Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Virus & Other Malware Removal Virus & Other Malware Removal
Search Search
Search for:
Tech Support Guy > > >

Solved: Webcake 3.00 adware virus


(!)

twiggy98's Avatar
twiggy98 twiggy98 is offline
Computer Specs
Member with 85 posts.
THREAD STARTER
 
Join Date: Jun 2010
Location: salford , manchester
Experience: Intermediate
07-Jun-2013, 02:21 AM #1
Webcake 3.00 adware virus
hi all can anyone help please, im on win 7 with IE9 and somehow my son has downloaded a programme called WebCaKe 3.00, its an adware programme and it will not uninstall and is now stopping me accessing things via the web, im running internet explorer without add ons at the moment, ive tried add/remove and it comes up with an error message, ive tried deleting from my hard drive, but it says its in use so I cant, ive disabled the add on in the tools setting, there were 4 parts to it, ive got rid of 3, but the actual application will not delete, ive googled it and followed all the instructions, ive run all my scans and they arnt picking it up, ive run the malicious software removal tool and a microsoft scanner both come back clean, and if you type it into the pc,s search bar it says it isn't there, yet as I type im sat looking at it on my hard drive, ive tried all the FIX IT programmes its offered and still no joy, does anyone have any suggestions please, ? as the programme has taken over my IE9 with adds and coupon offers, and its mega annoying, thanks in advance for any help ,.
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 45,749 posts.
 
Join Date: Dec 2002
Location: Loughton, Essex, UK
07-Jun-2013, 04:51 AM #2
follow advice here and post the logs those programs make
twiggy98's Avatar
twiggy98 twiggy98 is offline
Computer Specs
Member with 85 posts.
THREAD STARTER
 
Join Date: Jun 2010
Location: salford , manchester
Experience: Intermediate
07-Jun-2013, 05:02 AM #3
hi Derek, thank you for a prompt reply, ive managed to delete the programme from my hard drive now, after some tinkering, I wnt to my start menu on msconfig and unchecked the box, that allowed me to bin it directly from the drive, but it still wont allow me to remove it from add and remove, my explorer is working , its just abit jumpy, would you still like me to follow the link above, incase ive missed something?
twiggy98's Avatar
twiggy98 twiggy98 is offline
Computer Specs
Member with 85 posts.
THREAD STARTER
 
Join Date: Jun 2010
Location: salford , manchester
Experience: Intermediate
07-Jun-2013, 06:03 AM #4
WebCake 3.00
this is fun, all this new learning, and ive probably done it wrong, sorry if I have, but there should be 2 txt logs on here somewhere,if there isn't then can you explain to me where I may have gone wrong please,
Attachment Blocked
Attachments in the HJT forum are often designed to solve a specific issue and not meant to be used without instructions specific to your computer. If you want help specific to your computer, please post a HiJackThis Log. If you started this thread, please make sure you are logged in to be able to view attachments.
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 45,749 posts.
 
Join Date: Dec 2002
Location: Loughton, Essex, UK
07-Jun-2013, 07:45 AM #5
OK I can see a few bits that need fixing
lets see what this will do first

Please download AdwCleaner to your desktop.
  • Double click the adwcleaner.exe to run the tool.
  • Click Delete.
  • When the scan finished, a notepad window will be opened.
  • Please post the contents here in your topic.
  • The logfile will also be saved in C:\AdwCleaner[S1].txt.
__________________
Derek Microsoft MVP/Windows - Security | Thespykiller | How to protect yourself and other Security Advice
Find out all about the European Wild Hedgehog, what you can do to save it from extinction Hedgehog Rescue
twiggy98's Avatar
twiggy98 twiggy98 is offline
Computer Specs
Member with 85 posts.
THREAD STARTER
 
Join Date: Jun 2010
Location: salford , manchester
Experience: Intermediate
07-Jun-2013, 09:10 AM #6
WebCake 3.00
hi Derek, is this what you wanted, ?thanks for your help, its realy appreciated,
Attachment Blocked
Attachments in the HJT forum are often designed to solve a specific issue and not meant to be used without instructions specific to your computer. If you want help specific to your computer, please post a HiJackThis Log. If you started this thread, please make sure you are logged in to be able to view attachments.
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 45,749 posts.
 
Join Date: Dec 2002
Location: Loughton, Essex, UK
07-Jun-2013, 11:22 AM #7
there might be a few items still needing to be dealt with and possibly a rootkit. There are a couple of entries that look suspicious, but might be innocent
next step will be

Delete any existing version of ComboFix you have sitting on your desktop
Please read and follow all these instructions very carefully
Do not edit or remove any information or user names etc, otherwise we cannot fix the problem. If you insist on editing out anything then I will close the topic & refuse to offer any help.

Download ComboFix from Hereto your Desktop.

