Windows 7 Consrv.dll Infected
I am running Windows 7 64-bit. Do not mouse-click Combofix's window while it is running. I rebooted and re ran aswMBR - all clean. You must install the latest definition updates in order to enable real-time protection. 2/13/2012 10:22:26 PM, Error: Tcpip  - The system detected an address conflict for IP address 192.168.1.1 with http://whatcamcorder.net/windows-7/windows-7-consrv-dll.php
Logs Attached. « Reply #13 on: March 30, 2012, 12:36:26 AM » Everything seems to be fine now and I'd consider it case closed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. A couple of things I tried before finding the solution: Malwarebytes wasn't able to detect the virus, but Microsoft Security Essentials did. Web had found and searched the registry (from Startup Repair) to see if there were any keys pointing to the "consrv.dll" file, but there were none.I can browse through and see
Windows 7 Consrv.dll errors can be caused by misconfigured system files in your computers Windows operating system. [includeme file="rightdownloadbox.php"] If you have an error related to Windows 7 Consrv.dll, we strongly If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it. Help is on the way! Under the Hidden files and folders heading select Do not show hidden files and folders.
Flag Permalink This was helpful (0) Back to Spyware, Viruses, & Security forum 6 total posts Popular Forums icon Computer Help 51,912 discussions icon Computer Newbies 10,498 discussions icon Laptops 20,411 Why Do I Have DLL Errors? This service may not function properly. 2/14/2012 10:03:25 PM, Error: Application Popup  - \??\C:\Gotcha\catchme.sys has been blocked from loading due to incompatibility with this system. Please continue to respond to my instructions until I confirm that your logs are clean.
The files in quaritine are modified by mbam so they will no longer run.All the files you listed:C:\Users\Justin\AppData\Local\fwq.exe (Trojan.FakeAV) -> Quarantined and deleted successfully.C:\Users\Justin\AppData\Local\vhc.exe (Trojan.FakeAV) -> Quarantined and deleted successfully.C:\Users\Justin\Documents\4kIS1.exe (Trojan.FakeAV) This article will also help you troubleshoot common error messages related to Windows 7 Consrv.dll error code that you may encounter. While holding CTRL-Shift on your keyboard, hit ENTER. http://thewinwiki.org/windows-7-consrv-dll-infected/ Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function.
Another program overwrote the required version of CONSRV.DLL. You must install the latest definition updates in order to enable real-time protection. 2/14/2012 8:37:06 AM, Error: Microsoft Antimalware  - Microsoft Antimalware Real-Time Protection feature has encountered an error and Preview post Submit post Cancel post You are reporting the following post: consrv.dll virus? A black box will open with a blinking cursor.
Open My Computer. http://www.solvusoft.com/en/files/missing-not-found-error/dll/windows/microsoft/windows-nt-beta/consrv-dll/ Please try the request again. Please follow these steps to remove older version of Java components and upgrade the application.Upgrading Java: Go to this site and click Do I have Java It will check your current Thank you for your assistance. -Mike HijackThis: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:36:26 PM, on 2/14/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421)
You must install the latest definition updates in order to enable real-time protection. 2/14/2012 10:15:04 PM, Error: Service Control Manager  - The NVIDIA Display Driver Service service has reported an his comment is here printing). R1 MpFilter;Microsoft Malware Protection Driver;C:\Windows\system32\DRIVERS\MpFilter.sys --> C:\Windows\system32\DRIVERS\MpFilter.sys [?] R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-2-14 652360] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [2012-1-30 103440] R2 McciCMService64;McciCMService64;C:\Program Files\Common Files\Motive\McciCMService.exe [2012-2-12 517632] R2 MediaMall Every option still kicks over into a boot loop.
Logs Attached. « Reply #4 on: March 28, 2012, 08:44:15 PM » Hi there delete the current copy of combofix that you have and download/transfer to the infected system a fresh These sites distribute DLL files that are unapproved by the official CONSRV.DLL file developer, and can often be bundled with virus-infected or other malicious files. While holding CTRL-Shift on your keyboard, hit ENTER. http://whatcamcorder.net/windows-7/windows-7-remove-consrv-dll.php Many events can result in creating system file errors.
In the Registry Editor, select the CONSRV.DLL-related key (eg. Logged essexboy Malware removal instructor Avast Überevangelist Probably Bot Posts: 40695 Dragons by Sasha Re: I need help removing consrv.dll infection on 64 bit Windows 7. AVG and Avira both also discovered the consrv.dll file, but not the tripwire.
They may otherwise interfere with our tools.
If you have difficulty properly disabling your protective programs, refer to this link here 1. The first two were in C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup. Facebook Twitter Google+ YouTube LinkedIn Tumblr Pinterest Newsletters RSS PC-Supportal.com Welcome Tips and Tricks Troubleshooting Recommended Security Menu Welcome Tips and Tricks Troubleshooting Recommended Security Home / Anti-virus help / How UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
Deejay100six, Feb 24, 2012 #5 Cookiegal Administrator Malware Specialist Coordinator Joined: Aug 27, 2003 Messages: 105,424 As it's important to reply in a timely manner when dealing with malware, and even Microsoft hardware failure, such as a bad hard drive, which has corrupted the CONSRV.DLL file. FreeRIP Toolbar v4.9 McAfee Security Scan Plus ------------------------------------------------------------------------------------------------------ I can see that Combofix has been run on this machine. navigate here The other files that it deleted are: C:\Windows\Assembly\GAC_64\Desktop.ini C:\Windows\Assembly\GAC_32\Desktop.ini Now you can reinstall your favorite Anti-Virus app, and scan your computer once more to make sure all other viruses that this
Furthermore, there's a possibility that the CONSRV.DLL error you are experiencing is related to a component of the malicious program itself. You must install the latest definition updates in order to enable real-time protection. 2/11/2012 7:55:29 PM, Error: Microsoft Antimalware  - Microsoft Antimalware Real-Time Protection feature has encountered an error and Type the following command: regsvr32 /u CONSRV.DLL. Restore your computer.
Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. Close the command prompt window. I would suggest posting the log they recently requested, and following up with them from there.Best of luck!Carol Flag Permalink This was helpful (0) Collapse - same by sanch6 / July I could not utilize any of my restore points to recover.
Yes, my password is: Forgot your password? Logged Dark_Matter Newbie Posts: 8 Re: I need help removing consrv.dll infection on 64 bit Windows 7. I feel I should make you aware of the following; You should not run ComboFix unless you are specifically asked to by a helper. Zero days of fruitcake.
From my research, the problem was consrv.dll. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. Then I ran the latest Avast! If you have a problem, reply back for further instructions.3.
This post has been flagged and will be reviewed by our staff. Please install Windows NT Beta again." "This application failed to start because CONSRV.DLL was not found. However if I do anything to consrv.dll, the system becomes unbootable. These broken registry keys can be as a result of a missing DLL file, moved DLL file, or an leftover DLL file reference in your Windows registry from an unsuccessful software
Note: Please Do NOT mouseclick combofix's window while its running because it may cause it to stall. C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe The Windows 7 Consrv.dll error is a common format that is used by Windows and other Microsoft compatible software and vendors.