PDA

View Full Version : yahoo msngr /tea timer



vanbluffersn
2010-12-20, 00:32
when installing yahoo msngr on my laptop , tea timer asked me if i wanted to allow or deny changes to my registry. At the time i was in a hurry and upset and made an uninformed bad decision. I allowed some and denied others. Afterwards i could no longer access the internet. I have tried several solutions, and this has been going on for weeks so i have lost some of the specific details.


List of attempted fixes that did not work:
Basically i tried to uninstall and reinstall yahoo msngr.
Reinstall internet explorer 8.
Nothing in spybot black or white list to allow or deny processes.
Spybot log did show the registry changes that i did not allow(specifics lost now)
Uninstall spybot.
Repair internet connection.
yada yada yada.




any help would be greatly appreciated. there has got to be a simple fix here.

vanbluffersn
2010-12-21, 23:33
bump help pls

Zenobia
2010-12-22, 06:25
The resident log shouldn't have been removed(if I'm recalling that correctly) when you uninstalled Spybot,unless you went in and removed that Spybot directory by hand.
It should be in one of these locations:
Windows 95 or 98: C:\Windows\Aplication Data\Spybot - Search & Destroy\
Windows ME: C:\Windows\All Users\Application Data\Spybot - Search & Destroy\
Windows NT, 2000 or XP: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\
Windows Vista: C:\ProgramData\Spybot - Search & Destroy\

Windows 7 location is the same as Vista,I assume:
C:\ProgramData\Spybot - Search & Destroy\

If you would like,you could go in,and copy and paste the resident.log here,and I can have a peek,and see if I might be able to decipher what went on. :)

vanbluffersn
2010-12-24, 00:42
11/13/2010 12:16:07 AM Allowed (based on lassh blacklist) value "MSMSGS" (new data: ""C:\Program Files\Messenger\msmsgs.exe" /background") added in System Startup user entry!
12/5/2010 4:51:12 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\Owner\LOCALS~1\Temp\IXP000.TMP\"") added in System Startup global entry!
12/5/2010 4:51:14 PM Allowed (based on user decision) value "{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (new data: "hex:00") added in Global browser toolbar!
12/5/2010 4:51:20 PM Allowed (based on user decision) value "{02478D38-C3F9-4efb-9B51-7695ECA05670}" (new data: "") added in Browser Helper Object!
12/5/2010 4:51:21 PM Allowed (based on user decision) value "{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}" (new data: "") added in Browser Helper Object!
12/5/2010 4:51:23 PM Allowed (based on user decision) value "Messenger (Yahoo!)" (new data: ""C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe" -quiet") added in System Startup user entry!
12/5/2010 4:51:24 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
12/5/2010 5:03:54 PM Denied (based on user decision) value "ITBar7Layout" (new data: "hex:13,00,00,00,00,00,00,00,00,00,00,00,30,00,00,00,10,00,00,00,13,00,00,00,01,00,00,00,00,07,00,00,5E,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,") added in User-specific browser toolbar!
12/5/2010 5:03:59 PM Denied (based on user decision) value "ITBarLayout" (new data: "hex:11,00,00,00,00,00,00,00,00,00,00,00,04,00,00,00,1F,00,01,00,00,00,00,00,01,00,00,00,00,00,00,00,A0,0F,00,00,05,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,01,00,00,00,A0,0F,00,00,04,00,00,00,01,00,00,00,A0,0F,00,00,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,32,BD,99,EF,FB,C1,D2,11,89,2F,00,90,27,1D,4F,88,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,") added in User-specific browser toolbar!
12/5/2010 5:04:27 PM Denied (based on user decision) value "ITBar7Layout" (new data: "hex:13,00,00,00,00,00,00,00,00,00,00,00,30,00,00,00,10,00,01,00,32,00,00,00,01,00,00,00,00,07,00,00,5E,01,00,00,06,00,00,00,01,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,32,BD,99,EF,FB,C1,D2,11,89,2F,00,90,27,1D,4F,88,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,") added in User-specific browser toolbar!
12/5/2010 5:04:28 PM Denied (based on user decision) value "ITBarLayout" (new data: "hex:11,00,00,00,00,00,00,00,00,00,00,00,04,00,00,00,1F,00,01,00,00,00,00,00,01,00,00,00,00,00,00,00,A0,0F,00,00,05,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,01,00,00,00,A0,0F,00,00,04,00,00,00,01,00,00,00,A0,0F,00,00,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,32,BD,99,EF,FB,C1,D2,11,89,2F,00,90,27,1D,4F,88,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,") added in User-specific browser toolbar!
12/5/2010 5:04:47 PM Allowed (based on user decision) value "ITBar7Layout" (new data: "hex:13,00,00,00,00,00,00,00,00,00,00,00,30,00,00,00,10,00,01,00,32,00,00,00,01,00,00,00,00,07,00,00,5E,01,00,00,06,00,00,00,01,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,32,BD,99,EF,FB,C1,D2,11,89,2F,00,90,27,1D,4F,88,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,") added in User-specific browser toolbar!
12/5/2010 5:04:47 PM Allowed (based on user decision) value "ITBarLayout" (new data: "hex:11,00,00,00,00,00,00,00,00,00,00,00,04,00,00,00,1F,00,01,00,00,00,00,00,01,00,00,00,00,00,00,00,A0,0F,00,00,05,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,01,00,00,00,A0,0F,00,00,04,00,00,00,01,00,00,00,A0,0F,00,00,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,32,BD,99,EF,FB,C1,D2,11,89,2F,00,90,27,1D,4F,88,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,") added in User-specific browser toolbar!
12/5/2010 5:10:53 PM Allowed (based on lassh blacklist) value "{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (new data: "") deleted in Global browser toolbar!
12/5/2010 5:10:59 PM Allowed (based on user decision) value "{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}" (new data: "") deleted in Browser Helper Object!
12/10/2010 2:57:59 PM Allowed (based on user decision) value "Messenger (Yahoo!)" (new data: "") deleted in System Startup user entry!
12/10/2010 3:00:23 PM Allowed (based on user decision) value "BootExecute" (new data: "autocheck autochk *
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync
C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart
") changed in Session manager!
12/10/2010 3:02:15 PM Allowed (based on user decision) value "{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}" (new data: "") deleted in Browser Helper Object!
12/10/2010 3:02:17 PM Allowed (based on user decision) value "BootExecute" (new data: "autocheck autochk *
") changed in Session manager!
12/10/2010 3:02:21 PM Allowed (based on user decision) value "AVG_TRAY" (new data: "") deleted in System Startup global entry!
12/10/2010 3:02:39 PM Allowed (based on user decision) value "AvgUninstallURL" (new data: "cmd.exe /c start http://www.avg.com/ww.special-uninstallation-feedback-appf?lic=NFVZOVgtTlNWVkwtTzRCWlEtUUlNQ0wtUVREQ0gtNElKTUg"&"inst=NzctNDkxNTgzMDU5LVhPMTArMi1CMS1RSVgxKzM"&"prod=90"&"ver=10.0.1152") added in System Startup global entry!
12/10/2010 3:11:12 PM Allowed (based on user decision) value "AvgUninstallURL" (new data: "") deleted in System Startup global entry!
12/10/2010 3:11:13 PM Allowed (based on user decision) value "BootExecute" (new data: "autocheck autochk *
") changed in Session manager!

