Ndis.exe errors on start-up using Windows XP.

[shoesup]

In the process of booting my PC(Windows XP Home OS), I get an error message that says:

“Ndis.exe – Bad Image The application or dll … hha1.tmp is not a valid Windows image. Please check this against your installation diskette.” When I click “OK” at this window, I get another (and another) Ndis.exe window. Each window displays a different filename, such as: embB.tmp, RnbD.tmp and mnbF.tmp !!! When I close out all of these Ndis.exe – Bad Image windows, I get to my Windows XP log-in screen. After clicking my screen logon icon, I get still another Ndis.exe window that has the following filenames listed in separate windows: sta1.tmp, eva9.tmp, lwaD.tmp and nwaF.tmp !!!

Note that all of these files are in my: Local Settings/Temp folder, and they are all 172KB, TMP files.

What gives??? Is this a virus? If so, how can I get rid of this virus? How can I correct this problem once and for all??? Thank you.

[WhatsThisBoxFor?]

Have you tried a virus scan? Also have you tried an online one, such as the one at http://housecall.trendmicro.com ?

It could be a virus: http://uk.trendmicro-europe.com/ente...=WORM_SDBOT.VF

[ohop]

Originally Posted by G.W. Kremer In the process of booting my PC(Windows XP Home OS), I get an error message that says: “Ndis.exe – Bad Image The application or dll … hha1.tmp is not a valid Windows image. Please check this against your installation diskette.” When I click “OK” at this window, I get another (and another) Ndis.exe window. Each window displays a different filename, such as: embB.tmp, RnbD.tmp and mnbF.tmp !!! When I close out all of these Ndis.exe – Bad Image windows, I get to my Windows XP log-in screen. After clicking my screen logon icon, I get still another Ndis.exe window that has the following filenames listed in separate windows: sta1.tmp, eva9.tmp, lwaD.tmp and nwaF.tmp !!! Note that all of these files are in my: Local Settings/Temp folder, and they are all 172KB, TMP files. What gives??? Is this a virus? If so, how can I get rid of this virus? How can I correct this problem once and for all??? Thank you.

A friend of mine is having the same problem and I just found this info. I haven't tried it yet but here it is.
http://www.annoyances.org/exec/forum/win2000/1097096322

[rjfvillarosa]

It certainly sounds virus like, especially as all of the problematic files appear to be in your temporary internet files folder.

[glc]

No, that's not the temporary internet folder, that's the regular temp folder. Delete all the files in there in safe mode. You definitely need to run virus and spyware scans.

[rjfvillarosa]

Sorry my mistake, reading two threads at once. still looks like a virus or malware issue though.