View Single Post
Old 11-07-2008, 23:34   #11613
Rchivist
Inactive
 
Join Date: Apr 2008
Posts: 831
Rchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of QuadsRchivist has a fine set of Quads
Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]

Quote:
Originally Posted by alt3rn1ty View Post
Has anyone seen this before... first a bit of background, I used to be on BT BroadBand, after last nights security hits and Avast stopping one trying to infiltrate my laptop decided its time to do a thorough scan of all system.
Found the following on the desktop (not the machine which was attacked, but the machine I originally setup with BT) using Microworld Anti Virus EScan (MWAV.EXE) in safe mode...

c:\windows\motive\BTBB\Uninstallhelper.exe//WISE0004.bin tagged as "not-a-virus:RiskTool.Win32.PsKill.1101"

anyone still on BT check for the same file c:\windows\motive\BTBB\Uninstallhelper.exe

This was flagged as crytical with MWAV

and no doubt compressed within the exe you will have the same

Obviously a leftover from bt broadband, any suggestions as to where someone might make a good analysis of this file, my system seems to be safe and cant find any links to auto run the file, so made a copy and deleted the original location. There were no registry entries pointing to it either so I am pretty sure whatever it did is history wiped away by multiple scans and ccleaner sweeps/registry cleanups.

Wonder if this was part of the btbroadband setup disk, I installed it once to see if anything was necessary then promtly un-installed it having found the usual unnecessary installations.
I definitely remember files in the BTBroadband Desktop help (which is what you had) throwing up false positives - mentioned and discussed on BT internal support newsgroup

We advise people never to use the BT CD for anything other than bird scaring in the garden. Their software is truly abysmal.

Here's a google search on uninstaller.exe refined with "btbroadband"
http://tinyurl.com/65x5nb
you will see several posts with similar issues

and here is a straight google search on the file WISE0004.bin
http://tinyurl.com/5coadz

NB - if concerned about tinyurl links - you can set tinyurl.com to give you a preview of the real link text before being directed to it. I'm using the tinyurl so as not to spread the forum horizontally over six feet of screen real estate.
Rchivist is offline