PDA

View Full Version : System start up user entry - value deleted



kpantelis
2010-09-25, 16:49
Hello

I'm really new in spybot and I just installed it a week ago. I make a search and destroy and I deleted all the problem that they were found.

Now I have the following windows poping up when I open my PC, what can I do.

Catergory: System Startup user entry
Change: Value deleted
Entry: SpybotDeletingB7187
Old data: command.com /c del "C:\WINDOWS\wt\webdriver.dll

Whatever I do Allow change or Deny change still the problem is there every time.

Please help.

Zenobia
2010-09-26, 23:49
Hello. :)
That is Teatimer reporting to you about this start-up entry:
http://www.sysinfo.org/startuplist.php?filter=SpybotDeleting
This is a runonce entry,but for some reason you're being prompted about it being deleted on every start-up,from the looks of things.

Just for info,why that startup entry was added was because Spybot was removing part of Wild Tangent,which is in category Pups.
http://www.safer-networking.org/en/dictionary/pups.html

I assume you have the latest version of Spybot installed,since you're a newer user,but just to be sure,I'll ask if you have Spybot version 1.6.2.46 installed? :)

Let's look at your teatimer logfile,and see if that gives any clues to what is happening.The teatimer icon is located down in the notification area,by the computer clock.Could you rightclick that,select Show Log,then copy and paste the logfile here?

kpantelis
2010-09-27, 07:26
Hello!
Thanks for the reply.
The version that I have is 16.6.6.32
the logfile is to long, se below part of it :P :

20/09/2010 23:51:44 Denied (based on user decision) value "SpybotDeletingB8284" (new data: "") deleted in System Startup user entry!
20/09/2010 23:51:46 Denied (based on user decision) value "SpybotDeletingD7363" (new data: "") deleted in System Startup user entry!
20/09/2010 23:51:47 Denied (based on user decision) value "SpybotDeletingB4966" (new data: "") deleted in System Startup user entry!
20/09/2010 23:51:47 Denied (based on user decision) value "SpybotDeletingD5059" (new data: "") deleted in System Startup user entry!
20/09/2010 23:51:58 Denied (based on user decision) value "SpybotDeletingB7617" (new data: "") deleted in System Startup user entry!
20/09/2010 23:59:21 Denied (based on user decision) value "SpybotDeletingD8610" (new data: "") deleted in System Startup user entry!
21/09/2010 20:04:24 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
22/09/2010 18:07:02 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
22/09/2010 18:07:12 Allowed (based on lassh blacklist) value "ISUSPM Startup" (new data: ""C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup") changed in System Startup global entry!
22/09/2010 23:50:15 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
23/09/2010 17:52:05 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
23/09/2010 21:51:24 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
24/09/2010 20:13:04 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
25/09/2010 10:02:04 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
25/09/2010 12:32:26 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
25/09/2010 12:32:30 Denied (based on user decision) value "egui" (new data: "") deleted in System Startup global entry!
25/09/2010 12:41:59 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
25/09/2010 12:45:26 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
25/09/2010 18:01:42 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
26/09/2010 11:30:13 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
26/09/2010 11:30:28 Allowed (based on lassh blacklist) value "ISUSPM Startup" (new data: ""c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup") changed in System Startup global entry!
26/09/2010 17:06:06 Denied (based on user decision) value "Skype" (new data: ""C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized") added in System Startup user entry!
26/09/2010 17:06:41 Denied (based on user decision) value "{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" (new data: "") added in Browser Helper Object!
26/09/2010 20:20:35 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!
26/09/2010 20:20:52 Allowed (based on lassh blacklist) value "ISUSPM Startup" (new data: ""C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup") changed in System Startup global entry!
27/09/2010 08:15:36 Denied (based on user decision) value "SpybotDeletingB7187" (new data: "") deleted in System Startup user entry!

Zenobia
2010-09-27, 10:18
No problem,showing that part of the logfile is fine. :)
1.6.6.32 is the version number for Teatimer.Right above that,do you see a number that says Version 1.6.2.0?

Your logfile shows that you denied SpybotDeletingB7187 being deleted in all instances listed from the 20th to the 27th,so on your next startup,if prompted by Teatimer to Allow or Deny SpybotDeletingB7187,please click Allow,then restart your computer and let me know if you are prompted again on startup by teatimer. :)

kpantelis
2010-09-27, 18:25
Thanks for the quick respond it seems that is ok now. :) I press accept and restart pc now is ok. I remember pressing accept before and prompt me again the window. I also update the program I dont know if that was the problem. Thanks for the help!!!! Very nice forum you have here!!!

Zenobia
2010-09-27, 19:40
You're welcome. :)