simplewall.exe - Bad image

[cghub-io]

Thanks for the latest update.

Before v3.1 everything was fine, but now since the update to 3.1 I am getting randomly the dialog box across many different applications. So far the dialog box comes when I start my computer freshly and have following programs running in the background:

• OldNewExplorer v1.1.9
• Oracle VM VirtualBox v6.1.0 r135406
• teamviewer
  

I am worried now that simpleWall will start generating these popus on other 'dll' files of other programs.

simplewall.exe - Bad Image
C:\Windows\sysetm32\VBoxMRXNP.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system admin of the software vendor for support. Error status 0x0000428

[valefrox]

Already signalled: #605

[cghub-io]

oh. i see. I thought i was going crazy :) cheers

[JoeBarouneD]

I have the same with Oldnewexplorer.dll

[mssign]

Те же, только в профиль. JKL.dll вылетает от https://github.com/BladeMight/Mahou/releases

[RawSlugs]

same with bonjour\mdnsNSP.dll

[Serebriakov]

Same error with Bandicam:

[henrypp]

EN: Yes. This is Windows 10 feature named Mitigation and this option means modules without M$ signatures cannot be loaded into SW address space. Here is the solution to do not display Bad Image message:

RU: Да. В Windows 10 появилась такая опция которая защищает адресное пространство приложения от подгрузки в него посторонних (non-M$) модулей. Решение по отключению этого сообщения ниже.

Open PowerShell (as admin) and enter this code:

set-ProcessMitigation -Name simplewall.exe -Enable BottomUp,HighEntropy,DisableExtensionPoints,MicrosoftSignedOnly,BlockRemoteImageLoads,BlockLowLabelImageLoads

[ltguillaume]

Can you please tell us why simplewall would even load these modules when they don't even have to have any network access?

I saw this message relating to a DLL from PISMO File Mount, a suite that never makes any network connection.

[JoeBarouneD]

I wonder why it only began with the lastest release and not before.

Mitigation is not a new feature, so you have changed something related to it in the lastest version of SW.

Edit : Your PowerShell script doesn't prevent the "Bad image" popup.

[rudolphos]

powershell command didn't had any effect.

---

simplewall.exe - Bad Image

C:\PROGRA~1\MacType\MacType64.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support. Error status 0xc0000428.

Edit: now I removed the mactype program and simplewall isn't even starting and doesn't show up in the taskbar, reinstalled already.

[ltguillaume]

@henrypp Could you explain why you're loading all these modules into sw address space? Are you using any hooks? What changed between 3.1 en 3.0.9?

Is this because of 61b15df ?

[Iruberiam]

Since the recent update, Simplewall started showing "Bad image" to many already installed applications. Now I can't get the application window to show even after uninstallling and reinstalling. It's apparently installed but I can't configure it, Process Hacker shows it running as a suspended task.