removed trojan, now get msls51.dll cannot be found error

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Please follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide


and attach the requested logs when you finish these instructions.

• **** If something does not run, write down the info to explain to us later but keep on going. ****
• Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

• After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
   
   • Starting your computer in Safe mode
2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:
   • Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.
​

 

Your logs do not show any signs of malware. That does not mean you are necessarily clean. It just means these logs are not showing any. But there is a high probability that you are clean. There is a valid msls31.dll file which is Microsoft Line Services and this file is still on your PC. msls51.dll has frequently been associated with malware but that does not mean it is malware. It could be a false detection. And based on the problems you are having now, perhaps Eset removed some items you need. I suggest you begin by restoring everything that Eset removed and then reboot. See how things are working. DO NOT let Eset delete the files again.

Once you get the msls51.dll file restored, put a copy of it into a ZIP file and attach it here.

 

I'm not sure you need this file since I'm not sure it is valid. Almost all info on it point towards it being related to malware. I wanted to try and obtain a copy from you to check it myself for validity.

Do you have the ability to run System Restore? If so, see if you can restore your system to a point in time before you ran ESET. Let me know what happens. I have a feeling you may also get an error message when trying to run System Restore. If you do get an error, give me the exact and complete word for word message. Do not abbreviate it in anyway or paraphrase.

 

Download Registry Search (see the link titled RegSearch Download Link )

• Extract the files from Regsearch.zip into a folder.
• Doubleclick regsearch.exe to start the program.
• See the top 3 boxes under the Enter search strings (case independen) and click Ok... option, enter the below string (use copy and past)
  • msls5
• Then click "OK".
• Notepad will be opened with text in it (the file named RegSearch.txt will be saved in the program's folder as well).
• Attach this RegSearch.txt file.

Now click Start, Run, and enter cmd and click OK. This will open a command prompt window. At the command prompt enter the below command and hit enter. Tell me if you receive any error messages. Note there are spaces before and after the /u

regsvr32 /u msls5.dll


Now if the above did not give any error messages, reboot your PC and see if anything has changed.

 

Sorry! I left of the 1. The search would have still worked anyway, but the other command needs to be run with the 1. If you already ran the below:


regsvr32 /u msls51.dll


and there is no, change, then try the below.

Click Start, Run, and enter sfc /scannow and click OK. There is a space after the sfc. This runs System File Checker which looks for missing or corrupted system files and attempts to replace/repair them from files on your hard disk or from the CD if necessary. So it will ask for the Windows CD if it needs it.


If still no change, you should backup any data you need. And then try a Windows Repair. If that does not help, a reinstall will probably be in order.

 

Additional info on this problem thanks to a user named marker who IM'ed me at another forum. Below is verbatim what Marker found

I did go and check your logs for the uxtheme.dll file and yours is only 234,496 bytes which is not the correct size for an update Vista x64 SP2 system. It should be 317,440 bytes.

 

You're welcome. Yes hopefully it will help others that hit the same problem.