View Single Post
Old 11-07-2008, 23:25   #11612
alt3rn1ty
Guest
 
Posts: n/a
Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]

Has anyone seen this before... first a bit of background, I used to be on BT BroadBand, after last nights security hits and Avast stopping one trying to infiltrate my laptop decided its time to do a thorough scan of all system.
Found the following on the desktop (not the machine which was attacked, but the machine I originally setup with BT) using Microworld Anti Virus EScan (MWAV.EXE) in safe mode...

c:\windows\motive\BTBB\Uninstallhelper.exe//WISE0004.bin tagged as "not-a-virus:RiskTool.Win32.PsKill.1101"

anyone still on BT check for the same file c:\windows\motive\BTBB\Uninstallhelper.exe

This was flagged as crytical with MWAV

and no doubt compressed within the exe you will have the same

Obviously a leftover from bt broadband, any suggestions as to where someone might make a good analysis of this file, my system seems to be safe and cant find any links to auto run the file, so made a copy and deleted the original location. There were no registry entries pointing to it either so I am pretty sure whatever it did is history wiped away by multiple scans and ccleaner sweeps/registry cleanups.

Wonder if this was part of the btbroadband setup disk, I installed it once to see if anything was necessary then promtly un-installed it having found the usual unnecessary installations.