Jump to content

Build Theme!
  •  
  • Infected?

big grin WE'RE SURE THAT YOU'LL LOVE US!

We invite you to ask questions, share experiences, and learn. It's 100% free. Did we mention that it's free. It is. It's free. Join 91600 other members! Anybody can ask, anybody can answer. Consistently helpful members with best answers are invited to staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

48 "Bad Image" Warnings on Boot Up [Solved]

errors bad image

  • This topic is locked This topic is locked
74 replies to this topic

#61 RandalSon

RandalSon

    Authentic Member

  • Authentic Member
  • PipPip
  • 44 posts

Posted 29 December 2013 - 11:36 AM

malwarebytes seems to be blocking use of firstrowsports.  If I disable it I immediately get ad popups.

 

http://firstrowus1.eu


Edited by RandalSon, 29 December 2013 - 11:37 AM.

    Advertisements

Register to Remove


#62 Conspire

Conspire

    SuperHelper

  • Classroom Teacher
  • 5,805 posts

Posted 29 December 2013 - 09:55 PM

This was the reason why it was removed at the first place. I don't really recommend you to install them because it will reintroduce the old problem back.

I need you to make a batch file for your connection problem. Hopefully this will solve the intermittent disconnection.

Open a new Notepad session
  • Click the Start button, click Run
  • In the run box type notepad
  • Click OK
  • In the notepad, Click "Format" and be certain that Word Wrap is not checked.
  • Copy and paste all the text in the code box below into the Notepad. Do Not copy the word CODE
@Echo on
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0
In the notepad

Click File, Save as..., and set the Save in to your Desktop
In the filename box, type (including quotation marks) as the filename: "flush.bat"
Click Save


You should now have a file on your desktop with an icon like this post-78707-1263753228.jpg

Double click on flush.bat & allow it to run. A small black screen may briefly flash on and off, that normal.
Proud Graduate of the WTT Classroom
Member of UNITE
The help you receive here is always free. If you wish to show your appreciation, then you may Posted Image
Posted Image

#63 RandalSon

RandalSon

    Authentic Member

  • Authentic Member
  • PipPip
  • 44 posts

Posted 30 December 2013 - 06:40 AM

Ok, will try that later today.  and yes, something is now hijacking my default homepage to
 
hxxp://www.search.conduit.com

Edited by Conspire, 30 December 2013 - 08:28 AM.
Link omitted for safety


#64 Conspire

Conspire

    SuperHelper

  • Classroom Teacher
  • 5,805 posts

Posted 30 December 2013 - 08:29 AM

Run them again

Please download AdwCleaner by Xplode and save to your Desktop.
  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Proud Graduate of the WTT Classroom
Member of UNITE
The help you receive here is always free. If you wish to show your appreciation, then you may Posted Image
Posted Image

#65 RandalSon

RandalSon

    Authentic Member

  • Authentic Member
  • PipPip
  • 44 posts

Posted 30 December 2013 - 08:48 AM

Still won't copy/paste.   Have unchecked the mypcbackup items.   Have not clicked on Clean.  scan did not take long at all.

Attached Files


Edited by RandalSon, 30 December 2013 - 08:59 AM.


#66 Conspire

Conspire

    SuperHelper

  • Classroom Teacher
  • 5,805 posts

Posted 30 December 2013 - 09:18 AM

Clean them this time. Attach the log when you're done.
Proud Graduate of the WTT Classroom
Member of UNITE
The help you receive here is always free. If you wish to show your appreciation, then you may Posted Image
Posted Image

#67 RandalSon

RandalSon

    Authentic Member

  • Authentic Member
  • PipPip
  • 44 posts

Posted 30 December 2013 - 09:33 AM

OK.

Attached Files



#68 RandalSon

RandalSon

    Authentic Member

  • Authentic Member
  • PipPip
  • 44 posts

Posted 30 December 2013 - 09:56 AM

"flush.bat" has run.  reboot was clean and browser open went to the right homepage.



#69 Conspire

Conspire

    SuperHelper

  • Classroom Teacher
  • 5,805 posts

Posted 30 December 2013 - 09:01 PM

Good. Do observe the internet for any intermittent disconnection. Let me know after a couple of days.
Proud Graduate of the WTT Classroom
Member of UNITE
The help you receive here is always free. If you wish to show your appreciation, then you may Posted Image
Posted Image

#70 RandalSon

RandalSon

    Authentic Member

  • Authentic Member
  • PipPip
  • 44 posts

Posted 30 December 2013 - 09:14 PM

Goodmorning.   OK, we'll see how things settle after a couple daily reboot cycles. 

