Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

WINHTTP.dll is not a valid Windows image.


  • This topic is locked This topic is locked
5 replies to this topic

#1 HiItsPeter

HiItsPeter

  • Members
  • 8 posts
  • OFFLINE
  •  

Posted 13 December 2015 - 01:37 PM

Hello there, new user.

 

I've been encountering a disturbing problem on my Desktop MS Windows XP Professional SP3, which is the following error:

" The application or DLL C:\WINDOWS\system32\WINHTTP.dll is not a valid Windows image. Please check this against your installation diskette. "

In this case, the error is generated when i attempt to open the TeamViewer program. The title of the error is " TeamViewer.exe - Bad Image ". However, the error pops up everytime i try to download/install a new program into my computer or when opening an executable file.

 

I've searched for this problem on the internet on other websites, but i couldn't find any helpful information. Since i'm not that experienced within computers, until now, these are the only details i can offer you. If you need more, just ask.


Edited by HiItsPeter, 13 December 2015 - 01:38 PM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:32 PM

Posted 13 December 2015 - 03:34 PM

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis



#3 HiItsPeter

HiItsPeter
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  

Posted 13 December 2015 - 04:07 PM

Here you go:

 

MiniToolBox by Farbar  Version: 02-11-2015
Ran by Gica (administrator) on 13-12-2015 at 23:02:38
Running from "C:\Documents and Settings\Gica\My Documents\Downloads"
Microsoft Windows XP Professional Service Pack 3 (X86)
Model: M720-US3 Manufacturer: Gigabyte Technology Co., Ltd.

Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (12/13/2015 08:36:13 PM) (Source: Application Error) (User: )
Description: Faulting application teamviewer.exe, version 11.0.52465.0, faulting module kernel32.dll, version 5.1.2600.5512, fault address 0x00012aeb.
Processing media-specific event for [teamviewer.exe!ws!]

Error: (12/13/2015 08:20:11 PM) (Source: Application Error) (User: )
Description: Faulting application teamviewer.exe, version 11.0.52465.0, faulting module kernel32.dll, version 5.1.2600.5512, fault address 0x00012aeb.
Processing media-specific event for [teamviewer.exe!ws!]

Error: (12/13/2015 03:12:29 PM) (Source: Application Error) (User: )
Description: Faulting application teamviewer.exe, version 11.0.52465.0, faulting module kernel32.dll, version 5.1.2600.5512, fault address 0x00012aeb.
Processing media-specific event for [teamviewer.exe!ws!]

Error: (12/13/2015 03:10:35 PM) (Source: Application Error) (User: )
Description: Faulting application teamviewer.exe, version 11.0.52465.0, faulting module kernel32.dll, version 5.1.2600.5512, fault address 0x00012aeb.
Processing media-specific event for [teamviewer.exe!ws!]

Error: (12/12/2015 02:28:20 PM) (Source: Application Hang) (User: )
Description: Hanging application samp.exe, version 0.0.0.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (12/12/2015 01:56:23 PM) (Source: Application Error) (User: )
Description: Faulting application plugin-container.exe, version 42.0.0.5780, faulting module mozglue.dll, version 42.0.0.5780, fault address 0x0000ed50.   Processing media-specific event for [plugin-container.exe!ws!]

Error: (12/12/2015 01:53:11 PM) (Source: Application Error) (User: )
Description: Faulting application avast_free_antivirus_setup_online_cnet2.exe, version 0.0.0.0, faulting module , version 0.0.0.0, fault address 0x00000000.  Processing media-specific event for [avast_free_antivirus_setup_online_cnet2.exe!ws!]

Error: (12/12/2015 01:53:01 PM) (Source: Application Error) (User: )
Description: Faulting application avast_free_antivirus_setup_online_cnet2.exe, version 0.0.0.0, faulting module , version 0.0.0.0, fault address 0x00000000.  Processing media-specific event for [avast_free_antivirus_setup_online_cnet2.exe!ws!]

