Author Topic: Consrv.dll keeps coming back (Updated with Logs)  (Read 3204 times)

0 Members and 1 Guest are viewing this topic.

shadowspiker

  • Guest
Consrv.dll keeps coming back (Updated with Logs)
« on: February 07, 2012, 03:41:39 PM »
Basically self explanatory.
I have a reoccurring virus called consrv.dll in C:\windows\system32
i can delete it with avast but it comes back every 10min
the properties of the virus say its a Win32:Sirefef-HO [Rtk]
the virus hasnt had a chance to actually do anything cos it gets deleted straight away
Also when i run scans with malware bytes and avast they pick up nothing saying my pc is clean.
would appreciate any help to stop this.

Also just started getting a new virus in C\windows\Assembly
Temp\U   there are multiple files called 80000004.$
                                         80000032.$
                                         80000032.@
the properties of this virus say its a Win64:Zaccess-A [Trj]
I am running Windows 7 by the way

same issue with deleting them and then they come back a few minutes later
« Last Edit: February 07, 2012, 04:40:37 PM by shadowspiker »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89059
  • No support PMs thanks
Re: Consrv.dll keeps coming back
« Reply #1 on: February 07, 2012, 04:01:04 PM »
This needs further analysis by a malware removal specialist:
Go to this topic http://forum.avast.com/index.php?topic=53253.0 for information on Logs to assist in cleaning malware. Use the information about getting and using the logs and attach the logs here, not in the LOGS topic.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Consrv.dll keeps coming back (Updated with Logs)
« Reply #2 on: February 07, 2012, 10:16:01 PM »
Hi this appears to be the new one

First could you go to taskmanager and select services
Look for  a service called  Safety Settings Service or something similar
Right click and select "go to process"
Make a note of the file that it shows


Re-Run aswMBR

Click Scan

On completion of the scanClick the   Fix  Button


Save the log as before and post in your next reply

shadowspiker

  • Guest
Re: Consrv.dll keeps coming back (Updated with Logs)
« Reply #3 on: February 07, 2012, 10:41:25 PM »
i just reinstalled windows
i was able to get rid of the reoccurring consrv.dll but i was constantly getting the 80000032.@ file and random .ini and .dlls were popping up everywhere
so i cut my losses and reformatted.
thank you so much for the help though

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Consrv.dll keeps coming back (Updated with Logs)
« Reply #4 on: February 07, 2012, 10:51:16 PM »
The reason I believed it was the new one is due to you having run combofix yet the consrv came back..  Did you try an aswMBR fix at all prior to coming here ?