"Bad Image" thing.

[s.rwitt]

So I've got a big problem here. I just got a new motherboard and have had tons of problems since. The latest one is some kind of "bad image" error that pops up whenever I try to open my Norton Security Center and recently when trying to patch Fallout3. This is the message word for word (it's the same message for in both cases):

Quote:
C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_no ne_508ed732bcbc0e5a\MSVCP90.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.

Also, I'm running Windows 7 Ultimate. This is my HighJackThis log file:

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 9:10:24 PM, on 3/22/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\Six Engine\SixEngine.exe
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files\ASUS\TurboV\TurboV.exe
C:\Program Files\ASUS\Turbo Key\TurboKey.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Download Manager\DLM.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.1.0.19\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.1.0.19\IPSBHO.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.1.0.19\coIEPlg.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [TurboV] "C:\Program Files\ASUS\TurboV\TurboV.exe"
O4 - HKLM\..\Run: [Turbo Key] "C:\Program Files\ASUS\Turbo Key\TurboKey.exe"
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [igndlm.exe] C:\Program Files\Download Manager\DLM.exe /windowsstart /startifwork
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O13 - Gopher Prefix:
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/ca...2.3.10.115.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
O23 - Service: DeviceVM Meta Data Export Service (DvmMDES) - DeviceVM - C:\ASUS.SYS\config\DVMExportService.exe
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\17.5.0.127\ccSvcHst.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe

--
End of file - 5094 bytes

I'm also getting random crashes. Any ideas?

[mrmouth]

New to me, unfortunately. A little searching comes back with some results of people having similar issues. General consensus is that your system files got corrupted somehow.

The sfc /scannow command, scans all protected system files and replaces incorrect versions with correct Microsoft versions.

You can follow this tutorial.

Give us some background, though. Who did the replacement/upgrade?

[s.rwitt]

My family's computer guy did it, he's the same one that built the computer a few years ago. I'm at school right now but I'll follow your tutorial as soon as I get home in about an hour and a half.

Thanks for the response!

[Freddie]

When you installed your new motherboard did do anything else like format the hard drive, installing the latest chipset drivers?

[s.rwitt]

I'm not sure what he did, but when I got it I used Windows update to get the latest drivers and I'm pretty sure he reformatted the hard drive. All my **** that was on here is gone.

@Barnaby:

I did the scan, and it said the following:

Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example

C:\Windows\Logs\CBS\CBS.log

Which is ancient greek to me.

[mrmouth]

It will almost always find files that is sees as corrupt. If I did it on my PC, which isnt giving me any issues, it would likely still come back with something.

Good chance that the log wont make much sense either, but you can try and read/post what it says here.

Tutorial

How is the PC behaving now, though?

I mean my initial thought was the same as Freddie's. tI might behoove you to talk to this guy and ask him just what he did. Sounds like he did a reformat. Did you buy Win7? Did he simply 'have a copy'? Did he install chipset (motherboard) drivers?

[s.rwitt]

I mean my initial thought was the same as Freddie's. tI might behoove you to talk to this guy and ask him just what he did. Sounds like he did a reformat. Did you buy Win7? Did he simply 'have a copy'? Did he install chipset (motherboard) drivers?

I'll ask him when I talk to him. I've been trying to get him on the phone for three days.

I already had Win7 (that I bought) on it before I gave it to him, but he didn't have my product key so he installed his version and when I got it back I switched the key from his to mine.

How is the PC behaving now, though?

Everything's normal except for the fact that it crashes (usually during games but not always) sometimes it'll be after 8 or more hours and at other times it'll be 4 times within 20 minutes.

Oh, and I get that same exact message whenever I try to open my Norton Security Center, patch Fallout3, and recently when I tried to install ETW.

[mrmouth]

So nothing changed after sfc /scannow? I would tale to him beforehand, but if it were me, I would simply reinstall Win7. Or you could try Win7 startup repair using your disc. I believe it is more comprehensive than sfc.

[s.rwitt]

Nope, nothing changed. I haven't tried reinstalling Windows, will I have to re-install my drivers afterwards? I'm not sure how to do that besides using windows update.

[martyr]

use a program like cpu-z or everest to get a list of all the hardware in your computer, download drivers onto a usb stick and then install them when you have reinstalled windows

[s.rwitt]

Well, I've reinstalled Win7 using my own copy. I put Norton back on and updated it to 2010 version which is compatible with Win7 and SO FAR everything seems fixed. I'll update after I put some games on here.

Also, it was really strange, while I was reinstalling windows I had to sit here and constantly close that box with the message in it. It was like it was trying to prevent me from reinstalling the OS...

Couple other questions:

1. Do I need to delete my windows.old folder to get more space? If so, how do I do it?

2. It says I've only got 113 GB out of 465 GB free on my C: drive where before I reinstalled windows I had something like 170 out of 465 GB free. How do I find and delete the unneeded files?

[martyr]

run disk cleanup.

[s.rwitt]

Is that that "defrag" thing?

Edit: Nevermind, I see it. What's the difference between it and the defrag?

[s.rwitt]

Holy crap 275 GB worth of previous windows installations...

[s.rwitt]

Well, it appears fixed, I guess this can be closed. Thanks guys.

I'm still getting random crashes though...