Error: (12/12/2015 01:52:41 PM) (Source: Application Error) (User: )
Description: Faulting application avast_free_antivirus_setup_online_cnet2.exe, version 0.0.0.0, faulting module , version 0.0.0.0, fault address 0x00000000.  Processing media-specific event for [avast_free_antivirus_setup_online_cnet2.exe!ws!]

Error: (12/11/2015 11:12:06 PM) (Source: Application Error) (User: )
Description: Faulting application plugin-container.exe, version 42.0.0.5780, faulting module mozglue.dll, version 42.0.0.5780, fault address 0x0000ed50.  Processing media-specific event for [plugin-container.exe!ws!]

System errors:
=============
Error: (12/13/2015 01:47:07 PM) (Source: Service Control Manager) (User: )
Description: The Automatic Updates service hung on starting.

Error: (12/13/2015 01:45:23 PM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for the NVIDIA Network Service service to connect.

Error: (12/13/2015 01:45:23 PM) (Source: Service Control Manager) (User: )
Description: The Background Intelligent Transfer Service service terminated with the following error: %%193

Error: (12/12/2015 01:55:47 PM) (Source: DCOM) (User: VIOREL)
Description: The server {E60687F7-01A1-40AA-86AC-DB1CBF673334} did not register with DCOM within the required timeout.

Error: (12/12/2015 01:54:07 PM) (Source: Service Control Manager) (User: )
Description: The TeamViewer 11 service terminated unexpectedly.  It has done this 3 time(s).

Error: (12/12/2015 01:54:02 PM) (Source: Service Control Manager) (User: )
Description: The TeamViewer 11 service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 2000 milliseconds: Restart the service.

Error: (12/12/2015 01:53:56 PM) (Source: Service Control Manager) (User: )
Description: The Avira Service Host service terminated unexpectedly.  It has done this 3 time(s).

Error: (12/12/2015 01:53:47 PM) (Source: DCOM) (User: VIOREL)
Description: The server {E60687F7-01A1-40AA-86AC-DB1CBF673334} did not register with DCOM within the required timeout.

Error: (12/12/2015 01:49:28 PM) (Source: Service Control Manager) (User: )
Description: The Avira Service Host service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (12/12/2015 01:49:18 PM) (Source: Service Control Manager) (User: )
Description: The TeamViewer 11 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 2000 milliseconds: Restart the service.

Microsoft Office Sessions:
=========================

=========================== Installed Programs ============================
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Romanian (HKLM\...\{AC76BA86-7AD7-1048-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
AMD Processor Driver (HKLM\...\{C151CE54-E7EA-4804-854B-F515368B0798}) (Version: 1.3.2.0053 - AMD)
Avira Launcher (HKLM\...\{09F2B047-6D72-47CC-B54A-549F1786E992}) (Version: 1.1.52.15531 - Avira Operations GmbH & Co. KG) Hidden
Avira Launcher (HKLM\...\{d0e166af-1634-4c0b-ae96-2180e61f9d38}) (Version: 1.1.52.15531 - Avira Operations GmbH & Co. KG)
BitTorrent (HKCU\...\BitTorrent) (Version: 7.9.5.41373 - BitTorrent Inc.)
Browser Configuration Utility (HKLM\...\{E8AEA11B-E60A-455E-B008-E4E763604612}) (Version: 1.0.4.9 - DeviceVM Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
HP DeskJet 2130 series Basic Device Software (HKLM\...\{8BECF3A4-E3DF-4A75-BB74-C7A50443A019}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)
HP DeskJet 2130 series Help (HKLM\...\{1CDFD3C9-BDF8-4DDC-BDA2-EBC53F938B5F}) (Version: 35.0.0 - Hewlett Packard)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (HKLM\...\{4A03706F-666A-4037-7777-5F2748764D10}) (Version: 2.1.67.1 - Oracle, Inc.) Hidden

