Spyware Warrior

bobbob10 · Posted: Wed Mar 17, 2004 6:36 pm Post subject: virus in windows

I have just done an update on avg(free v) and run a full test on my computer
it found a few new virus's , one of which was a windows file.

Now everytime i boot my computer up i get this message,
***************************************************
error loading D:\WINDOWS\System32\bridge.dl

the specified module could not be found
*******************************************************

I still have the file in the virus vault!!!

What should i do, any help would be much appreciated.

wawadave · Posted: Wed Mar 17, 2004 8:14 pm Post subject:

avg is known for have faulse positive findings.not sure if this is one. avg had a restore function not used it in over a year. so would be worth doing a google on the quaretined file. if it comes up showing its a reguare file and not a viruse restore it from virus vault.
and do online scan at panda or housecall anti virus.
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

Nick · Posted: Wed Mar 17, 2004 9:34 pm Post subject:

I'm going to asume that the file is bridge.dll with 2 l's. If so, then it's a valid file.

Perhaps it got corrupted or for some other reason AVG flagged it. Try getting a new one from here: http://www.dll-files.com/dllindex/dll-files.shtml?bridge

Download that and put it in your Windows\System32 folder. That should take care of the error message.

Taking an online scan to get a second opinion like wawadave said is also a good idea.

Here are links to some:

http://housecall.trendmicro.com/

http://www3.ca.com/virusinfo/virusscan.aspx
_________________
Nick's Security Ticker

bobbob10 · Posted: Thu Mar 18, 2004 2:36 am Post subject:

yes it is a .dll file,

I also tryed downloading a new file from this link

http://www.dll-files.com/dllindex/dll-files.shtml?bridge

But all it gave me was a couple of text files!? (don't think they have one)

About to do a online scan now.

wawadave · Posted: Thu Mar 18, 2004 7:50 am Post subject:

acording to the text fill in that d/l it says this dll is spyware and shows how to get rid of it. nick have a read.
############################################################################

### Included is all the information you need to get rid of the problem ###

############################################################################

The following text comes from :
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html

Adware.WinFavorites is an adware program that may have two components: an executable file and a Browser Helper Object.

When Adware.WinFavorites is executed, it does the following:

Attempts to insert the files:

bridge.dll
bridge.inf

Creates the following registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\
Browser Helper Objects\{9C691A33-7DDA-4C2F-BE4C-C176083F35CF}

Adds the value:

"Systray"="<the full path of the adware program>"

to the registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

so that the adware runs when you start Windows.

Creates a registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\bridge

Attempts to download files from www.flingstone.com.

########################

The following text comes from:
http://www.kephyr.com/spywarescanner/library/winfavorites/index.phtml

# Manual removal
Please follow the instructions below if you would like to remove WinFavorites manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If Bazooka still detects WinFavorites after stepping through the removal instructions, please double-check by stepping through them again.
Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
In the right pane, delete the value called 'WinFavorites', if it exists.
Exit the registry editor.
Restart your computer.
Start Windows Explorer and delete:
%ProgramsDir%\winfavorites\
Note: %ProgramsDir% is a variable (?). By default, this is C:\Program Files.

#######################

Other websites if you need more help:

http://www.pestpatrol.com/PestInfo/w/winfavorites.asp
http://www.computercops.biz/modules.php?name=Forums&file=viewtopic&p=64582
http://www.faqfarm.com/Computer/Virus/9324

_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

bobbob10 · Posted: Thu Mar 18, 2004 5:20 pm Post subject: Help

I couldn't find :winfavorites:anywhere, and i still have a prob

Anymore suggestions. Evil or Very Mad

wawadave · Posted: Thu Mar 18, 2004 5:36 pm Post subject:

hello
you could try d/ling spybot search and destroy,update it run it. d/l ad-ware do the same.
there both free.any that come up on google of these that are not free are fakes.
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

cpm · Posted: Sun Mar 21, 2004 3:15 pm Post subject:

have a look in add/remove programs for/and remove flingstone bridge and then delete from
D:\WINDOWS\System32\bridge.dll

Very Happy