Solved Constant Error Popup regarding MFLLIB.dll when I boot

[FirstShirt]

When booting into Windows 7 Home Premium suddenly I get an error saying mfllib.dll damaged. It pops up every time any program that starts automatically when I boot. If 6 programs are listed in Startup I get an error for each of them that says I should reinstall the program. However, when I exit out of the popup, the mentioned program starts anyway.

Thanks in advance for your consideration. . .

 

[johncorosz]

Have you tried - Malwarebytes | Online Store

 

[FirstShirt]

Yes, I ran Malwarebytes. Although I think it quarantined the culprit I continue to get these popus. Here is an example.

 

[samuria]

do you have get-a-clip installed Removal instructions for Get-a-Clip - Malware Removal Self-Help Guides - Malwarebytes Forums

 

[FirstShirt]

It was one of the problems Malwarebytes found and quarantined. Here is a shot from Malwarebytes Quarantine Log. Also, I rebooted after running Malwarebytes.

 

[FirstShirt]

I have resolved this issue. I downloaded AdwCleaner and it found the problem and fixed it, too. Here is the log file it created.

# AdwCleaner v6.044 - Logfile created 05/03/2017 at 09:51:48
# Updated on 28/02/2017 by Malwarebytes
# Database : 2017-03-02.1 [Server]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Running from : C:\Users\FirstShirt\Downloads\AdwCleaner.exe
# Mode: Clean
# Support : Malwarebytes | Customer Support & Help Center



***** [ Services ] *****



***** [ Folders ] *****

[-] Folder deleted: C:\Users\FirstShirt\AppData\Local\AdvinstAnalytics
[-] Folder deleted: C:\Users\FirstShirt\AppData\Roaming\Microleaves
[-] Folder deleted: C:\Users\FirstShirt\Desktop\DCE
[-] Folder deleted: C:\Users\FirstShirt\Documents\DAP
[-] Folder deleted: C:\ProgramData\Microleaves
[-] Folder deleted: C:\ProgramData\BSD
[-] Folder deleted: C:\ProgramData\Auslogics
[#] Folder deleted on reboot: C:\ProgramData\Application Data\Microleaves
[#] Folder deleted on reboot: C:\ProgramData\Application Data\BSD
[#] Folder deleted on reboot: C:\ProgramData\Application Data\Auslogics


***** [ Files ] *****

[-] File deleted: C:\Windows\SysNative\bi3.exe
[-] File deleted: C:\TOSTACK
[-] File deleted: C:\Windows\SysWOW64\mfllib.dll
[-] File deleted: C:\Users\FirstShirt\AppData\Roaming\Installer.dat
[-] File deleted: C:\Program Files (x86)\Internet Explorer\iexplore.bat
[-] File deleted: C:\Program Files (x86)\Mozilla Firefox\firefox.bat
[-] File deleted: C:\Users\FirstShirt\AppData\Roaming\Mozilla\Firefox\Profiles\z8e15hin.default-1469908581429\extensions\[email protected]


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****

[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\free.mapsgalaxy.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\hp.myway.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\mapsgalaxy.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\mapsgalaxy.dl.myway.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\mytransitguide.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\mytransitguide.dl.myway.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\myway.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\Find FREE transit schedules, fares and maps!
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{9254C72A-294B-BFDF-ACFA-A7E8A56FF865}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{E7BC34A1-BA86-11CF-84B1-CBC2DA68BF6C}
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{B0932222-51E2-47D1-A4EF-CB10AE7DF086}]
[-] Key deleted: HKU\S-1-5-21-2712942507-1312882600-3786330889-1001\Software\Conduit
[-] Key deleted: HKU\S-1-5-21-2712942507-1312882600-3786330889-1001\Software\BSD
[#] Key deleted on reboot: HKCU\Software\Conduit
[#] Key deleted on reboot: HKCU\Software\BSD
[-] Key deleted: HKLM\SOFTWARE\Microleaves
[-] Key deleted: HKLM\SOFTWARE\Auslogics
[-] Key deleted: HKLM\SOFTWARE\BSD
[#] Key deleted on reboot: [x64] HKCU\Software\Conduit
[#] Key deleted on reboot: [x64] HKCU\Software\BSD
[-] Key deleted: [x64] HKLM\SOFTWARE\IDOT
[-] Data restored: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\akz.imgfarm.com
[#] Key deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\hp.myway.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\imgfarm.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\staticimgfarm.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ttdetect.staticimgfarm.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\akz.imgfarm.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\hp.myway.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\imgfarm.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\staticimgfarm.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ttdetect.staticimgfarm.com
[-] Value deleted: HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel [Homepage]
[-] Key deleted: HKLM\SYSTEM\CurrentControlSet\Control\Class\{0C95ABFE-4FB6-49DB-B22F-0E1F5FC4BEEC}
[-] Key deleted: HKLM\SYSTEM\CurrentControlSet\Control\Class\{EEEFACB3-729F-4484-B66D-E7A7917BBFC1}
[-] Key deleted: HKLM\SOFTWARE\Google\Chrome\Extensions\hegneaniplmfjcmohoclabblbahcbjoe


***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2435 Bytes] - [31/07/2016 09:13:03]
C:\AdwCleaner\AdwCleaner[C2].txt - [1885 Bytes] - [02/08/2016 21:12:39]
C:\AdwCleaner\AdwCleaner[C3].txt - [2351 Bytes] - [03/08/2016 12:33:52]
C:\AdwCleaner\AdwCleaner[C4].txt - [5153 Bytes] - [05/03/2017 09:51:48]
C:\AdwCleaner\AdwCleaner[S1].txt - [2334 Bytes] - [31/07/2016 08:29:04]
C:\AdwCleaner\AdwCleaner[S2].txt - [1729 Bytes] - [02/08/2016 21:10:44]
C:\AdwCleaner\AdwCleaner[S3].txt - [7305 Bytes] - [02/08/2016 21:15:19]
C:\AdwCleaner\AdwCleaner[S4].txt - [2129 Bytes] - [03/08/2016 12:26:06]
C:\AdwCleaner\AdwCleaner[S5].txt - [5386 Bytes] - [05/03/2017 09:51:00]

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [5591 Bytes] ##########

 

[FirstShirt]

samuria, Thanks for your assistance and time. Have a Great Day.

 

[ThrashZone]

Hi,
You might also download TFC to your desktop
Right click it and select run as admin.
Start the scanner and when it's done exit and restart the machine.
TFC - Temp File Cleaner by OldTimer Download - Geeks to Go Forum