fter i go to this Web Sit i have many virus he instal he want without permission ! its very Dangerou

F

Fraizer

hello all



- After i go to this F****** Web site http://www.appzplanet.com/ i have this
ViruS:


Under Kaspersky Anti-Virus 4.5.0.95 -> "TrojanDropper.Win32.Bridge" AND
Under The Cleaner Pro 4.1 build 4252 -> (ABetterInternet) Type: Browser
Hijacker
----------------------------------------------------------------------------
----------------------------------------------------------------------------
--
C:\Program Files\Internet Explorer\setup.exe



Under Kaspersky Anti-Virus 4.5.0.95 -> "TrojanSpy.Win32.e" AND Under The
Cleaner Pro 4.1 build 4252 -> (ABetterInternet) Type: Browser Hijacker
----------------------------------------------------------------------------
---------------------------------------------------------------------
C:\WINDOWS\system32\a.exe (in file proprieties i have this version : 1, 0,
0, 1)



Under Kaspersky Anti-Virus 4.5.0.95 -> "TrojanDownloader.Win32.Bridge" AND
Under The Cleaner Pro 4.1 build 4252 -> (ABetterInternet) Type: Browser
Hijacker
----------------------------------------------------------------------------
----------------------------------------------------------------------------
-----
C:\WINDOWS\system32\bridge.dll (in file proprieties i have this version :
1, 0, 0, 116 and description : bridge Module)


After i erase all this files



- And this web sit put me a file (ActiveX Controle) like this
{1000000000-1000-0000-1000-000000000000} in the Internet proprieties->
General -> Temoprary Internet Files After click on Config and click on
Display Object u have this window : C:\WINDOWS\Downloaded Program Files\ and
u see this file (ActiveX) {1000000000-1000-0000-1000-000000000000} withe
other normals Files like : Update Class; Shockwave Flash Obkect; Office
Update Installation Engine... he execute this : file://C:\Program
Files\Internet Explorer\setup.exe


- And i see he install me a program (i see in Add/uninstall Programs) the
name : "Bridge" (Maybe he install me another think :( )


- and he put me if i remeber (because i erase) a Rundll/bridge.dll or
somthink like this...


+ After i erase all this files i do a Scan with Ad-aware 6.0 and i have this
log file : (i earase all)

WINFAVORITES
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
obj[0]=RegKey : Bridge.brdg
obj[1]=RegKey : Bridge.brdg.1
obj[2]=RegKey : CLSID\{9C691A33-7DDA-4C2F-BE4C-C176083F35CF}
obj[3]=RegKey : TypeLib\{DDAF2479-6F00-4599-998A-3ED75686C6D0}
obj[4]=RegKey : Interface\{4FDBDBAD-FEFE-4C4C-9CC1-1181052AFB12}




PLEASE help me :( (i format all my computer and install again and i have the
same problem)

sorry if my english is poor. :(




PS: When i go to this link : http://www.appzplanet.com/ the first time he
open a porno popup AND another window but this time He Ask Me if i accept a
certificat if i remeber but i dont clik on Yes or No i just closed the
window... and i see i have this problem i clean all like this and after i
check my system because i dont undstand why.. i think its files after i run
it but no and now i try many think i go again in the web sit and I Have The
Same Problems.. Now i Knwo But in the Seconde Time when i go i have little
Difference ! -> He just open a porno popups But he Dont ask me for the
certificat... (if i closed the Certificat mean yes or what ??? what i do to
have again ask me for certificat ??). [I IDENTIFY THIS ITS FOR SHOKWAVE
PLAYER BECAUSE THIS F*** WEB SITE WANT THIS TO RUN A Bandau publicity...]


PS2: I dont know if for another web sit i have this same problems.. i afraid
to go :(


PS3: when i tell you this : """"(Maybe he install me another think :( )""" i
found this in Add/uninstall Programs ""Internet Explorer Q832894"" i dont
know if its official or not... but i go in windows update to chek if i
download this in my hitorical download and i see nothink when i search withe
this name "Q832894" in the window and i try to uninstall but he dont want he
tell "INF File Invalid" (in Add/uninstall Programs) (Note: i dont tell this
its not normal i just tell u all i see to help :( )


PS4: when i right this msg i see 7 critycals updates (3.6 mo..) in windows
update since this morning to know :) 7 since 12 Hours... buged xp OS tsss...


PS5: !! --> i just try with another computer with Windows XP pro Too and i
have exactly the same problem !!!!!!! he install me the same files same
registery etc... !!! all same !!! its the Web sit this Fu*** (sorry) web sit
! He Ask You Nothink ! He install without confirmation ! u have juste to go
to the web sit and he do all without you now !
 
F

Fraizer

after i apply the 7 patch of windows xp i think its ok now i try the same
web sit and i dont have a problem...

1st you go to http://www.appzplanet.com/... the main window open and he open
another window porno popup then you close the porno popup and when you close
the http://www.appzplanet.com/ he open a last windo popup i think this is
the page (the 3rd) send this activx and all this viruses...

but now this page is blank ! i dont know if its the result of the 7
microsoft page or just the 3rd page is down...

need confirmation
 
F

Frank Saunders, MS-MVP

Fraizer said:
after i apply the 7 patch of windows xp i think its ok now i try the
same web sit and i dont have a problem...

1st you go to http://www.appzplanet.com/... the main window open and
he open another window porno popup then you close the porno popup and
when you close the http://www.appzplanet.com/ he open a last windo
popup i think this is the page (the 3rd) send this activx and all
this viruses...

but now this page is blank ! i dont know if its the result of the 7
microsoft page or just the 3rd page is down...

need confirmation

First eliminate any scumware.
See
Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated with the program's update function
before every use, even when just downloaded. There's also a lot more to do
than just those two programs. CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.
If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top