Solved Teamviewer.exe - Bad Image Issue

[tanman]

Since I updated to Team Viewer 9 I have been having Bad Image messages on four files:

• api-ms-win-core-processthreads-l1-1-0.dll
• api-ms-win-core-memory-l1-1-0.dll
• api-ms-win-core-processenvironment-l1-1-0.dll
• api-ms-win-core-profile-l1-1-0.dll

Team Viewer still works ok.

As far as I'm aware I have no Malware, I've run Spybot, Super Anti-Spyware and Malwarebytes, all come up clean.

When I ran sfc /verifyonly these were the error results.
2014-02-11 16:26:27, Info CSI 0000011b [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:82{41}]"api-ms-win-core-processthreads-l1-1-0.dll" from store
2014-02-11 16:26:27, Info CSI 0000011d [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:66{33}]"api-ms-win-core-memory-l1-1-0.dll" from store
2014-02-11 16:26:27, Info CSI 0000011f [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:90{45}]"api-ms-win-core-processenvironment-l1-1-0.dll" from store
2014-02-11 16:26:27, Info CSI 00000121 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:68{34}]"api-ms-win-core-profile-l1-1-0.dll" from store
2014-02-11 16:27:38, Info CSI 0000019b [SR] Cannot repair member file [l:28{14}]"vpcvmm.sys.mui" of Microsoft-Windows-VirtualPC-VMM.Resources, Version = 7.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"es-ES", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:27:38, Info CSI 0000019d [SR] Cannot repair member file [l:28{14}]"vpcvmm.sys.mui" of Microsoft-Windows-VirtualPC-VMM.Resources, Version = 7.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"ja-JP", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:27:38, Info CSI 0000019f [SR] Cannot repair member file [l:28{14}]"vpcvmm.sys.mui" of Microsoft-Windows-VirtualPC-VMM.Resources, Version = 7.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"ja-JP", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:27:38, Info CSI 000001a0 [SR] This component was referenced by [l:178{89}]"Microsoft-Windows-VirtualPC-Package~31bf3856ad364e35~amd64~ja-JP~7.1.7601.17514.VirtualPC"
2014-02-11 16:27:38, Info CSI 000001a3 [SR] Could not reproject corrupted file [ml:520{260},l:74{37}]"\??\C:\Windows\System32\drivers\ja-JP"\[l:28{14}]"vpcvmm.sys.mui"; source file in store is also corrupted
2014-02-11 16:27:38, Info CSI 000001a5 [SR] Cannot repair member file [l:28{14}]"vpcvmm.sys.mui" of Microsoft-Windows-VirtualPC-VMM.Resources, Version = 7.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"es-ES", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:27:38, Info CSI 000001a6 [SR] This component was referenced by [l:178{89}]"Microsoft-Windows-VirtualPC-Package~31bf3856ad364e35~amd64~es-ES~7.1.7601.17514.VirtualPC"
2014-02-11 16:27:38, Info CSI 000001a9 [SR] Could not reproject corrupted file [ml:520{260},l:74{37}]"\??\C:\Windows\System32\drivers\es-ES"\[l:28{14}]"vpcvmm.sys.mui"; source file in store is also corrupted
2014-02-11 16:29:41, Info CSI 000002eb [SR] Cannot repair member file [l:82{41}]"api-ms-win-core-processthreads-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:29:41, Info CSI 000002ed [SR] Cannot repair member file [l:66{33}]"api-ms-win-core-memory-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:29:41, Info CSI 000002ef [SR] Cannot repair member file [l:90{45}]"api-ms-win-core-processenvironment-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:29:41, Info CSI 000002f1 [SR] Cannot repair member file [l:68{34}]"api-ms-win-core-profile-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:29:42, Info CSI 000002f9 [SR] Cannot repair member file [l:82{41}]"api-ms-win-core-processthreads-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:29:42, Info CSI 000002fa [SR] This component was referenced by [l:154{77}]"Package_2_for_KB2872339~31bf3856ad364e35~amd64~~6.1.1.1.2872339-9_neutral_GDR"
2014-02-11 16:29:42, Info CSI 000002fc [SR] Cannot repair member file [l:66{33}]"api-ms-win-core-memory-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:29:42, Info CSI 000002fd [SR] This component was referenced by [l:154{77}]"Package_2_for_KB2872339~31bf3856ad364e35~amd64~~6.1.1.1.2872339-9_neutral_GDR"
2014-02-11 16:29:42, Info CSI 000002ff [SR] Cannot repair member file [l:90{45}]"api-ms-win-core-processenvironment-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:29:42, Info CSI 00000300 [SR] This component was referenced by [l:154{77}]"Package_2_for_KB2872339~31bf3856ad364e35~amd64~~6.1.1.1.2872339-9_neutral_GDR"
2014-02-11 16:29:42, Info CSI 00000302 [SR] Cannot repair member file [l:68{34}]"api-ms-win-core-profile-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-02-11 16:29:42, Info CSI 00000303 [SR] This component was referenced by [l:154{77}]"Package_2_for_KB2872339~31bf3856ad364e35~amd64~~6.1.1.1.2872339-9_neutral_GDR"
2014-02-11 16:29:42, Info CSI 00000305 [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:82{41}]"api-ms-win-core-processthreads-l1-1-0.dll"; source file in store is also corrupted
2014-02-11 16:29:42, Info CSI 00000308 [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:66{33}]"api-ms-win-core-memory-l1-1-0.dll"; source file in store is also corrupted
2014-02-11 16:29:42, Info CSI 0000030b [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:90{45}]"api-ms-win-core-processenvironment-l1-1-0.dll"; source file in store is also corrupted
2014-02-11 16:29:42, Info CSI 0000030e [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:68{34}]"api-ms-win-core-profile-l1-1-0.dll"; source file in store is also corrupted

Any help appreciated.

