Solved [Active] Bad image errors

[Broni]

My reply #20...

 

[gonzy3]

i ran otl on normal mode without any other programs running. but it stalls on the internet explorer files. is it ok to run in safe mode?

 

[Broni]

No.
Disable Avast and try again.

 

[gonzy3]

bad news. i waited for almost 30 minutes but it stalled on HKEY_CURRENT_USER\ Internet Explorer settings.

i already disabled avast.

 

[Broni]

Restart computer and try again.

 

[gonzy3]

i have some bad news. i already restarted it but still it stalls on that area. avast was disabled.

 

[Broni]

Please, try safe mode then.

 

[gonzy3]

damn it. still no progress even in safe mode, OTL still stalls at that area. and i waited for almost an hour.

 

[gonzy3]

Finally! after 3 hours of waiting. it finally went through. I hope the results will be of great news.

 

[Broni]

You're running low on C drive free space:

Drive C: | 102.10 Gb Total Space | 13.18 Gb Free Space | 12.91% Space Free

=======================================================================

We need to remove old Java version and its remnants...

Download JavaRa to your desktop and unzip it to its own folder

• Run JavaRa.exe (Vista users! Right click on JavaRa.exe, click Run As Administrator), pick the language of your choice and click Select. Then click Remove Older Versions.
• Accept any prompts.

========================================================================

OTL log looks perfectly clean

Last scans...

1. Download Security Check from HERE, and save it to your Desktop.

• Double-click SecurityCheck.exe
• Follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

2. Download Temp File Cleaner (TFC)

• Double click on TFC.exe to run the program.
• Click on Start button to begin cleaning process.
• TFC will close all running programs, and it may ask you to restart computer.

3. Go to Kaspersky website and perform an online antivirus scan.

• Disable your active antivirus program.
• Read through the requirements and privacy statement and click on Accept button.
• It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  
  • Spyware, Adware, Dialers, and other potentially dangerous programs
  • Archives
  • Mail databases
• Click on My Computer under Scan.
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As....
• Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button. Then post it here.

 

[gonzy3]

What the F!!!! the errors just keep coming on and on even if I remove. AutoIt v3: Objlist.exe - Bad Image
C;\Windows\system32\napinsp.dll bla bla bla.

it appeared when I used security check damn it.

until now I still cant remove it. and some of my programs are unusable I don't know why. saying that "this file does not have a program associated with it performing this action. Create an association in the Set Associations control panel."

 

[gonzy3]

magically the pop up bad image is gone right after i sent this message. of course i ok'd it a few times. i also get some bad image errors when i use safari. i also encounter it when downloading java's latest version. so far that's what i can remember on the bad image's popup.

 

[Broni]

SecurityScan is just a scan, so it doesn't make any changes to your computer.
I still need to see its log

AutoIt v3: Objlist.exe - Bad Image
C;\Windows\system32\napinsp.dll bla bla bla.

Blah, blah may be important to me. I asked couple of times to post a whole message, when the error happens. Write it down, maybe?
Does it always list AutoIt?

 

[gonzy3]

im sorry. AutoIt error appeared when i executed security check.
AutoIt v3: Objlist.exe - Bad Image
C;\Windows\system32\napinsp.dll is either not designed to run on windows or it contains an error. try installing the program again using the original installation media or contact you system administrator or the software vendor for support.

the bad image headers differs on the program i use. but the contents are the same. same as safari. safari.exe - bad image. ill try opening other programs. but the popups disappear if i close the program eventhough it didnt ran properly.

ill try opening other programs and see if i encounter bad image errors too.

what about this error "this file does not have a program associated with it performing this action. Create an association in the Set Associations control panel." it appeared when i opened my nero 10. all of its programs.

i also encountered an error on DTProagent saying my windows version is lower than 2000. i only encounter it during startup. when i ok'd it. it doesnt appear again.

i dont know if there is any connections with theses errors. i hope i provided with vital informations.

 

[Broni]

what about this error "this file does not have a program associated with it performing this action. Create an association in the Set Associations control panel." it appeared when i opened my nero 10. all of its programs.

Nero only? Do other programs open fine?

i also encountered an error on DTProagent

I have no clue about DAEMON Tools, since i don't use them. Reinstall?

Now, regarding "bad image" error...
Is always C;\Windows\system32\napinsp.dll listed.

You may have some Windows files issues.

I still need SecurityScan log.

 

[gonzy3]

i also encountere winamp.exe bad image errors. the .dll is still the same.

 

[gonzy3]

the problem is i can't run security check on normal mode. the popups is blocking it and the program halts. the popups appear on the "preparing" part on security check. i dont know if its ok to run in safe mode. should i run it in safe mode?

 

[Broni]

No, hold on with SecurityScan.

By pop-ups do you mean "bad image" pop-ups?

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
• Vista users:: Right click on SystemLook.exe, click Run As Administrator
• Copy the content of the following box into the main textfield:
  

  :filefind
  napinsp.dll

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

 

[gonzy3]

Yes, they are bad image popups.

 

[Broni]

I think we got something here....

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :OTL
  
  :Services
  
  :Reg
  
  :Files
  C:\Windows\System32\NapiNSP.dll|C:\Windows\winsxs\x86_microsoft-windows-n..ider-infrastructure_31bf3856ad364e35_6.0.6000.16386_none_a9e67ecc9245d5ec\NapiNSP.dll /replace
  
  :Commands
  [purity]
  [emptytemp]
  [emptyflash]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done
• You will get a log that shows the results of the fix. Please post it.
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

 

[gonzy3]

Here are the results. I hope its promising.

 

[Broni]

How are the pop-ups?

Please, re-run SystemLook with very sane code as in my reply # 43.

 

[gonzy3]

the pop ups are still showing popups. i found out that if i open winamp it has a bad image error. im running system look right now.

 

[gonzy3]

Here are the results

 

[Broni]

OK. File replacement didn't work.

1. Please download The Avenger to your Desktop.

• Right click on the Avenger.zip folder and select "Extract All..."
• Follow the prompts and extract the Avenger folder to your desktop

2. Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):

Begin copying here:
Files to move:
C:\Windows\winsxs\x86_microsoft-windows-n..ider-infrastructure_31bf3856ad364e35_6.0.6000.16386_none_a9e67ecc9245d5ec\NapiNSP.dll | C:\Windows\System32\NapiNSP.dll

3. Now, open the avenger folder and start The Avenger program by clicking on its icon.

• Right click on the window under Input script here:, and select Paste.
• You can also click on this window and press (Ctrl+V) to paste the contents of the clipboard.
• Click on Execute
• Answer "Yes" twice when prompted.

4. The Avenger will automatically do the following:

• It will Restart your computer. ( In cases where the code to execute contains "Drivers to Delete", The Avenger will actually restart your system twice.)
• On reboot, it will briefly open a black command windowon your desktop, this is normal.
• After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
• The Avenger will also back up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
  

5. Please copy/paste the content of c:\avenger.txt into your reply