I too have the bridge virus. I can't remove bridge from Add/Remove program. I've a window 98 system. It seems that I have removed bridge.dll with Ad-Aware, but bridge is still there. Searching for bridge.dll and bridge.exe in Regedit now ...... chilo

0

Dear Desperatly, I too have had to deal with this ugly virus. No virus scanner seems to contain it, but low and behold I think I might have just figured out how to beat it at its own game. One go here and download this program, it is free. (though one does cost). www.webroot.com when you get there download this program called Spy Sweeper. This will find and get rid of the Bridge.exe. But you will have to reboot your computer and rerun it a second time for it to succeed. Now you also need to go to start, run and key in the word regedit, hit ok and up will come your regedit. This is NOT A TOY and not for the faint of heart. You will go to view and down to find and key in the word bridge.exe it might take it a while but it will find it. You should delete all entries on the RIGHT SIDE of the double window. There will probably be several. Now repeat those steps and look for bridge.dll and do the same thing, if you know you still have the trojan on your computer then you should do a find by going to start, find and click on file and folders and key in the word bridge.exe. You can right click on the window where it shows up and delete it there, but do NOT DOUBLE CLICK this will activate the trojan. Remember to empty your recycle bin too. Do I have you confused yet, it is a long process, but it does seem to work. Good Luck and if you have any questions just email me. Hopefully you can understand my instructions. Mary

0

We, too, have the bridge.exe and thanks.exe and one other. When following the instructions above to remove bridge.exe, it says to do a find in regedit and delete the files to the right of it. There are several files named a, b, c etc., also one named MRUList and one (Default). Are these the ones that were to be deleted. They were found in Doc Find Spec MRU Folder. Kevin

0

Thanks Mary, I finally got bridge.exe off my PC by running Spy Sweeper. Before that, I've run Ad-aware and then Spybot. I don't recall which of these softwares remove a few of the bridge related files and registry keys. Kevin, you may want to try that. Anyway, I did a search for bridge.exe and bridge.dll again in regedit and yes it is clean now. chilo

0

This is from Symantec so I trusted the source. It worked for meFile names: bridge.exe winfavorites.exe bridge.dll bridge.inf Adware.WinFavorites is an adware program that may have two components: an executable file and a Browser Helper Object. When Adware.WinFavorites is executed, it does the following: Attempts to insert the files: bridge.dll bridge.inf Creates the following registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\ Browser Helper Objects\{9C691A33-7DDA-4C2F-BE4C-C176083F35CF} Adds the value: "Systray"="<the full path of the adware program>" to the registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run so that the adware runs when you start Windows. Creates a registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\bridge Attempts to download files from www.flingstone.com. The following instructions pertain to all Symantec antivirus products that support Expanded Threat detection. Update the definitions. Close all open browser windows. Run a full system scan and delete all the files detected as Adware.WinFavorites. Delete the values that were added to the registry. For specific details on each of these steps, read the following instructions. 1. Updating the definitions To obtain the most recent definitions, start your Symantec program and run LiveUpdate. 2. Closing all open browser windows Since Adware.WinFavorites functions as a Microsoft Internet Explorer plugin, close all the open browser windows to remove it. If you are reading this writeup in Internet Explorer, print this writeup using our printer-friendly option at the top of the page, or write down the following instructions, and then close all the open browser windows. 3. Scanning for and deleting the files Start your Symantec antivirus program and run a full system scan. If any files are detected as Adware.WinFavorites, click Delete. ---------------------- Note: If your Symantec antivirus product reports that it cannot delete a detected file, write down the path and file name. Then use Windows Explorer to locate and delete the file. ---------------------- 4. Deleting the values from the registry ---------------------- WARNING: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions. ---------------------- Click Start, and then click Run. (The Run dialog box appears.) Type regedit Then click OK. (The Registry Editor opens.) Navigate to the following key and delete it: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\ Browser Helper Objects\{9C691A33-7DDA-4C2F-BE4C-C176083F35CF} Navigate to the key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run In the right pane, delete the value: "Systray"="<the full path of the adware program>" Navigate to the following key and delete it: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\bridge Exit the Registry Editor. Revision History: January 23, 2004: Updated Removal Instructions. J-L-O

0