WINNT\System32\bridge.dll

  • Thread starter Thread starter ConnieB
  • Start date Start date
C

ConnieB

I'm getting a message from McAfee stating that this file
has the Keylog-Briss virus. It's asking me to delete
this file as it can't be cleaned. What's going to
happen? Do I need access to my XP disk to copy a new
file? Just want to be sure before I say yes to delete.
 
It is likely you have some spyware that should be removed.
"Bridge.dll" is not a Windows XP file....it is a known "spyware"
file.

Bazooka Adware and Spyware Scanner 1.12
http://download.com.com/3000-2144-10247783.html

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------------


| I'm getting a message from McAfee stating that this file
| has the Keylog-Briss virus. It's asking me to delete
| this file as it can't be cleaned. What's going to
| happen? Do I need access to my XP disk to copy a new
| file? Just want to be sure before I say yes to delete.
 
Feel free to delete it and you should install and run
some sort of spy ware program like AdAware or Spybot.
 
This is a keylogger trojan virus. I have had the same problem with
one of my outside users on a coorporate network. You will need to
manually remove it due to it embedding itself in many locations.

Look inside your temp directory on WinXP for that user profile, you
will see that it changes names and stores the encrypted keylogged
information in a text file with a .ini extension (sometimes .inf).
You will also see. cab file or .zip files related to it. From there
you will need to remove it from the registry and the system32 dir.

It establishes a connection with an outside remote computer to
transfer everything logged. YES, THIS MEANS ANYTHING YOU HAVE TYPED
ON YOUR COMPUTER INCLUDING PASSWORDS AND USERNAMES OR BANKING INFO.

I have been able to trace this back to a computer in Canada but I am
not sure if the ISP will help due to international laws. This is the
IP Address that is establishing the connection 24.226.231.100. If
anyone knows more about this, please share some info. Thanks.
 
Back
Top