**Note: It is important that it is saved directly to your desktop and run from the desktop and not any other folder on your computer**
--------------------------------------------------------------------
1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  • Very Important! Temporarily disable your anti-virus and anti-malware real-time protection and any script blocking components of them or your firewall before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results" or stop combofix running at all
  • Click on THIS LINK to see instructions on how to temporarily disable many security programs while running combofix. The list does not cover every program. If yours is not listed and you don't know how to disable it, please ask.
  • Remember to re enable the protection again after combofix has finished
--------------------------------------------------------------------
2. Close any open browsers and any other programs you might have running
Double click on renamed combofix.exe & follow the prompts.
If you are using windows XP It might display a pop up saying that "Recovery console is not installed, do you want to install?"
Please select yes & let it download the files it needs to do this. Once the recovery console is installed Combofix will then offer to scan for malware. Select continue or yes.
When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt" for further review


****Note: Do not mouseclick combofix's window while it's running. That may cause it to stall or freeze ****

Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security.Read HERE why we disable autoruns

Please do not install any new programs or update anything (always allow your antivirus/antispyware to update) unless told to do so while we are fixing your problem. If combofix alerts to a new version and offers to update, please let it. It is essential we always use the latest version.

Please tell us if it has cured the problems or if there are any outstanding issues

*EXTRA NOTES*
  • If Combofix detects any Rootkit/Bootkit activity on your system it will give a warning and prompt for a reboot, you must allow it to do so.
  • If Combofix reboot is due to a rootkit, the screen may stay black for several minutes on reboot, this is normal
  • If after running Combofix you receive any type of warning message about registry key's being listed for deletion when trying to open certain items, reboot the system and this will fix the issue (Those items will not be deleted)

Post the log in next reply please...
twiggy98's Avatar
twiggy98 twiggy98 is offline
Computer Specs
Member with 85 posts.
THREAD STARTER
 
Join Date: Jun 2010
Location: salford , manchester
Experience: Intermediate
07-Jun-2013, 01:07 PM #8
WebCake 3.00
hi Derek heres the report, hows it looking ? the programme has now gone from my add remove folder, and there doesnt seem to be any problems with IE9 now either, thankyou for all your help and hard work,
Attachment Blocked
Attachments in the HJT forum are often designed to solve a specific issue and not meant to be used without instructions specific to your computer. If you want help specific to your computer, please post a HiJackThis Log. If you started this thread, please make sure you are logged in to be able to view attachments.
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 45,749 posts.
 
Join Date: Dec 2002
Location: Loughton, Essex, UK
07-Jun-2013, 02:13 PM #9
if it all seems ok now & you aren't having any problems then lets leave it as it is

*Follow these steps to uninstall Combofix and the other tools it downloaded to remove the malware*
* Click START then RUN
* Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the /U, it needs to be there.


This will also purge the restore folder and clear any malware that has been put in there. Now Empty Recycle bin on desktop Then reboot.

go here http://www.thespykiller.co.uk/index.php?page=3 for info on how to tighten your security settings and how to help prevent future attacks.

and scan here http://secunia.com/vulnerability_scanning/personal for out of date & vulnerable common applications on your computer and update whatever it suggests. Download & use the PSI version ( not the OSI, in your browser java version) as I no longer recommend having Java installed on the computer at all, unless it is absolutely necessary, because of the too high risk of malware infiltration

Then pay an urgent visit to windows update & make sure you are fully updated, that will help to plug the security holes that let these pests on in the first place. If windows update doesn't work, please come back & tell us
twiggy98's Avatar
twiggy98 twiggy98 is offline
Computer Specs
Member with 85 posts.
THREAD STARTER
 
Join Date: Jun 2010
Location: salford , manchester
Experience: Intermediate
07-Jun-2013, 02:29 PM #10
hi Derek, im having a senior moment, not used to all this, when I click on the little round Microsoft emblem it brings up the bit for all programmes and a list of documents music pictures etc, at the bottom ive got all programmes or search, im new to windows 7 so where is the "run" bit on here please, so I can follow your instructions , thanks again for all your help, as ive typed it into the search bit and nothing seems to happen,
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 45,749 posts.
 
Join Date: Dec 2002
Location: Loughton, Essex, UK
07-Jun-2013, 02:35 PM #11
on Windows 7 the run box isn't always enabled by default
http://windows.microsoft.com/en-gb/w...he-run-command
twiggy98's Avatar
twiggy98 twiggy98 is offline
Computer Specs
Member with 85 posts.
THREAD STARTER
 
Join Date: Jun 2010
Location: salford , manchester
Experience: Intermediate
08-Jun-2013, 02:52 AM #12
hI Derek, thanks for your help yesterday, i have 1last question, in all the scans we ran, could any of them affected my internet connection? As i cant get my tower to connect to the wireless hub, my tablet is and so is my friends laptop, but the tower will not, ive run the problem solver and that says it cant find the problem, i was just wondering if a couple of settings may have been altered, any help you can offer would be appreciated,
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 45,749 posts.
 
Join Date: Dec 2002
Location: Loughton, Essex, UK
08-Jun-2013, 03:06 AM #13
there shouldn't have been anything done to internet connection at all

please run dds again & post its new logs so we can see if any settings show up
twiggy98's Avatar
twiggy98 twiggy98 is offline
Computer Specs
Member with 85 posts.
THREAD STARTER
 
Join Date: Jun 2010
Location: salford , manchester
Experience: Intermediate
08-Jun-2013, 03:32 AM #14
Hi Derek, ive got the results on to my tablet but cant see how to attach them on here as the set up seems differant, , do you have any suggestions, ive just been reading up on the tablet as its new , and the instruction book is no blooming use,
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 45,749 posts.
 
Join Date: Dec 2002
Location: Loughton, Essex, UK
08-Jun-2013, 03:34 AM #15
I don't know how to upload from a tablet as I never use one
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