Have to find my MADCHOOK.DLL

[Marco_SE]

I need to know the easyest way to get back MADCHOOK.DLL

I get an error for winsys2.exe when I boot up my computer and it asks for this MADCHOOK.DLL.
I must have deleted it during the false positives yesterday. I know, it was bad. Everything else (eh, one file) did go to the Chest before I found out that all was false positives .

It is the only file I have left to fix. Everything else is back (from Virus Chest).

So, the best and easyest way to find this MADCHOOK.DLL? And to what folder do I have to put it if there is one I can download from somewhere, or just get from my Vista cd.

Edit: (Vista 64 bit)

[Vlk]

winsys2.exe belongs to the NVIDIA graphic card drivers AFAIK.
So I'd suggest reinstalling the NVIDIA drivers - chances are it will resolve the issue.

Thanks
Vlk

[Pondus]

tjena grabben  will this help you?

Windows Vista Repair
http://ezinearticles.com/?Windows-Vista-Repair&id=485947

[Vlk]

tjena grabben  will this help you?

Windows Vista Repair
http://ezinearticles.com/?Windows-Vista-Repair&id=485947

I don't think. Again, it's a 3rd party software component (NVIDIA in this case).

[Marco_SE]

Nice, I reinstall Nvidia gfx drivers and report back...
(Tjena Pondus hehe)

[Marco_SE]

No, it didn't work.

I still get that popup when I start.
It says, up on top: "winsys2.exe -  Can't find a component" (or something. I have a Swedish ver of Vista).
And the main text says something like this: This program could't start due to MADCHOOK.DLL wasn't found. This can be fixed by reinstalling the program.

Well, I don't know what program it is hehe.

More help? It would be a lot of work if I have to start all over again just due to this one file

[Vlk]

Don't start over.
Search your hard drive for the file (winsys2.exe) to find out which program it belongs to. Then reinstall the program.

(BTW: there are even some real viruses that use this file name; so it would be interesting to see what is this winsys2.exe of yours about).

Thanks
Vlk

[Marco_SE]

winsys2.exe:

File Description: TODO
Company name: TODO
Fileversion: 1.0.0.1
Created: 2008-08-28 11:45
Size: 212 kB

Latest changend: 2006-10-03 13:37
Type: Program

And it is in folder: C:\Windows\SysWOW64

But MADCHOOK.DLL, I don't have a clue?

[Pondus]

MADCHOOK.DLL    http://spywaredlls.prevx.com/RRHFIH605677/MADCHOOK.DLL.html

[gregoryh]

Although it doesn't help him find the software that installed it, that file was made and is distributed (under licence) by this guy, here :- http://www.madshi.net/madCodeHookDescription.htm.

[Marco_SE]

I downloade MADCHOOK.DLL and put in to "C:\Windows\System32".
I had to try. It was a little bit scary but it looks like it worked. I didn't get any errors when I logged into Vista anyway.

(Thanks Tgell)

[Vlk]

Your copy of winsys2.exe actually looks quite fishy to me.
Can you try uploading it to www.virustotal.com and see what it says?

Thanks
Vlk

[Dwarden]

winsys2.exe was trojan component i saw it sometime ago ... but could be that it used name of something innocent again

[Tgell]

Maybe he has a MSI motherboard.

http://forum-en.msi.com/index.php?topic=131028.msg986554

[Marco_SE]

Well, I don't have the "winsys2.exe" file in "C:\Windows\SysWOW64 anymore".

But I still had that "madCHook.dll" I downloaded. Now when I didn't find the "winsys2.exe" I renamed it to "AAAAAAAAAAAAAAAmadCHook.dll" and there wasn't an error message when I booted. I am going to move it completely from where it is now and delete it when I see that everything is ok.

Mainboard is an ASUS but I have MSI GFX cards in SLI (nvidia). I unistalled a couple of programs for those cards. One of them was MSI StarOSD and I think it might had something to do with it.
(MSI StarOSD = to adjust the contrast, brightness, overclocking and temperature according to each user’s individual preference).
I also unistalled some other programs I don't even remember what they were hehe. I have never used them anyway.

Edit: I did wrote the wrong filename. Now it is "winsys2.exe", as it should