Unknown dll error pop-up "msirji32.dll"

[iluishi]

Greetings, lately i have been experiencing a strange dll error everytime i start up my computer. It's stating the following:

"There was a problem starting msirji32.dll. The specified module could not be found"

I googled the dll file and i could not find it anywhere. It's not exactly affecting my system but i would like to know what it could be. Could anyone tell me what it could be? Thanks.

 

[writhziden]

This is likely due to malware. I will ask that this thread be moved to our System Security - Windows 7 Forums forum.

In the meantime, could you post a screenshot of your startup programs? Start Menu -> type msconfig into the search programs and files box -> hit enter -> startup tab

Save a screen shot, scroll down through the startup programs list, save another screen shot, etc. http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

 

[iluishi]

Sure thing here it is.

 

[writhziden]

First things to do:

• Run a virus scan with your antivirus software.
• Download and install Malwarebytes and update the software. Do not start the trial version. Run a standalone full scan of your system with Malwarebytes.
• If the above do not work to resolve the error message, go back into msconfig's startup tab and uncheck the box for MSIDLL, click OK, and restart your computer.

Let us know if your antivirus software or Malwarebytes find any viruses/malware. Also, check your antivirus software logs for any viruses/malware found around the time that this problem started occurring. It would be good to know what type of infection was found to provide better troubleshooting steps for your security.

 

[iluishi]

I ran the antivirus and it found 3 threats and i deleted them right away but the problem was still there but unchecking the box for MSIDLL seem to do the trick. Thanks for the help! I really appreciate it.

 

[Jacee]

Can you copy and paste the MBam log with the 3 threats, please?

 

[iluishi]

I couldn't get the MalwareBytes because the site was down or something but here's my antiviruses log:

C:\Users\Nano\Downloads\network magic.rar » RAR » nmsetup.exe » NSIS » netddee.exe » NSIS » 000.exe » NSIS » Script.nsi - Win32/Adware.RON.FSV application
C:\Windows\System32\rozqpmmsap.exe » NSIS » Script.nsi - Win32/Adware.RON.FSV application
C:\Windows\SysWOW64\rozqpmmsap.exe » NSIS » Script.nsi - Win32/Adware.RON.FSV application

 

[writhziden]

What antivirus software do you have?

When I first started on here, I remember something about Malwarebytes's site not loading for some users until the users cleared their browser history. You may try that.

I would still suggest downloading and installing Malwarebytes (not the trial) and immediately updating the definitions. Then do a full scan. You can download the installer on another computer if necessary and transfer it to the computer that was infected.

 

[iluishi]

Eset nod32, and i downloaded Malewarebytes and here is the log:


Malwarebytes Anti-Malware 1.60.1.1000
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Database version: v2012.03.14.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Nano :: NANO-PC [administrator]

14/03/2012 05:20:56 p.m.
mbam-log-2012-03-14 (20-27-26).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 503633
Time elapsed: 1 hour(s), 22 minute(s), 56 second(s)

Memory Processes Detected: 1
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> 1392 -> No action taken.

Memory Modules Detected: 1
C:\Windows\System32\oifyurqcdesxpx.dll (Trojan.Agent) -> No action taken.

Registry Keys Detected: 5
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rozqpmmsap (Trojan.Agent) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7B2F1362-42AD-25ED-3BFE-FFA1C74C269C} (Adware.AdRotator) -> No action taken.
HKCR\CLSID\{7B2F1362-42AD-25ED-3BFE-FFA1C74C269C} (Adware.AdRotator) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{7B2F1362-42AD-25ED-3BFE-FFA1C74C269C} (Adware.AdRotator) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7B2F1362-42AD-25ED-3BFE-FFA1C74C269C} (Adware.AdRotator) -> No action taken.

Registry Values Detected: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|xrgzqpnugkown (Trojan.Agent) -> Data: C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\oifyurqcdesxpx.dll" -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 6
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> No action taken.
C:\Program Files (x86)\Pure Networks\Network Magic\Patch.exe (Patch.NetworkMagic) -> No action taken.
C:\Users\Nano\Documents\Guitar pro 6\guitar pro6\crack guitar pro 6\keygen.exe (Malware.Packer.Gen) -> No action taken.
C:\Users\Nano\Documents\Rem_WAT_ove_.226\RemoveWAT.226\RemoveWAT.exe (HackTool.Wpakill) -> No action taken.
C:\Windows\System32\oifyurqcdesxpx.dll (Trojan.Agent) -> No action taken.
C:\Windows\SysWOW64\oifyurqcdesxpx.dll (Adware.AdRotator) -> No action taken.

(end)

 

[writhziden]

Alright, patiently wait for Jacee to post back. She's the expert with these problems, and you will be in very good hands. I was just filling in while she is away with steps that will help provide more information.

 

[iluishi]

Alright, thanks for all your help. I really appreciate it!

 

[Jacee]

Kind'a curious about this item:
C:\Users\Nano\Documents\Rem_WAT_ove_.226\RemoveWAT.226\RemoveWAT.exe (HackTool.Wpakill)
http://www.pcthreat.com/parasitebyid-8336en.html


Download CKScanner by askey127 from HERE
Important - Save it to your desktop.
Doubleclick CKScanner.exe and click Search For Files.
After a very short time, when the cursor hourglass disappears, click Save List To File.
A message box will verify the file saved.
Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

Also,

1. download http://go.microsoft.com/fwlink/?linkid=52012 MGADiag and save it to your desktop.
2. Double click the
   
   icon on your desktop.
3. Push
   
4. Push
   
5. Go to Start -> Run and type in "Notepad"
6. Go to Edit -> Paste in notepad.
7. x out all of the numbers and letters in the line beginning with "Windows Product Key:"
8. Copy and paste that log here.