TechSpot

Need Help to Remove Bad Image DLL messages

By ymao13101
Oct 17, 2009
  1. I believe my computer is infected with a Bad Image Dll virus. I have attached the logs for an expert's review. I appreciate it very much if an expert would review them and let me know which entries should be removed.

    I don't know how to uninstall a Chinese P2P program; such uninstallation was suggested by the 8-step viruses preliminary removal instructions.
     

    Attached Files:

  2. Tmagic650

    Tmagic650 TS Ambassador Posts: 17,190   +227

    Many suspicious entries are in your hijackthis log:
    "O20 - AppInit_DLLs: 4p3fs8pter6j4x1.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll"...
    "R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch"...
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch"...
    "R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch"...
    "O2 - BHO: IEBtnHlprObj Class - {922C93CD-8B92-485a-8B40-F9DB7E0984A5} - (no file)"...
    "R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL"...
    "O4 - HKLM\..\Run: [¼«ËÙ¿á6] "C:\Program Files\¿á6Íø\¼«ËÙ¿á6\Ku6SpeedUpper.exe" /start"...
    O4 - HKLM\..\Run: [???6] "C:\Program Files\¿á6Íø\¼«ËÙ¿á6\Ku6SpeedUpper.exe" /start"...
    "O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN"...
    "O4 - Global Startup: winlogin.exe"...
    "O16 - DPF: {680285A8-96D3-43DA-9D3D-51DD987D0B77} (NeroVersionCheckerControl Control) - http://www.nero.com/doc/NeroVersionCheckerControl.cab"...
    "O24 - Desktop Component 0: (no name) - (no file)"...


    You may still have an active Trojan virus on your computer. Remove these lines in the hijack log
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...