Each time i boot my computer up, a message says
"Error loading c:\windows\system32\msa64chk.dll". After reading various different forums - i found out this this was spyware.
I have done various different scans - such as spybot s&d and a few others. I have followed the guide lines on your thread before i posted on here.
The computer has also slowed down quite a bit since this message started appearing - and after various scans before i followed your guidelines have failed to rid my computer of this spyware. I have attatched the reports - as you request. I hope that you will be able to help me.

Attached Files

	hijackthis.log (13.6 KB, 2 views)
	Report-Scan-20070807-173851.txt (7.5 KB, 3 views)

Hi --Welcome-- please be patient as our security team is very busy as always.

Hello, and welcome to PCHF.

Please go to Control Panel > Add/Remove Programs and uninstall the following if present:
IstBar
Gamesbar
Gator

Reboot if prompted.

Tlease run HijackThis and place a checkmark by the following entries:
O4 - HKCU\..\Run: [MP3download] rundll32.exe C:\WINDOWS\system32\MSA64CHK.dll,DllMostrar Matrix_HTML:MP3download:t
O9 - Extra button: Ãâ·Ñ¾«²ÊÊÓƵ³¬Á÷³©ÔÚÏß¹Û¿´ - {022C4009-5283-4365-97BF-144054B40E2E} - http://itv.mop.com (file missing)
O9 - Extra 'Tools' menuitem: ²¥°ÔµçÊÓ - {022C4009-5283-4365-97BF-144054B40E2E} - http://itv.mop.com (file missing)
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra button: MP3download - {76DD9E77-F06C-4471-AB6C-CF03C5C6B5B0} - C:\WINDOWS\system32\MP3download (file missing)
Close all other windows except HijackThis and press "Fix Checked". Then close HijackThis and restart the computer.


Next, navigate to and delete the following files/folders:
C:\Downloads\Bej2Setup_TryGames-dm[1].exe <- file
C:\WINDOWS\system32\actskn45.ocx <- file
C:\Program Files\Common Files\rjdljpbr\ <- folder
C:\Program Files\GamesBar\ <- folder


Reboot again. Run a new scan with both HijackThis and AVG AntiSpyware and post the two new logs in your next reply.

thankyou for your previous advice. I have done what you have told me to do - but after i did the AVG scan - it did not give me a report - which slightly annoyed me, so i only have the HijackThis report - i hope that this is enough.

Another problem i have with my computer - i don't know whether it is related - is that my computer reboots it's self straight after shutting down - although this does not happen all of the time...

thank's for your help.

oops - forgot to upload the report...

Attached Files

hijackthis2.txt (12.9 KB, 2 views)

Did AVG detect anything?

Please run HijackThis and place a checkmark by the following entries:
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O2 - BHO: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll (file missing)
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll (file missing)

Close all other windows except HijackThis and press "Fix Checked". Then close HijackThis and restart the computer.


Are you still getting this message that you reported earlier?

Yes AVG did detect some Spyware cookies - which i deleted...

I am not getting that message anymore - which can only be a good sign.

Thankyou for all of your help.