Bad Image - Virus?

By MAx1313 ยท 4 replies
Mar 11, 2009
  1. Hi Tech Spot Helper,

    I have run into what looks to be a virus. I get a dialouge box that comes up with something about a "bad image file" and .dll anytime I open an application. So far this seems to be the only problem. I have gone through the 8 step process and have attached the log files.

    Any help in this matter would be greatly appreciated!
  2. kimsland

    kimsland Ex-TechSpotter Posts: 14,523

    -> No action taken on MBAM scan, for found issues
    Please re-run Malwarebytes
    Confirm updated (third tab)
    Then do the above quoted message, but this time "Remove all found issues"

    By the way, you will need to then restart, and run (and attach) a new HJT log
  3. MAx1313

    MAx1313 TS Rookie Topic Starter

    Thanks for catching that. I'm attaching both logs after running bytes, removing, and restarting.
  4. kimsland

    kimsland Ex-TechSpotter Posts: 14,523

    Here's a further 8-Steps: (as Vundo infection can be difficult, this procedure should remove it ;))

    Download the following 4 tools, and print these instructions

    1. Download VundoFix; Trojan.Vundo Removal Tool; VirtumundoBeGone and ComboFix.
    2. Go Offline - pull the cable network, turn off wireless card, turn off your modem.
    3. Restart computer and press F8 to run Windows in Safe Mode
    4. Run VundoFix.. Click on the Scan for Vundo. Scanning will begin, which takes a long time. In the white box will display the names of infected files. After the scan is complete click Remove Vundo, removal will begin. Confirm by clicking Yes. The application should ask for permission to restart your computer - click Yes. Start Windows in Safe Mode again.
    5. Run FixVundo. Click Start, and then follow the instructions. It should be noted that this application can deal only with older mutations Vundo (Virtumonde).
    6. Run VirtumondoBeGone. Click Continue and wait for the report.
    7. Run ComboFix. Then, in the two windows that appear click Yes, and start scanning and removal of any Vundo (Virtumonde) infection. During this operation, you are not allowed to move the mouse or perform other actions. After the scan is complete, program will show a text file - a report from the program's action.
    8. Restart computer and run Windows normally.
  5. MAx1313

    MAx1313 TS Rookie Topic Starter

    Success!! Thank you so much! I'm no longer getting the "bad image" boxes anymore and things seem to be good. It must have been buried deep - nothing found there problem until combo fix. I attached my latest logs just in case you're curious.

    But yeah thanks again!!!!
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...