Re: consrv.dll

eric x wrote:
[...]

Please do not be too particular on trojan jargon workable solution
is what an infected and helpless pc user wish for , anything that
help although phrasing may be different but all are done with the
same objective , we are all trying our best to help them.

While this is true, it is also true that getting users to use correct terminology also helps. "Help me, my computer is sick" will get different answers than "Help me my computer has a virus".

Please do not insist that experts 'dumb down' their responses in the face of such illogical resistance to the use of correct terminology.

Have you ever searched a machine to see what is being started from the registry or any of the many other autostart methods? Many times this is done so that one can disable the startup of the malware so that investigation can proceed without interference from the malware still running. This could be a monumental waste of time if you are dealing with a virus, as a virus will start when its host program is run and doesn't need the other autostart methods that you can search for in that manner.

Sure, the 'victim' doesn't care - but they *should*. If it weren't for antivirus scanners being able to find known viruses within infected files, the standard answer to victims of viral attack would be to flatten and rebuild and *do not* reload your image or any backed up *programs* you may have. This is not so for most other malware types because they don't infect preexisting programs with copies of themselves and insinuate themselves into your backups.

[...]
.

Relevant Pages

  • Re: Virus Acquisition
    ... Actually, even without knowing anything about viruses, it would be ... monitor proper virus removal. ... Find whatever virus or other malware you want to infect the computer ...
    (microsoft.public.windowsxp.general)
  • Re: consrv.dll
    ... different answers than "Help me my computer has a virus". ... investigation can proceed without interference from the malware still ... because they don't infect preexisting programs with copies of themselves ... especially on notebook with oem windows 7 OS. ...
    (alt.comp.anti-virus)
  • =?ISO-8859-1?Q?Re:_Macarena_-_Neuer_Trollvirus_f=FCr_Mac?=
    ... Further details have been published regarding the 7th piece of malware for Mac OS X, named OSX.Macarena. ... The compiled malware has zero ability to infect anything beyond its enclosing directory. ... Therefore, the malware is not viable in the wild, is unable to perpetuate itself beyond one folder, and therefore does not qualify the moniker of 'virus'. ...
    (de.comp.sys.mac.misc)
  • Re: Malwarebytes
    ... It may block a virus but it will not remove a virus once ... | MBAM did detect several files that were remnants of a zbot infection. ... There is always some overlap between various anti malware applications. ... infect other bianries like a virus can. ...
    (microsoft.public.windowsxp.basics)
  • Re: consrv.dll
    ... investigation can proceed without interference from the malware still ... the 'victim' doesn't care - but they *should*. ... because they don't infect preexisting programs with copies of ... them about the offline registry editing method to resolve the ...
    (alt.comp.anti-virus)