close ad
 
Important WebAssist Announcement
open ad
View Menu

Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

rating

Urgent help needed virus on installation

Thread began 11/27/2011 5:12 am by Steve E | Last modified 12/02/2011 10:24 am by Steve E | 4777 views | 8 replies |

Steve E

Urgent help needed virus on installation

I started experiencing problems relating to a javascript error, which had a cascading effect and resulted in multiple errors, I ended up having to completly remove all my extensions and uninstalling Dreamweaver CS5,
I deleted all folders and did a clean installation of dreamweaver, I am now reinstalling the extensions, 1 at a time,
I have Super Suite, so I am working down the list of downloads and installing 1 at a time, and checking Dreamweaver for errors after each installation, all was going well until I got to CSS Menu Writer
This contains a Virus called - Gen:Trojan.Heur2.BDT.dq4@aOwtSLnajb
as far as I know SiteSculptor is also infected with the same bug. It has caused me some serious downtime and hours of work trying to get my system back in good order.
I need some help ASAP, please can you get in touch
Thanks in advance

FYI..Security Log
Virgin Media Security Detection Log
27/11/2011 13:00:30
File name Infection Action Date
N:\STEVESQUADCORE\Backup Set 2011-06-30 033239\Backup Files 2011-07-17 190017\Backup files 1.zip Trojan.JS.Downloader.BKW Reported 24/07/2011 21:39:21
C:\Users\....\AppData\Roaming\Adobe\Dreamweaver CS5\en_US\Configuration\JSExtensions\WACSSSculptor.dll Gen:Trojan.Heur2.BDT.dq4@a0xYgdbajb Quarantined 25/11/2011 11:11:04
C:\Users\.....\AppData\Roaming\Adobe\Dreamweaver CS5\en_US\Configuration\JSExtensions\WACSSMenuWriter.dll Gen:Trojan.Heur2.BDT.dq4@aOwtSLnajb Quarantined 25/11/2011 13:47:37
C:\Users\....\AppData\Roaming\Adobe\Dreamweaver CS5\en_US\Configuration\JSExtensions\WACSSMenuWriter.dll Gen:Trojan.Heur2.BDT.dq4@aOwtSLnajb Delete at restart 25/11/2011 14:36:27
C:\Users\......\AppData\Roaming\Adobe\Dreamweaver CS5\en_US\Configuration\JSExtensions\WACSSSculptor.dll Gen:Trojan.Heur2.BDT.dq4@a0xYgdbajb Delete at restart 25/11/2011 17:20:05
C:\Users\....\AppData\Roaming\Adobe\Dreamweaver CS5\en_US\Configuration\JSExtensions\WACSSSculptor.dll Gen:Trojan.Heur2.BDT.dq4@a0xYgdbajb Quarantined 25/11/2011 19:03:38
C:\Users\.....\AppData\Roaming\Adobe\Dreamweaver CS5\en_US\Configuration\JSExtensions\WACSSMenuWriter.dll Gen:Trojan.Heur2.BDT.dq4@aOwtSLnajb Quarantined 25/11/2011 21:45:56
N:\STEVESQUADCORE\Backup Set 2011-08-14 190019\Backup Files 2011-08-14 190019\Backup files 1.zip Gen:Trojan.Heur2.BDT.dq4@aOwtSLnajb Reported 27/11/2011 01:56:09
N:\STEVESQUADCORE\Backup Set 2011-08-14 190019\Backup Files 2011-08-14 190019\Backup files 1.zip Gen:Trojan.Heur2.BDT.dq4@a0xYgdbajb Reported 27/11/2011 01:56:09
C:\Users\.....\AppData\Local\Temp\CSSMenuWriter_mxi\configuration\JSExtensions\WACSSMenuWriter.dll Gen:Trojan.Heur2.BDT.dq4@aOwtSLnajb Quarantined 27/11/2011 12:53:47



File generated by Virgin Media Security Detection Log

Sign in to reply to this post

sabastian130416448

Hi.

I have the same Virus. Is there any way to delete the Virus and sort things out or what does this mean, complete Windows Format and re-install?

Please help asap.

