Ron Ads NetupBanner Popups and Invalid Image file c:\windows\system32\nolomipu.dll



Here are some notes from a recent spyware cleanup. The system came in and there were complaints that “Ron Ads by NetupBanner” kept coming up all the time as well as popups claiming that the dll c:windowssystem32nolomipu.dll is not a valid windows image – mismn.exe bad image.

I ran malwarebytes antimalware and that cleaned out a LOT…

I installed the new version of AVG (8.0) – AVG 7.5 had been on the system (fairly up to date (within 2 days)) Webroot Spysweeper was installed, but the subscription was expired. Internet Explorer is the primary browser.

then I started looking at the invalid image errors – here are the notes:


ron ads netupbanner

lot’s of popup errors at boot:

lsass.exe – bad image

the application or dll c:windowssystem32nolomipu.dll is not a valid windows image. please check this against your installation diskette.

[ok]

services.exe same
avgrsx.exe
userinit.exe
explorer.exe
hpwuschd.exe
alcxmntr.exe
reader_sl.exe
jusched.exe
qttask.exe
hpcmpmgr.exe
kbd.exe
avgtray.exe
spysweeperui.exe
msmgs.exe
aro.exe
weather.exe
ctfmon.exe
wkcalrem.exe
hpqtra08.exe
osa9.exe
quickstart.exe
wkscal.exe
soffice.exe
soffice.bin

And then for each program that you try to open after that as well…. the programs open anyway.

In the registry – I found an entry for nolomipu.dll in the HKLMSoftwareMicrosoftWindows NTCurrentVersionWindows
hive at AppInit_DLLS there was c:windowssystem32nolomipu.dll,avgrsstx.dll

From that registry string value I removed nolomipu.dll, so that the value read c:windowssystem32avgrsstx.dll

At this point I ran combofix which deleted several pests including the nolomipu.dll file. Installed firefox and java update among other things. All seems to be clean I’m going to take one more look over things to verify.

Related Posts

Blog Traffic Exchange Related Posts
  • NTFS cloning Sometimes drives just go bad. Surprise. One recent fresh install of Windows XP had started having real stability problems. On running a chkdsk and looking at the event viewer, it was fairly clear that 16KB of bad sectors and the disk problems had likely been the problem (lots of disk......
  • Services.exe running at 100% CPU and using 100s of MB of memory - Windows XP SP3 I came across an interesting one in the last few days. This system was a Windows XP system with current updates - SP3, IE 8.... and among other things there was a complaint of very sluggish behavior. I updated the antimalware software installed and ran scans. Malware Bytes antimalware actually......
  • The security of remote tech support (ultravnc sc or x11vnc with wrapper script) Well, I've got a nice way of doing "easy" one click (or one cut and paste) light desktop support for windows or linux, one uses ultravnc sc, the other uses x11vnc with a special wrapper script. So, what security flaws are there in this process? Well, for starters, I see......
Blog Traffic Exchange Related Websites
  • Top Internet TV Software Creates Super Computer Internet Television System Within Five Minutes For Life! Whatever the factors are to cutting Cable tv or Satellite internet TV, there are selections out there that can be applied to deliver the following finest matter to paid TV. World-wide-web TV software program is one choice to look at and probably the missing link to assisting newbies get pleasure......
  • Experiencing Slow Pc Performance? It seems that many people today can no longer live without their personal computer. However, despite its extreme demand these days, many pc owners are experiencing slow pc performance. Don't despair because there are ways to improve the performance of your pc. Registry files found in your computer are vital.......
  • How to Do Home Window Installation Replacing and installing windows can seem like a daunting and expensive task, but it can actually be incredibly simple to do yourself. When you do your own home window installation, you’ll be greatly cutting down on the costs since most of the cost of having windows installed is the labor.......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site