I keep getting bad Image errors -DLL

[derekbootle]

Hi I keep getting this message:

The application or DLL globalroot\systemroot\system32\hjgruidndyxsoy.dll is
not a valid Windows image. Please check against your installation diskette.

I've run a search for globalroot and hjgruidndzsoy.dll and found nothing. I
went searching through %systemroot% and system32 and couldnt find
hjgruidyxsoy.dll

Is there any way to get rid of it?

 

[Leonard Grey]

Your computer is infected with malware,

-or-

Your computer was infected with malware and your anti-malware software
did not completely remove it.

 

[derekbootle]

I did have 1 or 2 viruses and used webroot antivirus with antispyware to get
rid of them. Should I buy another program or is there a way to fix this
myself?

 

[nass]

Hi I keep getting this message:

The application or DLL globalroot\systemroot\system32\hjgruidndyxsoy.dll is
not a valid Windows image. Please check against your installation diskette.

I've run a search for globalroot and hjgruidndzsoy.dll and found nothing. I
went searching through %systemroot% and system32 and couldnt find
hjgruidyxsoy.dll

Is there any way to get rid of it?

Your Anti-virus may be removed the viral infection but still in the Root
system and on the Registry. Please perform the cleaning steps to make sure
nothing lurking in the background trying to revive the infestation back to
action!.

Unexplained computer behaviour may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a thorough scan by doing the following steps:

Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
And remove the entry from here:

Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =
look in
the right pane/window and remove the entry for it
"C:\Windows\System32\\hjgruidndyxsoy.dll"
"C:\Windows\System32\ hjgruidndzsoy.dll"

Run Disk Clean up on your machine.
HTH
nass

 

[derekbootle]

Hi,

It didnt work. I tried everything you wrote line by line and it didnt work.
Im at a loss.
Thank you for the help. I may have to put a crowbar into my wallet and take
it to Geeksquad.

Derek

Hi I keep getting this message:

The application or DLL globalroot\systemroot\system32\hjgruidndyxsoy.dll is
not a valid Windows image. Please check against your installation diskette.

I've run a search for globalroot and hjgruidndzsoy.dll and found nothing. I
went searching through %systemroot% and system32 and couldnt find
hjgruidyxsoy.dll

Is there any way to get rid of it?

Your Anti-virus may be removed the viral infection but still in the Root
system and on the Registry. Please perform the cleaning steps to make sure
nothing lurking in the background trying to revive the infestation back to
action!.

Unexplained computer behaviour may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a thorough scan by doing the following steps:

Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
And remove the entry from here:

Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =
look in
the right pane/window and remove the entry for it
"C:\Windows\System32\\hjgruidndyxsoy.dll"
"C:\Windows\System32\ hjgruidndzsoy.dll"

Run Disk Clean up on your machine.
HTH
nass

 

[nass]

Hi,

It didnt work. I tried everything you wrote line by line and it didnt work.
Im at a loss.
Thank you for the help. I may have to put a crowbar into my wallet and take
it to Geeksquad.

Derek

"nass" wrote:

If you wish you can contact me with your hijackthis log. If not take it to
Geeksquad or send your log to one of many hijackthis forums on the net.
Download the Hijackthis and send the report to one of
many forums for analysis and troubleshooting or you can send it to me on my
email provided at the bottom:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)

Can you please send me a copy at (e-mail address removed) ,
remove the obvious to email me, note ( _ it is underscore not - ).

HTH,
nass

 

[derekbootle]

Errors fixed.
I decided to use windows live one care as a support to my anti spyware so
instead of using the free download I got the 90 day free subscription. It did
a scan, told me 3 new items which needed to be fixed, erased an old file
holding quarantined items and rebooted. When it rebooted the errors that
usually pop up were gone.

I don't know if I'm still infected but I'm not affected which makes me
happier.

Thank you for all your help Nass, I couldn't have done this without you.

 

[nass]

Glad to help Derekbootle and you are welcome. If you want to make sure the
system clean please send me your hiajckthis log or send it to one of many
forums on the net.
Goood luck..
nass