"WEB CAKE 3.0" infection - HELP

[ship691]

> Is your BitDefender a trial version ?
Yes

 

[VistaKing]

Remove BitDefender from the control panel then use the tool below

:ar: Uninstall Bitdefender

After the download completes go to the location where you downloaded and run it (double-click);

After a couple of moments the uninstall tool interface will appear;

Click Uninstall

Wait for the tool to display the completion message and then restart your computer.



Download MSE below

:ar: http://mse.dlservice.microsoft.com/...4-AF60-E44F6DC28BD8/enus/amd64/mseinstall.exe

 

[Layback Bear]

If I may.

Post #28 you were requested to remove Spy hunter
Post #47 you were asked to remove Spy Hunter again
Have you ever removed Spy Hunter?
In post #38 and 39 was a hacked CS-5
cs5\configuration\taglibraries\html\keygen.vtm
Did you remove the program and the hack?
In post #43 you were requested to remove Spybot
Did you ever remove it?
Nobody requested you to run Bitdefender.
Post #56 asked if you use a torrent and I can't find the answer.

***VistaKing with a program/s of your choice could we have a scan to see what is left on this computer.

 

[ship691]

Wait,VistaKing no disrespect but now I'm confused.

How many different bits of software ware you proposing for me - surely not just MSE after what i've been through!

Also Faladu says:

"MSE is not a good enough anti-virus solution on it's own, I don't recommend it to anyone for that purpose."
http://www.sevenforums.com/system-security/299435-web-cake-3-0-infection-help.html
Also he says
"avtest.org will enlighten you on the major products available, MSE is rated dead last overall."



Now I take your point that these reviews are most probably somewhat biased. But *everywhere* I looked MSE seemed be taking a kicking. I couldnt find a good 2013 review anywhere! Worse, it was terrible at updating itself. I kept finding that its updates were listed as "optional" by microsoft and so they kept never happening - WTF? (OK I never left them more than a week or 2 but you get the idea.)

PLUS, the fact is that I was using it and it failed to let a lot of stuff through.

Yes, yes I know that there are different types of 'stuff': virus, and adware and trojans and PUPS... but to me anything that installs itself without my specific permission, particularly if it then allows other stuff in is loosely speaking a virus (of a sort) and/or malware. Sorry to be naive and blunt but I just want something that works. OK if I *must* use 2 or 3 bits of software then I will, I suppose... but why the heck cant someone fuse whatever I need into a single package. I dont want to have to keep fretting about multiple different versions of different software... and to keep worrying about what I've recently updated or not.

...I dont take huge risks with my software and I just need to get on with using the g*dd*mned computer !

Sorry but do you see where I'm coming from?

Jacee - what about your three things: Avira + Malwarebytes (not real time) + SpywareBlaster would that work for a not-v-techie like me?

 

[Layback Bear]

Let me try to help.
If you are using a Torrent you have allowed these infection in your computer.
Torrent are one of the best ways of getting infection. You have instructed your security programs to let anything through when using a Torrent. Or the infection will come through in bits and pieces where a security program will not recognize them.

Please read post #63 and answer the questions.

 

[ship691]

If I may respond:

> Post #28 you were requested to remove Spy hunter
Which I did.
But things were happening too slowly. I temporarily reinstalled Spy Hunter because it was the only thing that was finding Web Cake (plus some other suspicious stuff)

> Post #47 you were asked to remove Spy Hunter again
Which I did.


> Have you ever removed Spy Hunter?
Yes I hate the damned thing. I have only ever installed it temporarily and out of desperation because nothing else was finding what it was finding.

> In post #38 and 39 was a hacked CS-5
> cs5\configuration\taglibraries\html\keygen.vtm
> Did you remove the program and the hack?
Yes I believe so. Well I uninstalled dreamweaver CS-5 and deleted the relevant directories as best I could if that what you mean.

> In post #43 you were requested to remove Spybot
> Did you ever remove it?
Yes. I have been uninstalling almost everything I install.

> Nobody requested you to run Bitdefender.
I was told I needed some new AV software by Faladu.
And I believe I was told to scan with my AV software.
But my AV software (MSE) has never picked up a damned thing not only this time but also on a previous occasion when I got some virus a couple of years back.

So I panicked and thought I'd better spend some money and get some proper protection. MSE may well be utterly, utterly brilliant but I find it hard to believe that microsoft would bother building it so well and not even promote it... I mean what is their game? Why are they doing it, and apparently doing it so well, if they aren't telling the world about it. Also if it is so brilliant how come so many AV companies are making such a good living? If it was utterly, utterly brilliant eventually the word would spread and we would all start using it. A bit like (for better or worse) Google Analytics which almost everyone I know in (SME) websites now uses. I mean (though I hate Google) it's pretty good and it's free. And eventually the competition got blown out of the water....

 

[ship691]

P.S. No I am not using a Torrent!

 

[VistaKing]

BitDefender is only a trial 15 or 30 days . After that it is up to you . You would have to purchase the item or remove it . I said MSE cause it is free . If you want to purchase an Antivirus go with BitDefender or Webroot . Its like 40 or 50 dollars(USD) .

You want to try another free antivirus go with AVG .

Like everyone is saying remove Spyware Hunter . You never know the WebCake could come free with Spyhunter . Some free programs could with more free goodies .

 

[Layback Bear]

Thank you for answering my questions.
You don't have to keep Microsoft Security Essential on your computer for ever. While testing for virus I recommend using it. Windows 7 works well with it. So that will be one problem your helpers won't have. Only installed programs people like VistaKing and Jacee instruct you to. Some times different anti programs will get in the way of other programs that people ask you to use.
Please don't go to other site and try this and that because then the right hand doesn't know what the left hand is doing.

