PCHF Hello yet again,
The wife downloaded a screen saver the other day,during setup PestPatrol advised her of a pest namely WhenU.SAVE.

She denied access to the pest, on her master log in pestpatrol it shows the following.

Ezula .......................deleted
whenusavenow..........ignored this time
whenusavenow..........ignored this time
whenusavenow..........ignored this time
whenusave...............deleted
whenusaveweathercast.....deleted
whenusavedirectory..........deleted
whenusavedirectory..........deleted
whenuweathercast.............deleted
whenuweathercast..............deleted

There is nothing in add/remove that resembles anything that this site has advised others to look for.
The comp is fine no sign of anything whenu might do.

Am i safe in assuming pestpatrol done its job and if you think that I should do a prework, then please advise, this is one my own comps ( for a change ) so if all could be ok then I will delve into any prework etc at a later date if required.

Thankyou

Cart

Hm....just be safe and follow the HJT part of the prework....post and see what happens.

The log doesn't take too long to produce

Thanks GaRHaR,
attached is HJT Log.

Thankyou

Cart

Attached Files

hijackthis.log (8.2 KB, 5 views)

Thanks mate

Now funfortunately we have to play the waiting game until one of the security team comes online...shouldn't be too long

WhenUSave is generally only ad/spyware - safe enough, just don't goto any online banking sites, etc.

Ok Thanks mate, one question in respect to online banking and the likes, the comp that has whenusave is the wifes comp,my comp is the main comp and hers is networked through a router, would I be safe in using mine for banking etc or just hold off untill we suss this out.

Thankyou

Cart

Sorry mate, been at church since the last message I sent

And yea, it should be safe for your computer to use it...just not the misses