League of Legends (HKLM\...\{79BF4901-1EC4-4726-B3C2-A7859706C6E7}) (Version: 3.0.1 - Riot Games) Hidden
League of Legends (HKLM\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Professional 2007 (HKLM\...\PROR) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version:  - )
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA nView 141.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 141.24 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Product Improvement Study for HP DeskJet 2130 series (HKLM\...\{EFF29656-8F1A-4043-B2D0-9FB4619B45AF}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)
REALTEK GbE & FE Ethernet PCI-E NIC Driver (HKLM\...\{C9BED750-1211-4480-B1A5-718A3BE15525}) (Version: 1.19.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5780 - Realtek Semiconductor Corp.)
Skype™ 7.16 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.16.102 - Skype Technologies S.A.)
Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamViewer 11 (HKLM\...\TeamViewer) (Version: 11.0.52465 - TeamViewer)
Tunngle (HKLM\...\Tunngle_is1) (Version: 5.8.3 - Tunngle.net GmbH)
Update for Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB898461) (HKLM\...\KB898461) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)
WebFldrs XP (HKLM\...\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}) (Version: 9.50.7523 - Microsoft Corporation) Hidden
Winamp (HKLM\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
WinRAR 5.30 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

========================= Memory info: ===================================
Percentage of memory in use: 44%
Total physical RAM: 2046.48 MB
Available physical RAM: 1144.52 MB
Total Virtual: 3939.44 MB
Available Virtual: 3139.92 MB

========================= Partitions: =====================================
2 Drive c: () (Fixed) (Total:149.04 GB) (Free:113.61 GB) NTFS
3 Drive d: () (Fixed) (Total:74.55 GB) (Free:53.6 GB) NTFS

========================= Users: ========================================
User accounts for \\VIOREL

Administrator            ASPNET                   Gica                     
Guest                    HelpAssistant            SUPPORT_388945a0         


**** End of log ****
 

 

And the snapshot: http://speccy.piriform.com/results/OvUGCH3Awxdk3sjngCMOnYL


Edited by hamluis, 14 December 2015 - 11:35 AM.


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:32 PM

Posted 14 December 2015 - 11:40 AM

I would uninstall TeamViewer.

 

Then, I would run the sfc /scannow command.

 

To be honest...I'm inclined to suspect malware and I would run this topic through the BC Am I Infected forum...before assuming that it's not malware.

 

Louis



#5 HiItsPeter

HiItsPeter
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  

Posted 14 December 2015 - 02:27 PM

As i was saying, the error appears whenever i try to install a downloaded program. Also, this copy of Windows is pirated, sadly, so i don't have any XP CD or DVD. Before i report this problem to the Am i Infected forum, i want to be 100% sure that's malware.


Edited by HiItsPeter, 14 December 2015 - 02:29 PM.


#6 hamluis

hamluis

    Moderator


  • Moderator
  • 56,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:32 PM

Posted 14 December 2015 - 07:07 PM

Well...members in this forum (XP) are not allowed to assist any member with pirated software.  See the Forum Rules.

 

Excerpt:  "No subject matter will be allowed whose purpose is to defeat existing copyright or security measures. If a user persists and/or the activity is obviously illegal the staff reserves the right to remove such content and/or ban the user. This would also mean encouraging the use or continued use of pirated software is not permitted, and subject to the same consequences."

 

No one here can verify the existence or non-existence of malware, whether there is or is not illegal software installed.  Malware is beyond the province of this forum, which is why I mentioned the Am I Infected forum.

 

The owner of this website allows MRT personnel some leeway in trying to deal with pirated software and malware, leaving it up to MRT members to decide what they can do in such circumstances.

 

IMO, your best alternative is to follow Steps 6-8 of Preparation Guide, Before Using Malware Removal Tools and Requesting Help - http://www.bleepingcomputer.com/forums/topic34773.html and initiate a new topic in the forum which contains the Prep Guide (do not post topic in any other BC forum).

 

This topic is now closed.  If you have any questions about my actions, please convey such via PM and I will try to respond intelligently.

 

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users