caketrans.exe

cmcorby · May 2, 2005

First let me say what an outstanding resource this board has been for me. I have learned so much from the excellent guides posted here. Thank you for all of the patience and work that went into them!

I was having a terrible problem with pop-ups in IE 6. It was a constant barrage of ads, and no blocker would kill them. I already had virus and spyware protection running, but something got through. So I came here and followed all of the instructions (and learned a lot in the process!)

To make a long story short, the problem was a program called "caketrans.exe."
It was in c:\Documents and settings\All Users\Application Data\SETTINGS DUPE PLAN PROXY. It was set to run at startup from the registry. Disabling it solved the problem.

What's baffling to me is that this was not detected by any of the scanners or monitors I have (and believe me, I tried them all) I did a google search for caketrans.exe, and there's only one hit, and it's only a listing without any information.

Does anyone know anything about this program? I have no idea where it came from. I'm surprised that there's no info anywhere about it.

Thanks again,
Chuck

chaslang · May 2, 2005

There are literally tens of thousands of these kinds of programs and they have randomly named folders and files making it impossible to detect them other than by hand. Also since they are so randomly named, you may not always find them in a search.

They typically classify into an unknown trojan or hijacker. Quite often folder and files names like you gave are related to downloaded wallpapers and screen blankers etc.

Log in or Sign up

caketrans.exe

cmcorby Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member