03, 2012, 11:16:59 PM »
When you ran the OTL fix resetting hosts is the last element - so it did the other removals

So go straight to aswMBR fix run now please

The new scan with aswMBR indicated some removals had not been accomplished with OTL.

A 2nd scan with aswMBR and "FIX" appears to have quarantined all infected files.

The "fixed" aswMBR log file is attached.

Waiting for further instructions. :)
« Last Edit: February 03, 2012, 11:20:43 PM by adc »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another consrv.dll Victim Needing Help
« Reply #20 on: February 03, 2012, 11:22:32 PM »
It does look better doesn't it  ;D

Could you now run a fresh OTL quick scan please to see what remains

How is the system behaving now ?

adc

  • Guest
Re: Another consrv.dll Victim Needing Help
« Reply #21 on: February 03, 2012, 11:28:18 PM »
It does look better doesn't it  ;D

Could you now run a fresh OTL quick scan please to see what remains

How is the system behaving now ?

Yes, the log file looked much cleaner.  8)

And, I'm sure the machine is running better.

Will get a fresh OTL quick scan log for you shortly.








Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another consrv.dll Victim Needing Help
« Reply #22 on: February 03, 2012, 11:33:46 PM »
I will be off line soon as I need to listen to Harry's Game  ;D But I shall return on the morrow

adc

  • Guest
Re: Another consrv.dll Victim Needing Help
« Reply #23 on: February 03, 2012, 11:57:26 PM »
I will be off line soon as I need to listen to Harry's Game  ;D But I shall return on the morrow

Attached is a "fresh" OTL log file.

Thank you.

I will monitor the laptop for awhile to watch for any strange operation.

I thought after all this, and being a member of the Avast forum since 2008, my status as "Newbie" would change, but alas it was not to be. ::)
« Last Edit: February 04, 2012, 12:00:33 AM by adc »

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5564
  • Spartan Warrior
Re: Another consrv.dll Victim Needing Help
« Reply #24 on: February 04, 2012, 10:56:55 AM »
Quote
I thought after all this, and being a member of the Avast forum since 2008, my status as "Newbie" would change, but alas it was not to be.

User rankings dependent on number of posts made by user.   :)

It's just that you have had few problems, which is a good thing.
Windows 10 Home 64-bit 22H2 Avast Premier Security version 24.1.6099 (build 24.1.88821.762)  UI version 1.0.797
 UI version 1.0.788.  Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.2.6105 (build 24.1.8918.827) UI version 1.0.801

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another consrv.dll Victim Needing Help
« Reply #25 on: February 04, 2012, 12:30:52 PM »
That looks pretty - could you now do the following to reset the TCPIP stack
Run the MSFixit on this page http://support.microsoft.com/kb/299357

Please download Malwarebytes' Anti-Malware[/b]
 
Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish, so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.[/b]

adc

  • Guest
Re: Another consrv.dll Victim Needing Help
« Reply #26 on: February 04, 2012, 05:52:11 PM »
That looks pretty - could you now do the following to reset the TCPIP stack
Run the MSFixit on this page http://support.microsoft.com/kb/299357


Cheers... ;D

Applied MSFixit without any error message.


I had already run a quick scan after you signed off yesterday, but ran it again this morning as you request.


Attached is the log.



adc

  • Guest
Re: Another consrv.dll Victim Needing Help
« Reply #27 on: February 04, 2012, 06:00:32 PM »

It's just that you have had few problems, which is a good thing.
mchain,

You are correct. I am fortunate to have had only one "serious" problem in 4 years. :)

cheers,
Al

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another consrv.dll Victim Needing Help
« Reply #28 on: February 04, 2012, 06:25:37 PM »
Any further problems apparent ?

adc

  • Guest
Re: Another consrv.dll Victim Needing Help
« Reply #29 on: February 04, 2012, 06:54:44 PM »
Any further problems apparent ?


I do have a question about an error with the firewall as I get a Windows Firewall error when try to "Use recommended settings".

"Windows Firewall can't change some of your settings.
Error code 0x80070424"


Is this something AIS is causing, or something that needs to be corrected?

Neither Zonealarm, or Comodo are installed.

Other than this everything seems to be running normally.


Edit Added:

Windows Defender is stopped and issues an error when attempting to Start.

"The specified service does not exist as an installed service. (Error Code: 0x80070424)"
« Last Edit: February 04, 2012, 07:07:39 PM by adc »