PDA

View Full Version : i got some teatimer problems ...PLZ HELP



ccfderek
2008-07-15, 02:28
i got this in my resident...
when i was using my pc ...it appeared a lil scresn and i clicked allow ..
did i do anything wrong??? did i allow a virous/spyware/trojan to get in my computer???


2008/7/12 AM 02:20:59 allow (based on lassh blacklist) value "{17492023-C23A-453E-A040-C7C580BBF700}" (new data: "") added in ActiveX Distribution Unit!

also i did deny 2 things below.... did i do it right ...if not wut should i do??
2008/7/11 PM 07:26:37 allow (based on user decision) value "BootExecute" (new data: "") deeted in Session manager!
2008/7/11 PM 07:26:58 allow (based on user decision) value "ExcludeFromKnownDlls" (new data: "") deleted in Session manager!

Zenobia
2008-07-15, 02:35
The clsid(number in curly brackets) leads to this description on the castlecops active x list:
http://www.castlecops.com/atxlist-380.html

ccfderek
2008-07-15, 02:43
so this one, 2008/7/12 AM 02:20:59 allow (based on lassh blacklist) value "{17492023-C23A-453E-A040-C7C580BBF700}" (new data: "") added in ActiveX Distribution Unit!, should be FINE right???????

and how about other 2 things... ???

thx so much for replying

Zenobia
2008-07-15, 02:44
also i did deny 2 things below.... did i do it right ...if not wut should i do??
2008/7/11 PM 07:26:37 allow (based on user decision) value "BootExecute" (new data: "") deeted in Session manager!
2008/7/11 PM 07:26:58 allow (based on user decision) value "ExcludeFromKnownDlls" (new data: "") deleted in Session manager!
Please see if this helps:
http://forums.spybot.info/showthread.php?t=17691&highlight=ExcludeFromKnownDlls

Zenobia
2008-07-15, 02:53
so this one, 2008/7/12 AM 02:20:59 allow (based on lassh blacklist) value "{17492023-C23A-453E-A040-C7C580BBF700}" (new data: "") added in ActiveX Distribution Unit!, should be FINE right???????

Yes,it should. :)

ccfderek
2008-07-15, 03:17
i still have no idea abt other 2 things..
i did click allow to delete them in session manager.... i dun know if i did it wrong??????????????

Zenobia
2008-07-15, 18:41
Well,yes,in general it probably was okay to Allow those two entries to be deleted.


Without knowing what was going on in your system it is not possible to tell you whether to allow or deny the change. However unless you suspect that something malicious is deleting those values than more that likely some update took place that executed something at bootup and the entry is now being removed, in which case you should allow the change.

Zenobia
2008-07-15, 19:09
Also,you probably noticed this for the Active X entry:
(based on lassh blacklist)

Please see here for an explanation about that:
http://forums.spybot.info/project.php?issueid=270

And also:
http://forums.spybot.info/showthread.php?t=30443&highlight=LASSH

So,Teatimer is going to be auto-deciding on a lot of entries,which will make it much easier for you. :)