 

Too bad about firstrow - it is my only access to some sports.    Unless you have another idea.    R


    Advertisements

Register to Remove


#71 RandalSon

RandalSon

    Authentic Member

  • Authentic Member
  • PipPip
  • 44 posts

Posted 02 January 2014 - 08:06 AM

Hey there -   something, probably malwarebytes, took out the weather gadget again. I can live with that.  No network issues.  Good boot ups.

 

I have 9 log files and all the apps except the one we uninstalled with shortcut icons on my desktop.  What are we going to leave on, and what can I delete, and/or just delete the shortcuts?



#72 Conspire

Conspire

    SuperHelper

  • Classroom Teacher
  • 5,805 posts

Posted 02 January 2014 - 08:42 AM

Ok we will do some housekeeping now.

 

Do this first before removing any tools we used. If you see anything else that still lies around, do remove them by dragging to Recycle Bin.

 

Follow these steps to uninstall Combofix

  • Click START then RUN
  • Now copy/paste the code into the runbox and click OK. Note the space between the ..X and the /U, it needs to be there.

Combofix /Uninstall
Combofix_uninstall_image.jpg

 

===================================================

 

Double click on AdwCleaner.exe to run the tool again.

  • Click on the Uninstall button.
  • Click Yes when asked are you sure you want to uninstall.
  • Both AdwCleaner.exe, its folder and all logs will be removed.

 

===================================================

 

Thank you for your patience, and performing all of the procedures requested. I would also like to take this opportunity to apologize for any delay that may have occurred.

--------------------------------------------------------------------------------------------------------------

MICROSOFT UPDATES
It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Keeping your OS and browser up to date will help make you less susceptible to attacks by Trojans and viruses. Please go to Microsoft and download all the critical updates to help prevent possible re-infection.


Passwords
It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
Strong passwords: How to create and use them and consider a password keeper, to keep all your passwords safe.


SPYWARE PREVENTION
This is a good time to set up protection against further attacks. In light of your recent problem, I'm sure you'd like to avoid any future infections. Please read these well written articles:




To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:
  • WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
  • Green to go
  • Yellow for caution
  • Red to stop

WOT has an add-on available for both Firefox and IE.


  • SpywareBlaster prevents the installation of ActiveX-based malware, blocks cookies, and restricts the actions of "bad" sites. See tutorial here

  • MVPS HOSTS FILE replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements. It basically prevents your computer from connecting to those sites by redirecting the attempted connections to 127.0.0.1, which is the IP of your local computer. See guide here and for Windows Vista here
  • Download Host.zip and Save it to your Desktop.
  • Right-click hosts.zip and select 'Extract all files' or 'Extract files...'.
  • Follow the prompts and click 'Finish'.
  • This will open the newly created hosts folder on your Desktop.
  • Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated HOSTS file to the correct location on your machine.
  • Once updated you should see another prompt that the task was completed.


Follow this list and keep your antivirus program and antispyware programs updated and scan with them on a regular basis. By doing so, your potential for being infected again will reduce dramatically.

Hopefully this should take care of your problems! Good luck.

Do you have any questions or problems to ask? Please do not hesitate to do so.

**Please respond this one more time to ensure it is resolved and close this topic.


Proud Graduate of the WTT Classroom
Member of UNITE
The help you receive here is always free. If you wish to show your appreciation, then you may Posted Image
Posted Image

#73 RandalSon

RandalSon

    Authentic Member

  • Authentic Member
  • PipPip
  • 44 posts

Posted 03 January 2014 - 05:50 AM

OK, and Happy New Year!  Up early today.  Thanks again! R


Edited by RandalSon, 03 January 2014 - 05:59 AM.


#74 Conspire

Conspire

    SuperHelper

  • Classroom Teacher
  • 5,805 posts

Posted 03 January 2014 - 05:53 AM

Happy New Year to you too!

 

Take care, stay safe :)


Proud Graduate of the WTT Classroom
Member of UNITE
The help you receive here is always free. If you wish to show your appreciation, then you may Posted Image
Posted Image

#75 Conspire

Conspire

    SuperHelper

  • Classroom Teacher
  • 5,805 posts

Posted 05 January 2014 - 07:51 AM

Since this issue appears to be resolved ... this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatth...ed_t106388.html
and start a New Topic.
Proud Graduate of the WTT Classroom
Member of UNITE
The help you receive here is always free. If you wish to show your appreciation, then you may Posted Image
Posted Image

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users