SpywareGuard and Hijacked bridge.dll file

[Kerman]

Hello, guys.

I have been working on a machine that has Windows XP.
The owner had a bunch of junk on it and I am attempting
to clean it up for her. There are two or three issues:
1. I can't get rid of the lingering message when I
initially boot up about this SpywareGuard definitions
update is needed. There is no SpywareGuard control panel
and nothing is in Add/Remove programs for a uninstall.
2. So how my Bridge.dll and another .dll file got
hijacked. How can I restore them? Is there a utility
out there that resolve this matter.
3. I get a Error 25002 when attempting to reinstall
Norton anti-virus software. And now I am getting a
message saying install.msi is missing.

Please help me out of this mess.

With great appreciation,

Kerman

 

[PA Bear]

BRIDGE.DLL *is* hijackware!
http://www.pestpatrol.com/pestinfo/w/winfavorites_bridge.asp
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background.

Note the files identified and removed then find the corresponding page for
the file at your AV maker's online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup > More options > Delete all but the most rec
ent Restore Point.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

 

[S.Sengupta]

Hi,
It's a parasite, see:
http://www.pestpatrol.com/PestInfo/w/winfavorites_bridge.asp

regards,
ssg MS-MVP
pronetworks.org