Firefox hijacker bdiwn.dll

Viruses and worms
1

I would like to get a file added to the definitions database. I have been fighting a Firefox browser hijack for several months now. I have run Avast, AdAware, and Spybot. Avast did a good job of flagging the Trojans that the hijacker added but nothing would flag the source of the problem.

The only way I found the offender was by looking at files that were changed in the last 24 hours. I could not delete the file in window safe mode. I was forced to boot with a windows CD and delete from there.

If this is not the appropriate place to post, please let me know.

I have a copy of the dll that I can email in.

2

If you are not getting a virus warning that you believe is a new, undetected virus or malware then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces), or send from the chest (after adding it to the User Files section of the chest).
Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a either a new, undetected virus or malware and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner
Or Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can’t do this with the file in the chest, you will need to move it out.

Edit a google search for the bdiwn.dll file name returns zero hits which in itself is suspicious.

3

I forgot to mention that I ran bdiwn.dll and nwidb.ini (anagram) in google and got zero hits. I submitted the dll to totalvirus.com and got a hit with 25% of the scanners. I have sent the email you requested.

Thanks

4

No problem, welcome to the forums.

What did the scanners that detected it call it (if you recall) ?