Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: spyware removed consrv.dll and now computer won't reboot  (Read 4292 times)

0 Members and 1 Guest are viewing this topic.

tonybolony

    Topic Starter


    Newbie

    • Experience: Experienced
    • OS: Windows 7
    spyware removed consrv.dll and now computer won't reboot
    « on: October 25, 2012, 06:02:39 AM »
    Hello,
    I have read this same problem on here and a few other sites.  My wife's laptop doesn't have virus protection and a few weeks ago she got that google-redirect virus that affected Firefox.  She got Superantispyware from her dad to remove the virus/malware and it quarantined the "consrv.dll" file.  I'm not sure but I think she clicked to remove it as well.  Now the machine will not reboot - it restarts in a continuous loop.   When we attempt all of the options hitting F8, it still fails to start up.  I am a big fan of using system restore but it indicates that there are no earlier restore points to go to.  I am not as familiar with Windows 7 as I am with XP so I dont know why there would be a limited number of restore points (before the crash it showed only about 5 dates).  Any help with this would be greatly greatly appreciated.
    The computer is a Toshiba satellite laptop and I have read some other posts, have used the FRST64.exe and attached the log file.
    Oh, I've also confirmed thru the command prompt that my files on the hard drive are still accessible - yes, I am old enough to remember those dos commands! ;)  SO if worse comes to worse, I will have to pull the info off thru an external HD but I'd rather not disassemble the laptop if possible.  Again, thanks!
    tony

    [year+ old attachment deleted by admin]

    SuperDave

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Thanked: 1020
    • Certifications: List
    • Experience: Expert
    • OS: Windows 10
    Re: spyware removed consrv.dll and now computer won't reboot
    « Reply #1 on: October 25, 2012, 04:44:18 PM »
    Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

    1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
    2. The fixes are specific to your problem and should only be used for this issue on this machine.
    3. If you don't know or understand something, please don't hesitate to ask.
    4. Please DO NOT run any other tools or scans while I am helping you.
    5. It is important that you reply to this thread. Do not start a new topic.
    6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
    7. Absence of symptoms does not mean that everything is clear.

    If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
    *************************************************************************
    Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below. (To do this highlight the contents of the box, right click on it and select copy. Right-click in the open notepad and select Paste). Save it on the flashdrive as fixlist.txt
     
    Quote
    start
    ZeroAccess:
    C:\Windows\assembly\temp
    C:\Windows\assembly\temp\@
    C:\Windows\assembly\temp\cfg.ini
    C:\Windows\assembly\temp\L
    C:\Windows\assembly\temp\U
    C:\Windows\assembly\temp\L\00000004.@
    C:\Windows\assembly\temp\L\201d3dde
    C:\Windows\assembly\temp\U\00000001.@
    C:\Windows\assembly\temp\U\00000002.@
    C:\Windows\assembly\temp\U\00000004.@
    C:\Windows\assembly\temp\U\000000c0.@
    C:\Windows\assembly\temp\U\000000cb.@
    C:\Windows\assembly\temp\U\000000cf.@
    C:\Windows\assembly\temp\U\80000000.@
    C:\Windows\assembly\temp\U\80000004.@
    C:\Windows\assembly\temp\U\80000032.@
    C:\Windows\assembly\temp\U\80000064.@
    C:\Windows\assembly\temp\U\800000c0.@
    C:\Windows\assembly\temp\U\800000cb.@
    C:\Windows\assembly\temp\U\800000cf.@

    ZeroAccess:
    C:\Windows\assembly\GAC_32\Desktop.ini

    ZeroAccess:
    C:\Windows\assembly\GAC_64\Desktop.ini
    end

    NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system
     
    Now, please enter System Recovery Options then select Command Prompt.
     
    Run FRST64 and press the Fix button just once and wait.
    The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.
     
    Now restart, let it boot normally and tell me how it went.
    Windows 8 and Windows 10 dual boot with two SSD's