{"id":3,"date":"2009-10-30T12:44:43","date_gmt":"2009-10-30T18:44:43","guid":{"rendered":"https:\/\/fixes.rebelcomputing.com\/?p=3"},"modified":"2009-10-30T13:06:37","modified_gmt":"2009-10-30T19:06:37","slug":"every-exe-file-generates-a-bad-image-error","status":"publish","type":"post","link":"https:\/\/fixes.rebelcomputing.com\/?p=3","title":{"rendered":"Every .exe file generates a “Bad Image” error"},"content":{"rendered":"

The error looks something like:<\/p>\n

program.exe – Bad Image
\nThe application<\/a> or DLL C::\\WINDOWS\\system32\\hakumano.dll is not a valid Windows Image<\/em><\/p>\n

The error message pops up while the computer is booting into windows and every single time you try to open an application. Every. Single. Time.<\/p>\n

You click “OK” whenever it comes and continue about your business. The error doesn’t seem to cause any issues it is just annoying that it pops up all the time.<\/p>\n

I came across this problem after I removed some malware from a customer’s computer. In this particular case, I used the free version of MalwareBytes Anti-Malware<\/a>. MalwareBytes successfully removed all of the malware but left a registry entry was left over that caused windows to attempt to load hakumano.dll <\/em>every time anything executable ran (including .com files).<\/p>\n

Solution:<\/strong><\/p>\n

    \n
  1. Click Start.<\/li>\n
  2. Choose Run.<\/li>\n
  3. Type regedit.exe<\/strong> and press enter.<\/li>\n
  4. Navigate to [HKEY_LOCAL_MACHINE\\software\\microsoft\\windows nt\\currentversion\\windows]<\/li>\n
  5. Right-click AppInit_DLLs<\/strong> and choose Modify<\/strong>.<\/li>\n
  6. Delete anything in the Value Data<\/strong> field and click OK<\/strong>.<\/li>\n
  7. Verify you can run a program without generating the error message.<\/li>\n
  8. Close the Registry Editor. Problem solved.<\/li>\n<\/ol>\n

    Alternate Solution <\/strong>(found at techsupportforum.com<\/a>):<\/p>\n

    Launch Notepad, (Start > Run, type in: notepad) copy and paste the text in blue below in it:(don’t forget to copy and paste REGEDIT4)<\/p>\n

    REGEDIT4
    \n[HKEY_LOCAL_MACHINE\\software\\microsoft\\windows nt\\currentversion\\windows]
    \n“AppInit_DLLs”=””<\/p><\/blockquote>\n

    Save this as fix.reg and change the “Save as type” to “All Files” and place it on your desktop. It should look like A REG FILE.<\/p>\n

    Double-click on it and when it asks you if you want to merge the contents to the registry, click “Yes” or “OK”. You should receive a message that it was successful. You may delete the file afterward.<\/p>\n","protected":false},"excerpt":{"rendered":"

    The error looks something like: program.exe – Bad Image The application or DLL C::\\WINDOWS\\system32\\hakumano.dll is not a valid Windows Image The error message pops up while the computer is booting into windows and every single time you try to open an application. Every. Single. Time. You click “OK” whenever it comes and continue about your […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,4,3],"tags":[],"class_list":["post-3","post","type-post","status-publish","format-standard","hentry","category-fixes","category-malware","category-windows"],"_links":{"self":[{"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=\/wp\/v2\/posts\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3"}],"version-history":[{"count":8,"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=\/wp\/v2\/posts\/3\/revisions"}],"predecessor-version":[{"id":13,"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=\/wp\/v2\/posts\/3\/revisions\/13"}],"wp:attachment":[{"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fixes.rebelcomputing.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}