Possible threat spotted on my laptop

The_Grandmaster

I don't think rescanning will change anything - unless you found something else too? If you did please say.

Might be worth running malwarebytes if you are very worried and then hijackthis: (instructions written by alienRIK):

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_ma..._anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD THIS VERSION')
http://www.filehippo.com/download_hijackthis/2894/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

Lugh_Chronain

Appears to be doing the same thing anyway: “Error: Access is denied (5)”.

Might try what you've suggested tomorrow.

Think I’ll give up for now and switch off my laptop.

spg_SCOTT

The [PUP] attribute is 'Potentially Unwanted Program' So unless you have specifically installed this yourself, then you could uninstall the program that is using it. Do you have any bt programs installed?

The error 5 is access denied (not enough user rights, file in use etc.) so is it being run by something?

I'm no expert but I think HJT would probably show what is running it...

From googling it appears to be part of software for a router from 'BTYahoo'

Lugh_Chronain

My ISP is PlusNet, aren't they owned by BT or something like that? Otherwise I don't have anything from BT installed on my laptop, not as far as I know anyway.

And the only thing I use from Yahoo is their weather page for checking the weather abroad.

Will try running a HJT check sometime in the afternoon if I have time.

Thanks Scott

aliEnRIK

Its a 'dialer' and does need removing

Leave Avast and follow the instructions in post #12

Lugh_Chronain

I actually enquired about malwarebytes on here and was recommended Avast by one of the users of MSE forums.

Will try and do this in the next couple of days, I've no intention of doing this at the moment as I don't want to be messing about with my laptop today, it's my birthday today and have other plans.

Thanks for your advice aliEnRIK.

What's a dialer by the way?

aliEnRIK

Dialers are virtually obsolete. They use the old style 'dial up' (As opposed to broadband which most use today).
As an example, my grandfather had one years ago. Whilst he went to the shops he left his computer running doing something or other.
A month or so later he got a bill for over 600 quid. The 'dialer' had dialed out using the phoneline to a very expensive phone. BT werent interested in WHY it had been dialed, he had to pay anyways (Which is why I assume he dropped them and went with blueyonder (now virgin))

So although it probably cant do your computer any harm (Assuming your on broadband), its still slowing your computer down by trying to run.

Theres nothing wrong with avast, but clearly its not working in this particular case, so id suggest following malwarebytes etc and see how it goes.

Lugh_Chronain

Not really noticed my computer slowing down though it does take a while to come on plus my browser (Firefox) takes a while to open. Saying that though, I have a few tabs open at the moment so this may be stopping my browser from opening quickly.

Thanks again for the info aliEnRIK

aliEnRIK

I would definitely still suggest running malwarebytes etc, as that may show OTHER problems you have
If ones in, then theres a good chance others are

Lugh_Chronain

Too true! Will do this as soon as I can.