"MSA64CHK.dll not found"

  • Thread starter Thread starter Thur
  • Start date Start date
T

Thur

After visiting a number of sites claiming to offer .mp3
files for free, I now have an icon titled "mp3 downloads".
After trying to delete it I found it was reinstalled on startup.

I looked at the properties and found it was directing to
windows/system32/MSA64CHK.dll

I see that on checking the properties of this file, "version"
gives:- Matrix Technology Network, S.A. 2003

I therefore renamed it by altering the last letter of .dll to .dlx
I now get the message in the title on startup but no icon.

Do I need this file for Windows XP Home?

There must be a program somewhere which is starting up, and loading
up this icon using this dll ?

Where should I look for it with a view to deleting it?

p.s. I have already done scans with both spybot and adaware 6.0

I have Norton AV and Norton Internet Security online.

Running WinXP Home.

I have already tried looking for the advised entries in the registry but
can't find any of them.
T.
 
Check for viruses:

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

And check for the presence of spyware:

Bazooka Adware and Spyware Scanner 1.12
http://download.com.com/3000-2144-10247783.html

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp


--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------------


| After visiting a number of sites claiming to offer .mp3
| files for free, I now have an icon titled "mp3 downloads".
| After trying to delete it I found it was reinstalled on startup.
|
| I looked at the properties and found it was directing to
| windows/system32/MSA64CHK.dll
|
| I see that on checking the properties of this file, "version"
| gives:- Matrix Technology Network, S.A. 2003
|
| I therefore renamed it by altering the last letter of .dll to .dlx
| I now get the message in the title on startup but no icon.
|
| Do I need this file for Windows XP Home?
|
| There must be a program somewhere which is starting up, and loading
| up this icon using this dll ?
|
| Where should I look for it with a view to deleting it?
|
| p.s. I have already done scans with both spybot and adaware 6.0
|
| I have Norton AV and Norton Internet Security online.
|
| Running WinXP Home.
|
| I have already tried looking for the advised entries in the registry but
| can't find any of them.
| T.
 
Thur said:
After visiting a number of sites claiming to offer .mp3
files for free, I now have an icon titled "mp3 downloads".
After trying to delete it I found it was reinstalled on startup.

I looked at the properties and found it was directing to
windows/system32/MSA64CHK.dll

I see that on checking the properties of this file, "version"
gives:- Matrix Technology Network, S.A. 2003

I therefore renamed it by altering the last letter of .dll to .dlx
I now get the message in the title on startup but no icon.

Do I need this file for Windows XP Home?

There must be a program somewhere which is starting up, and loading
up this icon using this dll ?
Click to expand...

http://www.kephyr.com/spywarescanner/library/mostrardialer/index.phtml
 
Carey Frisch said:
Check for viruses:

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

And check for the presence of spyware:

Bazooka Adware and Spyware Scanner 1.12
http://download.com.com/3000-2144-10247783.html

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp


--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------------


| After visiting a number of sites claiming to offer .mp3
| files for free, I now have an icon titled "mp3 downloads".
| After trying to delete it I found it was reinstalled on startup.
|
| I looked at the properties and found it was directing to
| windows/system32/MSA64CHK.dll
|
| I see that on checking the properties of this file, "version"
| gives:- Matrix Technology Network, S.A. 2003
|
| I therefore renamed it by altering the last letter of .dll to .dlx
| I now get the message in the title on startup but no icon.
|
| Do I need this file for Windows XP Home?
|
| There must be a program somewhere which is starting up, and loading
| up this icon using this dll ?
|
| Where should I look for it with a view to deleting it?
|
| p.s. I have already done scans with both spybot and adaware 6.0
|
| I have Norton AV and Norton Internet Security online.
|
| Running WinXP Home.
|
| I have already tried looking for the advised entries in the registry but
| can't find any of them.
| T.
Click to expand...

Thanks for the URLS, but: I already have the latest updates from Norton.
I do a regular weekly virus scan too.
I already have the latest Bazooka which doesn't detect it.
I retried to find the entries in the registry but could not according to the
instructions given.

I did a search in the registry for the two .dlls which I am supposed to
delete.
Both MSA64CHK.dll and the other .dll which I cannot remember were both
registered.

The second one I could not actually find as a file, though.
I deleted this entry in the registry and deleted MSA64CHK.dll, the file.

Restarted the computer but RUNDLL is still trying to load MSA64CHK.dll
I wonder if I have a modified file tweaked to defeat Bazooka?

Any further thoughts would be welcome.
T.
 
Mostrar Dialer
http://www.kephyr.com/spywarescanner/library/mostrardialer/index.phtml

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------------------------------


|
| Thanks for the URLS, but: I already have the latest updates from Norton.
| I do a regular weekly virus scan too.
| I already have the latest Bazooka which doesn't detect it.
| I retried to find the entries in the registry but could not according to the
| instructions given.
|
| I did a search in the registry for the two .dlls which I am supposed to
| delete.
| Both MSA64CHK.dll and the other .dll which I cannot remember were both
| registered.
|
| The second one I could not actually find as a file, though.
| I deleted this entry in the registry and deleted MSA64CHK.dll, the file.
|
| Restarted the computer but RUNDLL is still trying to load MSA64CHK.dll
| I wonder if I have a modified file tweaked to defeat Bazooka?
|
| Any further thoughts would be welcome.
| T.
 
When I said
I retried to find the entries in the registry but could not according to the
instructions given.
Click to expand...
The "instructions" are those to which you are pointing me
Perhaps I should have said those instructions do not work?
T.
 
Ok, I have made some "progress"
Here is what I think is a set of rogue entries in
my registries.
I have searched for "mostra" and "matrix" and "
MSA64CHK" and deleted progressively.
Also removed icon from Explorer task bar.

..../Current Version/WinTrust/Trust Providers/Sofware Publishing/Trust
Database/0/


(default)
REG_SZ (value not set)

goicfboogidikkejccmclpieicihhlpo mmhkbp REG-SZ FUTURPAGO,S.L.

ppcimdnnnjbeahepfabjipfginloedkg cfcaak REG_SZ

ppcimdnnnjbeahepfabjipfginloedkg enodaj REG_SZ

This appears to have stopped the error on startup.

Any comments?
T.
 
Back
Top