Another threat on Sons computer
Discussion
Hello again
No idea where it's come from but Windows Defender has highlighted a threat,
PUA:Win32/Preseneker. It's classified as "low".
Not sure if it's come in from a Microsoft update or something else he's been accessing.
Try to block it, it won't.
Can't see where to delete it or anything so we're going around in circles. A scan says nothing new but then it comes up as a threat.
Anyone able to assist please, I've tried googling the name and it's obviously something that's been around for a long time.
Thanks for any clues or guidance
No idea where it's come from but Windows Defender has highlighted a threat,
PUA:Win32/Preseneker. It's classified as "low".
Not sure if it's come in from a Microsoft update or something else he's been accessing.
Try to block it, it won't.
Can't see where to delete it or anything so we're going around in circles. A scan says nothing new but then it comes up as a threat.
Anyone able to assist please, I've tried googling the name and it's obviously something that's been around for a long time.
Thanks for any clues or guidance
PUA = Potentially Unwanted Application
There should be an "affected Item" (or items) in the details. If you navigate to the folder you should be able to find and delete* the files.
* - I'd rename them first - change the file extension to delete or something - just in case it's a false positive and the file(s) are needed.
There should be an "affected Item" (or items) in the details. If you navigate to the folder you should be able to find and delete* the files.
* - I'd rename them first - change the file extension to delete or something - just in case it's a false positive and the file(s) are needed.
As above should do it. See https://answers.microsoft.com/en-us/protect/forum/...
It hasn't come on from a Windows Update, it's likely to be something he installed. Assuming you have had a chat about sensible internet use, and don't fancy doing this on a loop, create him his own login on the PC, and make bloody sure it's not an admin.
It hasn't come on from a Windows Update, it's likely to be something he installed. Assuming you have had a chat about sensible internet use, and don't fancy doing this on a loop, create him his own login on the PC, and make bloody sure it's not an admin.
Some fairly straight forward instructions for removal:
https://www.partitionwizard.com/partitionmanager/w...
I haven't tried this myself and backup anything important before starting, as always.
https://www.partitionwizard.com/partitionmanager/w...
I haven't tried this myself and backup anything important before starting, as always.
Fore Left said:
PUA = Potentially Unwanted Application
There should be an "affected Item" (or items) in the details. If you navigate to the folder you should be able to find and delete* the files.
* - I'd rename them first - change the file extension to delete or something - just in case it's a false positive and the file(s) are needed.
Hi, doesn't show up any affected items, we "block" it but after a quick scan it's still there unblocked.There should be an "affected Item" (or items) in the details. If you navigate to the folder you should be able to find and delete* the files.
* - I'd rename them first - change the file extension to delete or something - just in case it's a false positive and the file(s) are needed.
randlemarcus said:
As above should do it. See https://answers.microsoft.com/en-us/protect/forum/...
It hasn't come on from a Windows Update, it's likely to be something he installed. Assuming you have had a chat about sensible internet use, and don't fancy doing this on a loop, create him his own login on the PC, and make bloody sure it's not an admin.
Tried to follow that but the path doesn't seem to follow on his PC (Windows 10)It hasn't come on from a Windows Update, it's likely to be something he installed. Assuming you have had a chat about sensible internet use, and don't fancy doing this on a loop, create him his own login on the PC, and make bloody sure it's not an admin.
It says threat found, When you "Start Actions" to scan it shows "0 threats found" but still says "there may be threats on your device" after a quick scan
Ozone said:
Some fairly straight forward instructions for removal:
https://www.partitionwizard.com/partitionmanager/w...
I haven't tried this myself and backup anything important before starting, as always.
Worked our way to CacheManager and tried to delete the history as per instructions but it needs to be the Administrator. Now he is shown as the Administrator (although I normally oversee any installations). So why can't he delete or rename the three files in the history? all three have the suffix .binhttps://www.partitionwizard.com/partitionmanager/w...
I haven't tried this myself and backup anything important before starting, as always.
Just to add now he's gone in the shower, he's 16, has important exams shortly and uses the PC for everything.
He's wound up with stress from school, a serious family illness (Grandma) and now this. He's in a right state tonight which helps no one.
Wondering if a Malwarebytes prog would find and shift it?
He's wound up with stress from school, a serious family illness (Grandma) and now this. He's in a right state tonight which helps no one.
Wondering if a Malwarebytes prog would find and shift it?
Win10 feels quite circular with these things sometimes, going round and round and you never being sure what’s going on.
I like the alerting it does, but beyond that it’s poor.
Alerting for instance can be triggered by things like cheat codes, or old Win98 license keys in text files. Gaming trainers. Keygens.
So these files could be utterly harmless but Win10 wants you to be a saint, despite them lumping you with subversive data mining/snooping.
So yeah, virus total. Get a consensus view on the files.
And MWBAM, see what it thinks.
I let Win10 run with an iron fist over C drive, but exclude every other drive/network location etc.
I like the alerting it does, but beyond that it’s poor.
Alerting for instance can be triggered by things like cheat codes, or old Win98 license keys in text files. Gaming trainers. Keygens.
So these files could be utterly harmless but Win10 wants you to be a saint, despite them lumping you with subversive data mining/snooping.
So yeah, virus total. Get a consensus view on the files.
And MWBAM, see what it thinks.
I let Win10 run with an iron fist over C drive, but exclude every other drive/network location etc.
Google says "Is PUA Win32 Presnoker a virus? Although PUA has a general impact on the system performance or user experience, it is not considered as a virus and it's rather a false positive. According to a survey, the programs and apps that have no publisher will be flagged as PUA:Win32/Presenoker."
So could it have come from MS Windows and should we just forget it. I'm no computer expert, just used to use them 8 hours a day (ACAD, BRICSCAD, Microdrain, PDS etc)
Thanks for everyone's input, going to have to leave it now for about a week, but apologies now, I'll be back.
Thanks for everyone's input, going to have to leave it now for about a week, but apologies now, I'll be back.
Edited by Skyedriver on Sunday 3rd April 09:17
Quick Google found these
https://www.reddit.com/r/antivirus/comments/jdbuo6...
Says likely to be an ad deliverer
https://howtofix.guide/presenoker-removal/
https://www.reddit.com/r/antivirus/comments/jdbuo6...
Says likely to be an ad deliverer
https://howtofix.guide/presenoker-removal/
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff