Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

HOW DO I GET RID OF THIS ?


  • Please log in to reply
3 replies to this topic

#1 rooky62

rooky62

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:24 AM

Posted 03 February 2010 - 02:03 PM

HI chaps im new here.
does anyone know what this is and how to get rid of it.

c:\windows\system32\78.dll is not a valid windows image.

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,262 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:24 AM

Posted 03 February 2010 - 02:43 PM

Doesn't seem to be a jury in...but I would treat is adware/spyware.

Possible connection with Mirar toolbar, http://forums.spybot.info/showthread.php?t=49812.

My take is..."bad image" or "not a valid Windows image" may refer to existing malware or malware which has been removed and still has something pointing to it (attempting to activate it).

I would take a look in both the System32 folder and my startup entries. If no actual file in System32, then it would seem to be a startup pointer (IMO).

I'd run Spybot and SUPERAntiSpyware to remove, if present.

Louis

#3 rooky62

rooky62
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:24 AM

Posted 03 February 2010 - 06:38 PM

UPDATE, GOOD NEWS.

i run a full scan with MALWARE BYTES but it found nothing.
i then run a full scan with SUPERANTISPYWARE and it found 8 tracking cookies and also the culprit TWICE! which is a trojan.
c:\windows\system32\78.dll is not a valid windows image.

i rebooted and hey presto GONE!

thanks for the advise :thumbsup:

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,262 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:24 AM

Posted 03 February 2010 - 07:18 PM

Glad you solved it, happy computing :thumbsup:.

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users