PDA

View Full Version : Denied Value message repeats



markap
2006-02-02, 16:43
Hi,

Any idea what this is and how to get it to stop? Thanks!!

2/2/2006 8:37:06 AM Denied value "{86227D9C-0EFE-4f8a-AA55-30386A3F5686}" (new data: "") deleted in Global browser toolbar!
2/2/2006 8:37:07 AM Denied value "{86227D9C-0EFE-4F8A-AA55-30386A3F5686}" (new data: "") deleted in User-specific browser toolbar!
Also, Spybot detects but can't seem to remove the following:
ClimaxBucks.InternetOptimizer
DyFuCA
ISearchTech.PowerScan
ISearchTech.Slotch
IsearchTech.YSB
WebRebates.TopRebates

Any suggestions?

md usa spybot fan
2006-02-02, 17:32
Any idea what this is and how to get it to stop? Thanks!!

2/2/2006 8:37:06 AM Denied value "{86227D9C-0EFE-4f8a-AA55-30386A3F5686}" (new data: "") deleted in Global browser toolbar!
2/2/2006 8:37:07 AM Denied value "{86227D9C-0EFE-4F8A-AA55-30386A3F5686}" (new data: "") deleted in User-specific browser toolbar!
Object Name: YourSiteBar
Guid: {86227D9C-0EFE-4F8A-AA55-30386A3F5686}
Filename: ys2.dll, ysb.dll
Description: YourSiteBar adware

Information from Symantec:
Adware.YourSiteBar
http://www.symantec.com/avcenter/venc/data/adware.yoursitebar.html

If you checked "Remember this decision" in TeaTimer on a change the information concerning that change it is stored in a file. TeaTimer uses that information to automatically "Allow" or "Deny" changes. It seems that you may have checked "Remember this decision" and "Deny change" when the toolbar was being remove. Go into TeaTimer's "White & Black List", look for and remove any entry relating to that change from the "Blocked registry changes". To do this:Right click on the TeaTimer system tray icon and select Settings. This will bring up TeaTimer's "White & Black List". There are four (4) Buttons across the top of the "White & Black List":

Allowed processes
Blocked processes
Allowed registry changes
Blocked registry changes

Note: If you don't see all four buttons, try expanding the window to the right.
You can review all the entries that you have stored by clicking on these buttons. The entries that you should review are in "Allowed registry changes" and "Blocked registry changes". You can delete entries by clicking on the scripted black "X" to the right of the entry that you want to delete and then clicking the "OK" button when you're done. This will in effect make TeaTimer forget what you told it to remember so that during future changes to these items TeaTimer will issue a pop-up dialog rather then just a notification pop-up.

After removing the above entry, if you get a pop-up dialog for the removal of that registry entry do a "Allow change" without the "Remember this decision" option. After you have allow the removal of the registry entry, refresh TeaTimer's snapshot files as follows:
Right click Spybot's TeaTimer System Tray Icon > click Exit Spybot-S&D Resident. [LIST]
TeaTimer closes.
TeaTimer's snapshot files are refreshed at this time.

Restart TeaTimer:
Using Windows Explorer, navigate to C:\Program Files\Spybot - Search & Destroy.
Double click TeaTimer.exe to start it.



Also, Spybot detects but can't seem to remove the following:
ClimaxBucks.InternetOptimizer
DyFuCA
ISearchTech.PowerScan
ISearchTech.Slotch
IsearchTech.YSB
WebRebates.TopRebates
There are two things that you can try to get rid of the things that Spybot-S&D is having difficulty removing:
Try to run it the next time you reboot.
Go into Spybot > Mode > Advanced mode > Settings > Settings > look for "System start" (located half way down the page).
Check the option: "Run program once at next system startup".
Reboot the system.
Run it in Safe mode.
Reboot your system in Safe mode and run Spybot-S&D.
If Spybot-S&D still fails to remove the problems you can request assistance in the Malware Removal forum.

Follow the instructions here:
Before you post a log
http://forums.spybot.info/showthread.php?t=288
Then post in the following forum:
Malware Removal
http://forums.spybot.info/forumdisplay.php?f=22

markap
2006-02-04, 18:10
Thanks for the help - everything is all better now.

Sincerely.
Markap :beerbeerb