Sign in to reply to this post

Steve E

Hi Sebastian
Deleting the virus should not be a problem, my anti virus detected and quarantined the virus, so my system is safe, but the problem is that it seems to be that the files that are quarantined are "shared" (I think) therefore Dreamweaver runs into multiple start up JavaScript errors.
I had to completely uninstall all extensions after the obvious steps i.e. deleting the .dat file etc, then I still had multiple errors on start up of Dreamweaver, so I had to uninstall and re-install Dreamweaver.
The problem seems to occur when the mxp installation file, and therefore, causes various problems when attempting to install the extensions again, Adobe Extension Manager can not complete the installation and crashes, when a reboot is attempted the Anti virus automatically quarantines the file.
I guess the reason this post has not been answered is due to the Thanksgiving celebrations in the US, so my advice would be to await the return of the web assist support team.
Fingers crossed this can be resolved quickly and efficiently, I assume this is down to a incorrect virus definition with my security software, just out of interest, What Antivirus software are you using?
If you find a solution could you post back to this forum please

Thanks and take care
Steve

Sign in to reply to this post

sabastian130416448

Hi Steve.

I am using Bitdefender. It blocks the virus no problem but it doesn't seem to be able to clean it. I deleted everything, uninstalled, re-installed, re-downloaded everything but still no go.

Got in contact with Bitdefender now and am going to try and allow Bitdefender to let the file run without blocking it, will see what happens. What is funny thou is that it is the same virus affecting the same file, CSSMenu writer.

Will let you know how it went.

Sign in to reply to this post

Jason ByrnesWebAssist

I have created a support ticket so we can look into this issue further.

To view and edit your support ticket, please log into your support history:
supporthistory.php

If anyone else is experiencing this same issue, please append to this thread.

Sign in to reply to this post

matthew316697

Same thing here

Hi Jason, same problem here with CCS Sculptor. Using Virgin Media Security like Steve below. WACSSSculptor.dll identified as a virus.

Sign in to reply to this post

Steve E

Sorry to hear you guys have the same problem, but good to know its not me, I just thought I should let you know they are looking into it, I will update this post when I know more.

Sign in to reply to this post

sabastian130416448

Hi guys.

Don't know if this will help with your problem but in Bitdefender I added and exclution rule to not search the temp folder where the extensions were being installed or rather the temp folder my virus software said the virus was found.

I spoke to the technicall department at Bitdefender and they aren't sure why or how this happend but that sorted out my problem and now I am back up and running again.

Hope this helps a little.

Sign in to reply to this post

Steve E

Solved

Hi
These are the steps I used to resolve the issue, you may want to check with support prior to going ahead but this is what worked for me.

Following some discussions with the support team, we found that the solution is to firstly quarantine the Virus then Delete it.

Uninstall all the Web Assist Extensions then, (In my case I had uninstalled and Re Installed Dreamweaver - not sure if this was necessary but after uninstalling the extensions I was still getting JavaScript Errors relating to Web Assist Software).
Then delete the following 'Configuration Folders'
C:/Users/USER_NAME/AppData/Roaming/Adobe/Dreamweaver CS5/en_US/Configuration
C:/Users/USER_NAME/AppData/Roaming/Adobe/Extension Manager CS5/en_US/Configuration
Restart your system and Run a Full Deep Scan. The Virus should not be present.
Re Open Dreamweaver and check for errors, everything should be ok, Extension Manager may want to update Dreamweaver with the HTML5 pack,
Then Reinstall the extensions one at a time OLDEST first, activate each one and restart Dreamweaver after each installation to ensure everything is ok.

I hope this helps, sorry for the delay as you can imagine, it took a while to sort out.

Sign in to reply to this post

Build websites with a little help from your friends

Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.

Build websites from already-built web applications

These out-of-the-box solutions provide you proven, tested applications that can be up and running now.  Build a store, a gallery, or a web-based email solution.

Want your website pre-built and hosted?

Close Windowclose

Rate your experience or provide feedback on this page

Account or customer service questions?
Please user our contact form.

Need technical support?
Please visit support to ask a question

Content

rating

Layout

rating

Ease of use

rating

security code refresh image

We do not respond to comments submitted from this page directly, but we do read and analyze any feedback and will use it to help make your experience better in the future.

Close Windowclose

We were unable to retrieve the attached file

Close Windowclose

Attach and remove files

add attachmentAdd attachment
Close Windowclose

Enter the URL you would like to link to in your post

Close Windowclose

This is how you use right click RTF editing

Enable right click RTF editing option allows you to add html markup into your tutorial such as images, bulleted lists, files and more...

-- click to close --

Uploading file...