C:\Windows\System32\Bridge.dll not found

Discussion in 'adware, spyware & hijack cleaning' started by eXeel, Jun 29, 2004.

Thread Status:
Not open for further replies.
  1. eXeel

    eXeel Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    4
    Hey,

    I have read the HOW TO? Read here about how to post your log!! topic and done what it said.

    1.
    Ad-Aware, the newest update, was run.
    This way I removed this Bridge.dll, I believe.

    2.
    I have attached my HiJack log.

    3.
    This is my post.
    Really looking forward for your assistance, hope you can help me :)

    I am NOT experiencing any slow-ups. I found and removed the Bridge.dll with Ad-Aware during a normal scanning after spyware.
    But then I rebooted and got this error message about Bridge.dll lacking, which I suppose is because my computer still wants to run it?

    Appreciate your assistance :)
     

    Attached Files:

  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    Hi eXeel,

    It does not want to, but is told to do so, but luckily you removed it. Lets's remove the instructions to run it as well. (and some other cr@pware)

    Check the items listed below in HijackThis, close all windows except HijackThis and click Fix checked:

    R3 - URLSearchHook: (no name) - {0428FFC7-1931-45b7-95CB-3CBB919777E1} - (no file)
    O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - (no file)

    O4 - HKLM\..\Run: [updmgr] C:\Programmer\Common files\updmgr\updmgr.exe

    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE

    O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load <= there it is
    O4 - HKLM\..\Run: [Windows SA] C:\Program Files\WindowsSA\omniscient.exe
    O4 - HKCU\..\Run: [LDM] C:\Programmes\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe

    O16 - DPF: {FE1A240F-B247-4E06-A600-30E28F5AF3A0} - file://C:\install.cab

    Then reboot into safe mode and delete:
    C:\Program Files\WindowsSA <= entire folder
    C:\Programmer\Common files\updmgr <= entire folder

    Regards,

    Pieter
     
  3. eXeel

    eXeel Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    4
    Yeah, sure, but you just locked it :) So I couldn't post there anymore.
    Here is my questionpost:

    --

    Hi friends :) ,

    I have done what LowWaterrMark told me to and it seems to work :) Great.

    I have before searched the net for ways of manually removing a virus like backdoor. somthing, that prevented Norton from running and slowing my comp down, but I have never come across this side.
    Probably because spyware has not given me problems since I got Ad-Aware.

    But I wonder...

    1) Is this bridge.dll like an epidemic at the moment, a spyware but worse because it does this on startup?
    Think I removed it by letting Ad-Aware do it on startup, before it ran the file. But what did it do?

    2) How do you know what is good things and what is bad and should be deleted?
    Is it because you remember each of them or are you looking for something specific?

    I was checking the log and I know my computer better than you (Even though you might understand things better than me, hehe) and some of the things I found to NOT seem necessary.
    These are the ones:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.wilderssecurity.com/showthread.php?t=15913
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net/ <--- Why this? I have the above, but I don't need two starting pages. Can I delete this? It is the other, the WS, that is my real start page.

    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmes\Adobe Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll <-- What do I need this for? Only use Acrobat Reader rarely :) But this Help.dll, what use is it for?

    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx <-- Toolbar Radio? Does not seem to be anything I need. Is it needed by other programs that are important?

    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE <-- And this? Helper.exe?

    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll <-- Huh? 10-15 of these, identical. What is it?

    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28177.cab <-- Does not sound important or good to me?

    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_42.cab <-- How about this?

    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://housecall.trendmicro-europe.com/housecall/Xscan53.cab <-- Eeh? Important? What is .cab?

    Hope you can help me out on this one.
    I am interested in not only getting rid of these things that bug my computer but also understand them a little better :)

    Hope someone have the time to explain each of these things.
    I have attached my HijackThis log.
    Hope you will spare some time and enlighten me :) ...

    /Jamie Moeller
     
  4. dave38

    dave38 Spyware Expert

    Joined:
    Feb 26, 2004
    Posts:
    377
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.wilderssecurity.com/showthread.php?t=15913
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net/ <--- Why this? I have the above, but I don't need two starting pages. Can I delete this? It is the other, the WS, that is my real start page.
    These can be deleted without problems

    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmes\Adobe Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll <-- What do I need this for? Only use Acrobat Reader rarely But this Help.dll, what use is it for?
    This is needed to open any PDF files in webpages. Keep it

    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx <-- Toolbar Radio? Does not seem to be anything I need. Is it needed by other programs that are important?
    An essential part of Internet Explorer. I don't know what happens if you fix it, and do not care to try.

    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE <-- And this? Helper.exe?
    Part of the drivers for a Creative soundcard. Needed

    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll <-- Huh? 10-15 of these, identical. What is it?
    Xfire messenger LSP driver. Needed for The instant messenger client used by gamers.DO NOT, under any circunstances try removing this with Hijack this. Doing so will completely wreck your internet connection, quite possibly beyond repair!

    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binar...er.cab28177.cab <-- Does not sound important or good to me?

    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/c...DC_1_0_0_42.cab <-- How about this?


    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://housecall.trendmicro-europe....all/Xscan53.cab <-- Eeh? Important? What is .cab?
    Any O16 entry in a Hijack this log can be fixed with no ill effects. If needed by a website, a new copy will automatically be downloaded without your intervention. The .cab extension means that it is a CABinet file, a compressed archive possibly containing several files
     
  5. eXeel

    eXeel Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    4
    Thanks, mate :)
     
Thread Status:
Not open for further replies.