NCGPIICT
asked on
Error loading MWSBAR.dll
Each time user logs in, error message pops up saying "error loading MWSBAR.dll". Started appearing following a download of the latest Flashplayer software.
I know its to do with MyWebSearch. It is not listed in Add/remove programs to remove. I ran SpyBot and it picked up MyWebSearch and said it fixed the problem. But it appears again once the system is rebooted. I then ran hijacthis log and fixed the entry for mwsbar.dll, but still appears when you log on.
i then went into regedit and removed any traces of mwsbar.dll as per some instructions i found. The error still persists. The current hijackthis log of the user is attached.
hijackthisAS.txt
I know its to do with MyWebSearch. It is not listed in Add/remove programs to remove. I ran SpyBot and it picked up MyWebSearch and said it fixed the problem. But it appears again once the system is rebooted. I then ran hijacthis log and fixed the entry for mwsbar.dll, but still appears when you log on.
i then went into regedit and removed any traces of mwsbar.dll as per some instructions i found. The error still persists. The current hijackthis log of the user is attached.
hijackthisAS.txt
go to tool manage add ins in IE
find mywebsearch addi and un tick
shoudl sort it
find mywebsearch addi and un tick
shoudl sort it
ASKER
i have already tried fixing it through hijackthis but it appears again when you log in. I also deleted the entry in regedit but still reappears
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
did you check teh manage add-ins in IE tools?
Have you checked this:
https://www.experts-exchange.com/questions/21878540/MSW-Bar-dll.html?qid=21878540
https://www.experts-exchange.com/questions/21878540/MSW-Bar-dll.html?qid=21878540
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Just to add:
Its quilte likely that you have a Vundo infection and just removing the MyWebSearch entries wouldn't remove the whole bunch.
Its quilte likely that you have a Vundo infection and just removing the MyWebSearch entries wouldn't remove the whole bunch.
If you look in msconfig in the label 'start' you will see that Mywebstart is set to startup, in you hijack file this line says it,
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1
Also fix the below entry, it could be your registry monitoring apps e.g., Spybot's Tea timer that is putting the 04 entry back in, make sure you disable tea timer first before fixing hijackthis entries.
R0 - HKLM\Software\Microsoft\In
R0 - HKLM\Software\Microsoft\In
https://www.experts-exchange.com/questions/23649819/MWSBAR-dll-Error.html