Also remember you can get infected with one of these so call anti infection programs you see all over the net. The ones suggest by these good people here have been tried and tested.

Now I will go back to watching you and VistaKing and others get you fixed.

 

[ship691]

> Like everyone is saying remove Spyware Hunter.
OK like I say I have removed that - yes, permanently if you insist.

One problem is that I am UK based and you folks mostly only come to life in the middle of my night (!) but I shall try to be patient (e.g. its' nearly 3AM here right now )

OK I'm going back to #62. More shortly...

UPDATE 01: OK, I've uninstalled BitDefender and have installed MSE and it has gone straight into a Quick Scan. Surely I need a full scan?

UPDATE 02: OK, the Quick Scan found nothing. I am starting a Full Scan now.

UPDATE 03: Full scan found nothing.

Can we assume this PC is clean?
I'm going to HAVE to start using this PC to earn my living...

Now what?

P.S. VistaKing and Jacee... *PLEASE* can you give me multiple things to do in each post, as I am not in your timezone!

 

[Jacee]

No multiple instructions here .... I need to see this log!! (pulling out the 'Big" guns, now)

Download Combofix from any of the links below, and save it to your desktop.<--Important
Link 1
Link 2
Link 3

Click on this link Here to see a list of programs that should be disabled.
The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.
Next: Please disable all onboard security programs (all running with back ground protection) as it may hinder the scanner from working.
This includes Antivirus, Firewall, and any Spyware scanners that run in the background.

• Double click combofix.exe and follow the prompts.
• When finished, it will produce a log for you.

Note: Do not mouseclick combofix's window while its running. That may cause it to stall
Please be patient while the scan runs, at times it may appear to stall.
When finished and after reboot (in case it asks to reboot), it should open a log, combofix.txt.
Post this log in your next reply
After rebooting ensure your Security applications have been re-enabled.

In your next reply post:
ComboFix.txt
***A guide and tutorial on "How to use Combofix" can be found here:
ComboFix: A guide and tutorial on using ComboFix

IF CF won't run:
During the download, rename Combofix.exe to sVchost.exe

 

[ship691]

Can we assume this PC is clean?
I'm going to HAVE to start using this PC to earn my living...

Now what?

 

[ship691]

Done.
i.e. I have downloaded combofix.exe. I have stopped realtime protection by MSE. I have switched off the Windows 7 firewall. I have run combofix. Results here:

View attachment log.txt

And I have turned on MSE and window firewall again.

So what next?

 

[Jacee]

Okay, I can see you've run Combofix twice. Is this the same version you downloaded and used on 2012-11-06?

 

[Jacee]

If this is an older version of Combofix that you used, please delete it, then download the latest version from my link above .... CF is always being updated!

You need to totally uninstall:
Norton:
Download and run the Norton Removal Tool to uninstall your Norton product
*Norton AntiVirus, Norton Internet Security, or Norton 360
Using the "SymNRT" utility (Norton Removal Tool)

Anvisoft Anvisoft FAQS | Anvisoft

HitmanPro Hitman Pro Uninstall Tips-How to Fully Remove It?_removetips.com – Remove Programs Tips

BitDefender:
http://www.bitdefender.com/support/How-to-uninstall-BitDefender-333.html
*http://www.bitdefender.com/uninstall

Run TFC again, reboot.

Now give me a fresh Combofix log.

 

[ship691]

No I downloaded the latest version of combofix.

 

[ship691]

Sorry, but no I have no idea what norton utility I installed and immediately uninstalled.
On that Norton link, Norton say that they refuse to just supply you with a link to the Norton Removal Tool. Apparently you have to contact their technical support... AAAAAAAAAAARRRRRRRRRRRGGGGGGGGGGHHHHHHH!

I have to say I am getting utterly hacked off with this process. Why in G*d's name is it so hard to uninstall software.

more shortly

NORTON
It turns out that the information on the page you linked for me was lying - I did not have to contact their tecnnical support. Instead I found the FTP you supplied. So I have run SymNRT as requested.

ANVISOFT
I had already uninstalled Anvisoft, and as a result, none of the mechanisms for fully uninstalling it worked . Out of desperation I re-installed in completely and then uninstalled it from the menu items in the All Program menu that they supply rather than using the Control Panel. However this failed to remove the listing in the All Programs menu. And I can see that the following directory still exists:
"C:\Program Files (x86)\Anvisoft\Anvi Smart Defender"

HitmanPro
I this was already deleted. But I have deleted all files on my PC with "hitman" in their names. I have deleted all entries in my registry too with that name in it.

BitDefender
I ran the uninstall utility.

TFC
Ran that too, then rebooted.

Now what next?

 

[Jacee]

Anvisoft removal
Through the uninstall tool:

1. Open windowsstart menu, click all programs and select Anvisoft.

2. Single click on Anvisoft to reveal Anvi Smart Defender.

3. Single click on Anvi Smart Defender to reveal its submenu.

4. click Uninstall and follow the steps provided.

5. Wait for the uninstallation process to complete.

You don't have to restart the computer after the uninstallation.

Next, go to C:\ProgramFiles\
And delete these folders
Norton
Anvisoft
HitmanPro
Bitdefender
Enigma Software Group

Reboot, run the newest version of Combofix and post the text log.

 

[ship691]

Done.

View attachment log.txt

What next?

 

[ship691]

Btw, when this is all over - what am I now working forward towards as a normal set of tools?
I mean

1. I dont mind spending 40 or even £50 (max) on antiviral software if it is significantly better than the free stuff.

2. Should I have something running all the time to stop malware as well as some AV software?

3. What else should I do by way of maintenance say once per week?

4. How often should all updates and scans be run? Every night at 4AM?