RunDLL error loading popups

[dama1]

Hope this is the right group for this. Got an update message from MS for
Windows Media Player. Downloaded and installed version 11 (had 10 before).
Next time I booted up, got two pop-ups, both started Run dll error loading -
c:\Progra-1\MyWebs-1\bar\1.bin\MWSBAR.dll (the other is M3Plugin.dll), module
could not be found. Tried restore point 3 times with same result.
"Restoration Incomplete 6/21/2008 Software Distribution Service 3.0". Called
Dell, tried hard disk test which passed. Tried reinstalling XP operating
system (as a repair) with Reinstallation CD, didn't work, still get the run
dll error pop-ups. Dell is stumped. I'm stumped. Anybody know what the heck
is going on?????
DG

 

[Nepatsfan]

Hope this is the right group for this. Got an update message from MS for
Windows Media Player. Downloaded and installed version 11 (had 10 before).
Next time I booted up, got two pop-ups, both started Run dll error loading -
c:\Progra-1\MyWebs-1\bar\1.bin\MWSBAR.dll (the other is M3Plugin.dll), module
could not be found. Tried restore point 3 times with same result.
"Restoration Incomplete 6/21/2008 Software Distribution Service 3.0". Called
Dell, tried hard disk test which passed. Tried reinstalling XP operating
system (as a repair) with Reinstallation CD, didn't work, still get the run
dll error pop-ups. Dell is stumped. I'm stumped. Anybody know what the heck
is going on?????
DG

The first thing you should have done was run a Google search for information on
those two files. If you had, you would have saved yourself a lot of time and
wasted effort.

Did you run an antivirus or antispyware scan recently on this computer? The
behavior you describe is usually what happens when an antivirus or
antispyware program identifies a file as malware, deletes the file, but doesn't
clean up the mechanism that launches the malware at startup.

Here's a program from Microsoft that will help you stop the error messages.

AutoRuns for Windows v9.21
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

Once you've downloaded and extracted the files, run autoruns.exe.
Look on the Everything tab for an entry that lists MWSBAR.dll in the Image path
column.
Right click on that entry and select Search Online from the menu.
Looking at a few of the web sites listed should confirm that this file is some
type of malware.
Uncheck the item.
Do the same for M3Plugin.dll.
Restart your computer. If you no longer see the error message, you can go back
and delete the entry in Autoruns.

Just to be on the safe side, you might consider taking steps to make sure the
system is malware free. Here's a site with general instructions on cleaning a
computer.

Courtesy of Malke Routh, MS-MVP
http://www.elephantboycomputers.com/page2.html#Viruses_Malware

On a side note, it sounds like you're having problems running System Restore.
Take a look at this web site for help on that issue.

Courtesy of Bert Kinney, MS-MVP
http://bertk.mvps.org/html/srfail.html

Good luck

Nepatsfan

 

[nass]

Hope this is the right group for this. Got an update message from MS for
Windows Media Player. Downloaded and installed version 11 (had 10 before).
Next time I booted up, got two pop-ups, both started Run dll error loading -
c:\Progra-1\MyWebs-1\bar\1.bin\MWSBAR.dll (the other is M3Plugin.dll), module
could not be found. Tried restore point 3 times with same result.
"Restoration Incomplete 6/21/2008 Software Distribution Service 3.0". Called
Dell, tried hard disk test which passed. Tried reinstalling XP operating
system (as a repair) with Reinstallation CD, didn't work, still get the run
dll error pop-ups. Dell is stumped. I'm stumped. Anybody know what the heck
is going on?????
DG

She having My web search installed and redirecting the browser, you will
have to go to the Add/remove and uninstall it from there.
Also delete the registry keys for it using the Autoruns recomeneded by
Neptsfan.

You can download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
And remove the entries from here:
c:\progr~1\ my webs-\bar\2-bin\mwsbar dll

And Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = look in
the right pane/window and remove the entry for it
"C:\progr~1\ my webs-\bar\2-bin\mwsbar dll".


Run disk cleanup and defrag in safe mode. Then run this command:
sfc /scannow

or these steps:
To remove this do the following:
1-Click Start >> Control Panel >> Double click Add/Remove Icon, then locate
this My Web Search and click Remove.
2- Locate the file/folder for it in the windows explorer: click Start >> All
Programs >> Accessories >> Windows Explorer and on the windows explore locate
this path:
C:\Program Files\MyWebSearch\bar\1.bin\mwsoemon.exe press SHIFT + DELETE to
bypass the Recycle bin.
Then click Start >> Run and on the run command type:
regedit click [OK].
On the registry Editor locate these Keys:
[-] HKEY_CURRENY_USER\Software\Microsoft\Windows\CurrentVersion\Run =
in the right Pane/windows locate this "My Web Search- E-mail Plugin"
C:\PROGRA~1\MyWebs~1\bar\1.bin\mwsoemon.exe remove it from there.

The same with this Key:
[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =
n the right Pane/windows locate this "My Web Search- E-mail Plugin"
C:\PROGRA~1\MyWebs~1\bar\1.bin\mwsoemon.exe remove it from there.

While there search for this CLSID by right click on any KEY and from the
list select Find..., then in the input box type this clsid=
{07B18EA1-A523-4961-B6BB-170DE4475CCA}
and remove it it may be created many times so search for it again until the
search find nothing!.
Open a run command and type in: msconfig and on the System Configuration
window click StartUp Tab and locate the line for theMy web search and uncheck
if it there after all these removal steps it will be like this:
My Web Search Email Plugin.ink " C:\Program files\My Web
Search\bar\1.bin\mwsoemon.exe" uncheck this line.


Unexplained computer behaviour may be caused by deceptive software
http://support.microsoft.com/kb/827315

Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/

=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796

HTH.
nass