 |  |  |  |  |  |  |  |
rougewolf: (Another) What is BRIDGE.DLL question
 |
•
•
•
•
Originally Posted by caperjack
The file is spyware releated ,download the spyware programs at the bottom of my post and update them and run them ,do not remove anything with hijsckthis ,copy andLogfile of HijackThis v1.97.7
Scan saved at 3:52:49 PM, on 5/7/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Intuit\QuickBooks\Components\QBAgent\qbdagent2002.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\HPGS2WNF.EXE
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\James Dearing\Local Settings\Temp\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/flash/index.cfm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DFA65DCF-E827-0185-C05C-AD3B3F951CE1} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1601.0\en-us\msntb.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [QD FastAndSafe] C:\PROGRA~1\NORTON~1\NORTON~2\QDCSFS.exe /scheduler
O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load
O4 - HKLM\..\Run: [fash] C:\WINDOWS\fash.exe
O4 - HKLM\..\Run: [PCDRealtime] C:\WINDOWS\realtime.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\SYSTEM32\E_SRCV02.EXE
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks\Components\QBAgent\qbdagent2002.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: PartyPoker.com (HKLM)
O9 - Extra 'Tools' menuitem: PartyPoker.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: Ali Baba Slots TM by pogo - http://temp36.pogo.com/applet/slots/...-ob-assets.cab
O16 - DPF: Hammerhead Pool by pogo.com - http://pool29.pogo.com/applet/pool/pool-ob-assets.cab
O16 - DPF: Payday FreeCell by pogo.com - http://freecell.pogo.com/applet/free...-ob-assets.cab
O16 - DPF: Poppit TM by pogo - http://poppit04.pogo.com/applet/popp...-ob-assets.cab
O16 - DPF: Win32 Classes -
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com.../c381/chat.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/game...s/y/potc_x.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/downlo...22/wmv9VCM.CAB
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
paste the log in here ,
•
•
Join Date: Aug 2003
Posts: 9,566
Reputation: 
Solved Threads: 493
its spyware releated ,it's a dll file put on you computer by a virus or trojan and you will get the misiing dll error if you us sptbot or ad-aware ,they remove it but not all of the references to it in you registry Run command ,hence the error .the registry looking for the dll !1 or something like that! What it actually does is beond me.
O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load
O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load
Linux boot cd http://www.knopper.net/knoppix/index-en.html
links to Free MS software and online services
http://lexusbluetooth.letstalk.com/p...iew=1&model=LS
links to Free MS software and online services
http://lexusbluetooth.letstalk.com/p...iew=1&model=LS
•
•
Join Date: Feb 2002
Posts: 626
Reputation:
Solved Threads: 13
Practically a Master Poster
What a mess my god man. Reformat!!!!!
Jimmy
E-Mail - jimmy@fiberops.net
Chief Information Officer (CIO) of FiberOps
E-Mail - jimmy@fiberops.net
Chief Information Officer (CIO) of FiberOps
•
•
Join Date: Aug 2003
Posts: 9,566
Reputation:
Solved Threads: 493
•
•
•
•
Originally Posted by MAD_DOG
What a mess my god man. Reformat!!!!!
LOL Linux boot cd http://www.knopper.net/knoppix/index-en.html
links to Free MS software and online services
http://lexusbluetooth.letstalk.com/p...iew=1&model=LS
links to Free MS software and online services
http://lexusbluetooth.letstalk.com/p...iew=1&model=LS
•
•
Join Date: Feb 2002
Posts: 626
Reputation:
Solved Threads: 13
Practically a Master Poster
I know but it was still out of control and messy. Just thought I throw that in haha.
Jimmy
E-Mail - jimmy@fiberops.net
Chief Information Officer (CIO) of FiberOps
E-Mail - jimmy@fiberops.net
Chief Information Officer (CIO) of FiberOps
•
•
Join Date: Aug 2003
Posts: 9,566
Reputation:
Solved Threads: 493
your up too early ,yeah we clean him up good ,got him to format LOL
Linux boot cd http://www.knopper.net/knoppix/index-en.html
links to Free MS software and online services
http://lexusbluetooth.letstalk.com/p...iew=1&model=LS
links to Free MS software and online services
http://lexusbluetooth.letstalk.com/p...iew=1&model=LS
•
•
Join Date: Feb 2002
Posts: 626
Reputation:
Solved Threads: 13
Practically a Master Poster
Yeah I went to bed at 10PM hoping I would be up at 7AM for work but, woke up 1AM. Now I am on here going through like 500 new posts and trying to answer easy questions because too lazy to type right now. That's my two cents.
Jimmy
E-Mail - jimmy@fiberops.net
Chief Information Officer (CIO) of FiberOps
E-Mail - jimmy@fiberops.net
Chief Information Officer (CIO) of FiberOps
|
Similar Threads
- Error Message on Start-up... RUNDLL: Error loading C:\windows\system 32\bridge.dll (Viruses, Spyware and other Nasties)
- error message on startup: bridge.dll missing (hijackthis log inside) (Viruses, Spyware and other Nasties)
- What is BRIDGE.DLL (Viruses, Spyware and other Nasties)
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: Stu's Hijackthis log file.
- Next Thread: Blaster Worm, I think, cannot remove!
| Thread Tools | Search this Thread |
You need to join our community in order to build your list of favorite forums. You can visit the forum index for a listing of all forums.
Related Forum Features
Latest Viruses, Spyware and other Nasties Posts
adware anti-malware anti-virussitesaccessissue antivirus apple attack avg backtoschoolspeech bar blackhat botnet botnets censorship china commercial commercials conficker connect control crosssitescripting cyber cybercrime cyberwarfare ddos domains e-mafia education email europe exam exploit fake fancheckvirus gaming gtaiv gumblar halloween herss.exe hijack hosting internet iphone kaspersky legal mail malware mcafee mega-d messagelabs microsoft mobile msn nazi news obama onlinethreats paedophile parents patch phishing police policeprovirusmba-mblockedinternetaccess president pro problem redirect reliability report research risk rogueantivirus samhain sans school search security seopoisoning sites software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec system teen translate trojan unabletoaccessanti-virussites unwanted update usa virus viruses vista war windows worm yahoo zeroday
