PDA

Click to See Complete Forum and Search --> : "Bad Image" recurring error...bogus file?

josh0678
July 12th, 2004, 01:58 AM
I'm not quite sure how to describe this problem because the file name that it gives is different every time but here is a screen cap of the last one I received.
http://members.cox.net/biggjosh/error.jpg
I have received this error several times. When I go into the Startup area in msconfig there is a boot file named after the file error(rasauto762r.exe in this case). I uncheck that one and reboot and another random file name pops up in the error. I don't know what the first.awp is or could be. I've scanned for virus's using PC-Cillin but it does not find anything.
Does anyone have a clue what this could be? It sounds very shady to me and I'd like to clean it up.
Also when I run Security Task Manager a file named wzcsapi734.dll pops up. When I do a search for it it does not show up anywhere. There have been other files like this with seemingly random names and numbers at the end. Does anyone know what any of this stuff is? Any help would be appreciated. Thanks
Josh
Archer
July 12th, 2004, 03:00 AM
Hi josh0678 welcome to Windrivers
Run Trend micro on line antivirus scan (http://housecall.trendmicro.com/) then install,update and run Spybot Search and Destroy (http://www.safer-networking.org/en/download/index.html) if you still have the problem post back once more.

Does your system have an up to date antivirus and firewall?
josh0678
July 12th, 2004, 03:10 AM
I have trend micro's pc-cillin installed and running all the time and I am behind a linksys router. I check for updates at least once a week for pc-cillin.
I'll download Spybot now before I hit the hay and I'll run it tomorrow morning.
Archer
July 12th, 2004, 03:17 AM
the reason I suggest an on line scan is that your AV can become compromised under some circumstances and is a belts and braces approach.
NooNoo
July 12th, 2004, 04:07 AM
more information about combatting spyware here (http://forums.windrivers.com/showthread.php?t=57348)
first.awp may be part of this (http://akimbot.nuclearbox.com/about.html)
josh0678
July 12th, 2004, 02:55 PM
Ok I rant he internet scanner and it didnt find anything. Then I ran spybot and it found a "DOS Exploit" in registry settings. I had it clean that up then I re-ran it to double check and it found it again.
Here's the spybot screen with what it found http://members.cox.net/biggjosh/dso.jpg
NooNoo
July 13th, 2004, 08:16 AM
Ok I rant he internet scanner and it didnt find anything. Then I ran spybot and it found a "DOS Exploit" in registry settings. I had it clean that up then I re-ran it to double check and it found it again.
Here's the spybot screen with what it found http://members.cox.net/biggjosh/dso.jpg
Josh this is a known problem with spybot. It is not sorting out the registry entries correctly. IF you have done all the windows updates, then you can ignore this. If not then you can alter the registry yourself

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\0]
Change the value of "1004" (DWORD) to 3.
josh0678
July 13th, 2004, 01:57 PM
ahh ok thanks for telling me. I have kept up to date w/the windows update so it should be fine then.