C:\Windows\System32\Bridge.dll not found

Hey,

I have read the HOW TO? Read here about how to post your log!! topic and done what it said.

1.
Ad-Aware, the newest update, was run.
This way I removed this Bridge.dll, I believe.

2.
I have attached my HiJack log.

3.
This is my post.
Really looking forward for your assistance, hope you can help me

I am NOT experiencing any slow-ups. I found and removed the Bridge.dll with Ad-Aware during a normal scanning after spyware.
But then I rebooted and got this error message about Bridge.dll lacking, which I suppose is because my computer still wants to run it?

Appreciate your assistance

 

Hi eXeel,

It does not want to, but is told to do so, but luckily you removed it. Lets's remove the instructions to run it as well. (and some other cr@pware)

Check the items listed below in HijackThis, close all windows except HijackThis and click Fix checked:

R3 - URLSearchHook: (no name) - {0428FFC7-1931-45b7-95CB-3CBB919777E1} - (no file)
O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - (no file)

O4 - HKLM\..\Run: [updmgr] C:\Programmer\Common files\updmgr\updmgr.exe

O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load <= there it is
O4 - HKLM\..\Run: [Windows SA] C:\Program Files\WindowsSA\omniscient.exe
O4 - HKCU\..\Run: [LDM] C:\Programmes\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe

O16 - DPF: {FE1A240F-B247-4E06-A600-30E28F5AF3A0} - file://C:\install.cab

Then reboot into safe mode and delete:
C:\Program Files\WindowsSA <= entire folder
C:\Programmer\Common files\updmgr <= entire folder

Regards,

Pieter

 

Yeah, sure, but you just locked it So I couldn't post there anymore.
Here is my questionpost:

--

Hi friends ,

I have done what LowWaterrMark told me to and it seems to work Great.

I have before searched the net for ways of manually removing a virus like backdoor. somthing, that prevented Norton from running and slowing my comp down, but I have never come across this side.
Probably because spyware has not given me problems since I got Ad-Aware.

But I wonder...

1) Is this bridge.dll like an epidemic at the moment, a spyware but worse because it does this on startup?
Think I removed it by letting Ad-Aware do it on startup, before it ran the file. But what did it do?

2) How do you know what is good things and what is bad and should be deleted?
Is it because you remember each of them or are you looking for something specific?

I was checking the log and I know my computer better than you (Even though you might understand things better than me, hehe) and some of the things I found to NOT seem necessary.
These are the ones:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.wilderssecurity.com/showthread.php?t=15913
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net/ <--- Why this? I have the above, but I don't need two starting pages. Can I delete this? It is the other, the WS, that is my real start page.

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmes\Adobe Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll <-- What do I need this for? Only use Acrobat Reader rarely But this Help.dll, what use is it for?

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx <-- Toolbar Radio? Does not seem to be anything I need. Is it needed by other programs that are important?

O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE <-- And this? Helper.exe?

O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll <-- Huh? 10-15 of these, identical. What is it?

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28177.cab <-- Does not sound important or good to me?

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_42.cab <-- How about this?

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://housecall.trendmicro-europe.com/housecall/Xscan53.cab <-- Eeh? Important? What is .cab?

Hope you can help me out on this one.
I am interested in not only getting rid of these things that bug my computer but also understand them a little better

Hope someone have the time to explain each of these things.
I have attached my HijackThis log.
Hope you will spare some time and enlighten me ...

/Jamie Moeller

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.wilderssecurity.com/showthread.php?t=15913
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net/ <--- Why this? I have the above, but I don't need two starting pages. Can I delete this? It is the other, the WS, that is my real start page.
These can be deleted without problems

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmes\Adobe Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll <-- What do I need this for? Only use Acrobat Reader rarely But this Help.dll, what use is it for?
This is needed to open any PDF files in webpages. Keep it

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx <-- Toolbar Radio? Does not seem to be anything I need. Is it needed by other programs that are important?
An essential part of Internet Explorer. I don't know what happens if you fix it, and do not care to try.

O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE <-- And this? Helper.exe?
Part of the drivers for a Creative soundcard. Needed

O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll <-- Huh? 10-15 of these, identical. What is it?
Xfire messenger LSP driver. Needed for The instant messenger client used by gamers.DO NOT, under any circunstances try removing this with Hijack this. Doing so will completely wreck your internet connection, quite possibly beyond repair!

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binar...er.cab28177.cab <-- Does not sound important or good to me?

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/c...DC_1_0_0_42.cab <-- How about this?


O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://housecall.trendmicro-europe....all/Xscan53.cab <-- Eeh? Important? What is .cab?
Any O16 entry in a Hijack this log can be fixed with no ill effects. If needed by a website, a new copy will automatically be downloaded without your intervention. The .cab extension means that it is a CABinet file, a compressed archive possibly containing several files

 

Thanks, mate