TechSpot

Need Help to Remove Bad Image DLL messages

By ymao13101
Oct 17, 2009
  1. I believe my computer is infected with a Bad Image Dll virus. I have attached the logs for an expert's review. I appreciate it very much if an expert would review them and let me know which entries should be removed.

    I don't know how to uninstall a Chinese P2P program; such uninstallation was suggested by the 8-step viruses preliminary removal instructions.
     

    Attached Files:

  2. Tmagic650

    Tmagic650 TS Ambassador Posts: 21,065   +169

    Many suspicious entries are in your hijackthis log:
    "O20 - AppInit_DLLs: 4p3fs8pter6j4x1.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll"...
    "R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch"...
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch"...
    "R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch"...
    "O2 - BHO: IEBtnHlprObj Class - {922C93CD-8B92-485a-8B40-F9DB7E0984A5} - (no file)"...
    "R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL"...
    "O4 - HKLM\..\Run: [¼«ËÙ¿á6] "C:\Program Files\¿á6Íø\¼«ËÙ¿á6\Ku6SpeedUpper.exe" /start"...
    O4 - HKLM\..\Run: [???6] "C:\Program Files\¿á6Íø\¼«ËÙ¿á6\Ku6SpeedUpper.exe" /start"...
    "O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN"...
    "O4 - Global Startup: winlogin.exe"...
    "O16 - DPF: {680285A8-96D3-43DA-9D3D-51DD987D0B77} (NeroVersionCheckerControl Control) - http://www.nero.com/doc/NeroVersionCheckerControl.cab"...
    "O24 - Desktop Component 0: (no name) - (no file)"...


    You may still have an active Trojan virus on your computer. Remove these lines in the hijack log
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.