All other programs run fine.
regards,
Anthony

 

[tanman]

Has anyone got thoughts on how to fix the CBS.log issues? I've tried copying files from Windows disc, but the problem still occurs and I have no idea of how to go about solving the vpcvmm.sys.mui issue.

Anthony

 

[NoelDP]

Please follow the Windows Update Posting Instructions and post all the requested data

 

[tanman]

Hi again Noel,

Please find attached CBS logs in zip file.

cheers,

Anthony

 

[NoelDP]

The SFC scan shows the following problems...

 Line 3693: 2014-02-13 13:17:41, Info                  CSI    00000363 [SR] Repairing 3 components
 Line 3694: 2014-02-13 13:17:41, Info                  CSI    00000364 [SR] Beginning Verify and Repair transaction
 Line 3697: 2014-02-13 13:17:41, Info                  CSI    00000366 [SR] Cannot repair member file [l:28{14}]"vpcvmm.sys.mui" of Microsoft-Windows-VirtualPC-VMM.Resources, Version = 7.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"ja-JP", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3700: 2014-02-13 13:17:41, Info                  CSI    00000368 [SR] Cannot repair member file [l:28{14}]"vpcvmm.sys.mui" of Microsoft-Windows-VirtualPC-VMM.Resources, Version = 7.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"es-ES", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3703: 2014-02-13 13:17:41, Info                  CSI    0000036a [SR] Cannot repair member file [l:82{41}]"api-ms-win-core-processthreads-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3706: 2014-02-13 13:17:41, Info                  CSI    0000036c [SR] Cannot repair member file [l:66{33}]"api-ms-win-core-memory-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3709: 2014-02-13 13:17:41, Info                  CSI    0000036e [SR] Cannot repair member file [l:90{45}]"api-ms-win-core-processenvironment-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3712: 2014-02-13 13:17:41, Info                  CSI    00000370 [SR] Cannot repair member file [l:68{34}]"api-ms-win-core-profile-l1-1-0.dll" of Microsoft-Windows-MinKernelApiNamespace, Version = 6.1.7601.18229, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

CheckSUR is clear.


I'll post a fix for the file errors later (or tomorrow) - they do appear to be simple file errors rather than more difficult registry problems.

 

[NoelDP]

I've uploaded a file - tmnaa.zip - to my SkyDrive at Noel's SkyDrive
Please download and save it.

Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.

Pick the option to use a Command Prompt
At the prompt type
DIR C:\tmnaa
hit the enter key - if you get a 'Not Found' error try
DIR D:\tmnaa
or
DIR E:\tmnaa



The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...



XCOPY <drive>:\tmnaa <drive>:\windows\winsxs /y /i /s /v /h



(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )



run the command (it should take almost no time) and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt

then reboot and upload the new CBS.log file to your reply

 

[tanman]

Hi Noel,

CBS. log attached. The error starting TeamViewer has gone...

cheers,

Anthony

 

[NoelDP]

Here's the summary from the SFC log...

 Line 5342: 2014-02-14 10:24:15, Info                  CSI    00000339 [SR] Repairing 1 components
 Line 5343: 2014-02-14 10:24:15, Info                  CSI    0000033a [SR] Beginning Verify and Repair transaction
 Line 5344: 2014-02-14 10:24:15, Info                  CSI    0000033b [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:82{41}]"api-ms-win-core-processthreads-l1-1-0.dll" from store
 Line 5354: 2014-02-14 10:24:15, Info                  CSI    0000033d [SR] Repair complete

- so all errors have now been corrected.

It sounds as if your problem has also gone away?

 

[tanman]

Thanks Noël excellent service.

 

[NoelDP]

We try

Good luck!

 

[caserones]

Hello NoelDP

I have the same problem with TeamViewer 9
NoelDP you could give me please provide the file "tmnaa.zip".

Thank you Caserones

 

[NoelDP]

Start a NEW thread of your own, and post your own details there - the fix you attempted to download was constructed ONLY for the original poster, and would almost certainly not work for you.

 

[caserones]

[FONT=&quot]When I updated to TeamViewer 8 oder 9 i have been having Bad Image messages on ten files:[/FONT]

api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-heap-l1-1-0.dll
api-ms-win-core-misc-l1-1-0.dll
api-ms-win-core-file-l1-1-0.dll
api-ms-win-core-localization-l1-1-0.dll
api-ms-win-core-libraryloader-l1-1-0.dll
api-ms-win-core-memory-l1-1-0.dll
api-ms-win-core-io-l1-1-0.dll
api-ms-win-core-localregistry-l1-1-0.dll
api-ms-win-core-interlocked-l1-1-0.dll

The error that the same as by "Tanman" ...

Fixed by
Update for Windows 7 (KB2533623)
Update is available for 32 and 64 bit systems.

Fixed bug

Caserones