Solved Uac not funtioning after virus removal consent.exe fails to load

[mohavepc]

Hello

I have a Win7 64bit sp1 on an HP s5000 slimline. we just replaced a failing hard drive and within 8 hours the customer downloaded a virus while trying to download from Cnet using their 3rd party download assistant. I was able to remove the virus and various malware but one thing is still failing.

When we try to do windows updates, or uninstall a program or even execute msconfig with the UAC on normal the machine partially freezes and the uac does not display even in the task bar. Task manager shows consent.exe which cannot be killed and is using 80% of the processor. Cannot shut down or do anything but task manager responds and start menu will open but nothing else.

I know this is an issue with the UAC. I have done an in place upgrade, sfc /scannow in an elevated CMD, full scans with Mbam, SUperanti,eset,adwcleaner,

 

[Golden]

What was the result of the sfc /scannow?

 

[mohavepc]

What was the result of the sfc /scannow?

No issues found
completed in approx. 15 minutes

 

[Malnutrition]

Lets see if anything is hanging around on the machine.


Please download and save FRST to your Desktop.
http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

CLICK HERE to determine whether you're running 32-bit or 64-bit for Windows.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach the log here
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also attach that along with the FRST.txt into your reply.

 

[Jacee]

I was able to remove the virus and various malware

What were the 'names' of the virus and malware that you removed? Do you still have the .txt logs from AdwCleaner and Eset?

 

[mohavepc]

I must apologize for not responding and following up on this thread. We ended up talking with the customer and to save time and cost we backed up, wiped with DBAN, and reinstalled windows. I would have liked to figure this one out but it was becoming inefficient to continue. If necessary feel free to delete this thread. I will mark it a solved though not in the way I would prefer.