Search the Community

I've been looking around for solutions to this problem that cropped up and I can't really find one that could fix it. Basically, from the moment my pc actually starts up I keep getting Bad image messages with "Application or DLL *** .dll not valid Windows image. Check against installation diskette." It's the same thing for all programs and I'm not sure if it's a common or a simple thing but I don't know of a way to fix it. One of the reasons why I'm not having an easy time fixing it is because I know very little about computers so I'm sure you'll have just as a hard time helping me fix it. I really hope this can be fixed easily because I can't really afford to go and have it fixed by a professional.

Hi! Help! I have a Dell Windows XP computer and recently I keep receiving a DLL bad image error message for just about every program on my computer which says something like "The application or DLL name.DLL is not a valid windows Image. Please check this against your installation diskette." I've run AVG and no threats appear. I did a full Malwarebytes scan and although it did remove some malware, it didn't fix the problem. I also tried to do a system restore but that didn't fix it either. I'm thinking about trying to do a clean install reinstallation of Windows but I know this is a long process and I'm wondering if there's a faster, better way to get rid of the infection. Any help will be so very greatly appreciated!! I never know what to do with computers when these things happen. Thanks! Kate

Well, my computer suffered severe malware attacks before I received it. I actually received it for free for me to fix. After fixing it I decided to keep it for myself, it was perfectly fine. I also got Microsoft Office 2007 installed on it (legally of course with a CD-Key). No problems occurred whatsoever until one day when running Disk Cleanup a window appeared saying, "Files that are required for Windows to run properly have been replaced by unrecognized versions. To maintain system stability, Windows must restore the original versions of these files. ----Insert your Windows XP Professional CD-ROM now." [Options: Retry-More Information-Cancel]. I do not have a Windows XP CD-ROM because I fixed the computer manually, thus I cannot simply enter it and retry. So I am forced to Cancel and keep the unrecognized versions. This was the only thing that happened and no side effects were noticable so I left it. Another couple of months passed and I got the morbid blue shut-down screen.....3 times in 1 week. I am not smart enough to know what to do in that situation so I kept working as I needed to finish some work on the computer hoping to get back to it later. Then one day I realized that my Quick Launch Toolbar was not working (I would click the icons and nothing would happen). This was always my preferred method. So after that not working I double-clicked on my Fire Fox desktop Shortcut Icon. Nothing happened except the icon going semi-translucent. I found the only way to open programs was to right-click and click open (Not even clicking them from the start menu works). Please note that if I had a folder or PNG file on my desktop I could open it with ease, just not programs such as My Computer, Fire Fox, Internet Explorer, Windows Media Player, Etc. Even programs that I downloaded separate from Windows programs. I did some quick Google searches and figured I had a problem with my registry. I don't have enough training to mess with any of that. So I downloaded CCleaner, ran it, cleaned everything, apparently fixed all registry problems, I downloaded an Anti-Virus program that said my computer was clean of any viruses and everything I knew to do. I even tried System Restore (Which I also had to Right-Click and open as well) but to no avail (It would run and say it was unsuccessful and that no changes were made). I tried a Clean Boot, I tried EVERYTHING I could find on Google...thus, links to other sites/forums will most likely not be very helpful. I need help. This isn't a SERIOUS problem....yet....but it is VERY ANNOYING. If anyone could shed light on this, please do. Here is my HiJackThis File.... Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:45:11 PM, on 4/8/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Documents and Settings\Owner\Local Settings\Application Data\CrossLoop\CrossLoopService.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\AVAST Software\Avast\avastUI.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACA.EXE c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\WINDOWS\ALCWZRD.EXE C:\WINDOWS\ALCMTR.EXE C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Magical Jelly Bean\keyfinder.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Google\Update\GoogleUpdate.exe C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe C:\Documents and Settings\Owner\My Documents\Downloads\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/nchfilebulldog/{B36CD169-87FF-4DA0-9AA9-7775CA0B3F26} R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/nchfilebulldog/{B36CD169-87FF-4DA0-9AA9-7775CA0B3F26} R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: HrefNewTabBHO - {9EE1A6E7-E822-4D0E-9664-815F94B00373} - C:\Documents and Settings\Owner\Local Settings\Application Data\EpicNewTab\HrefIENewTab.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Facebackgrounds BHO - {B11CBDA9-6702-469E-9CE1-64E3971A6B44} - C:\Documents and Settings\Owner\Local Settings\Application Data\EpicAssistants\fb.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: TravelGraspBHO - {F1813754-5468-41D5-BB9F-A922BBB20399} - C:\Documents and Settings\Owner\Local Settings\Application Data\EpicAssistants\TravelGrasp.dll O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O3 - Toolbar: (no name) - {b278d9f8-0fa9-465e-9938-0c392605d8e3} - (no file) O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [EPSON Stylus CX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACA.EXE /P26 "EPSON Stylus CX3800 Series" /O6 "USB001" /M "Stylus CX3800" O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [CrossRiderPlugin] C:\Program Files\CrossriderWebApps\Crossrider.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Wisdom-soft AutoScreenRecorder 3.1 Free] 0 O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1 O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [RockMelt Update] "C:\Documents and Settings\Owner\Local Settings\Application Data\RockMelt\Update\RockMeltUpdate.exe" /c O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [epic] C:\Program Files\Epic\epic.exe O4 - HKCU\..\Run: [chromium] C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe --no-startup-window O4 - HKCU\..\Run: [Aim] "C:\Program Files\AIM\aim.exe" /d locale=en-US O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user') O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Startup: USB Link Speed & Distance System.lnk = ? O4 - Global Startup: Lunascape6.lnk = C:\Program Files\Lunascape\Lunascape6\Luna.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} - O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: CrossLoop Service (CrossLoopService) - CrossLoop - C:\Documents and Settings\Owner\Local Settings\Application Data\CrossLoop\CrossLoopService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing) O23 - Service: TightVNC Server (tvnserver) - GlavSoft LLC. - C:\Documents and Settings\Owner\Local Settings\Application Data\CrossLoop\tvnserver.exe -- End of file - 10608 bytes Thank you so much.... -Thankyou1123 ~Apologist Of Christ~ || ~Jeremiah 1:7-8 ; Habakkuk 1:5~

You can make the Operating System to "greet" you with a voice message. Here's how: Open Notepad and copy-paste this Dim speaks, speech speaks="your user name here or anything, Welcome to your Computer" Set speech=CreateObject("sapi.spvoice") speech.Speak speaks and the save it as .vbs extension move it to the folder C:Usersyour user name hereAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup source: Akhilesh Sharma, Tweakandtrick.com **example: Charlie, Welcome to your computer

I found this page with good information about what are them. http://www.emsisoft.com/en/kb/articles/tec120308/ Thanks to, Emisoft newsletter