Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
Has anyone seen this before... first a bit of background, I used to be on BT BroadBand, after last nights security hits and Avast stopping one trying to infiltrate my laptop decided its time to do a thorough scan of all system.
Found the following on the desktop (not the machine which was attacked, but the machine I originally setup with BT) using Microworld Anti Virus EScan (MWAV.EXE) in safe mode...
c:\windows\motive\BTBB\Uninstallhelper.exe//WISE0004.bin tagged as "not-a-virus:RiskTool.Win32.PsKill.1101"
anyone still on BT check for the same file c:\windows\motive\BTBB\Uninstallhelper.exe
This was flagged as crytical with MWAV
and no doubt compressed within the exe you will have the same
Obviously a leftover from bt broadband, any suggestions as to where someone might make a good analysis of this file, my system seems to be safe and cant find any links to auto run the file, so made a copy and deleted the original location. There were no registry entries pointing to it either so I am pretty sure whatever it did is history wiped away by multiple scans and ccleaner sweeps/registry cleanups.
Wonder if this was part of the btbroadband setup disk, I installed it once to see if anything was necessary then promtly un-installed it having found the usual unnecessary installations.
|