vanbluffersn
2010-12-24, 00:44
tnx for your time, I should add that i am using windows xp. I found this log file in program files. Tea timer still exists there....!!!??!!!

Zenobia
2010-12-28, 06:17
Sorry,got busy doing Christmas stuff,and forgot to keep a lookout for your post. :red:

I don't see anything too unusual in your resident.log.
(It's odd for the resident.log to be located in Program Files,btw.)

When you uninstalled Spybot,did you uninstall it through add/remove programs?

How do you connect to the internet?Do you have an "always on" internet connection,or do you have a connection manager,etc.?
Is it just Internet Explorer that doesn't connect to the internet,or you do you have no internet connection at all?

vanbluffersn
2010-12-28, 07:05
ive also been doing christmas things : P . I found teatimer in the folder for spybot in program files. I opened teatimer and i was able to get the log files there. You have given me an idea. As i stated b4 these problems were on my laptop,which was fresh from the repairman installing a new hard drive and os. There is a connection manager on the laptop which i am not too familiar, dealing with the wireless networks. i believe i have two conflicting network managers. One Dell manager and another, both wireless. I am trying to connect via hardline dsl. I will try to fiddle with those managers and figure out if one of their settings is my problem. ill keep you posted tnx for your time.

vanbluffersn
2010-12-28, 07:07
answers: atm not sure about the always on or not manager.

yes i removed spybot from uninstall programs list.

No program will connect to the internet.

vanbluffersn
2010-12-28, 07:36
Update: i corrected some settings in my wireless network manager and viola! internet access. I feel such a fool and need to thank you for your help. Mod you can move this thread to solved or whatever. Tnx again.

Zenobia
2010-12-29, 02:11
Glad you got your internet connection fixed. :)

re:teatimer still being present in the Spybot folder:
If you do not plan on reinstalling Spybot,then you could delete the Spybot - Search & Destroy folder in Program Files,and that should remove teatimer and anything else left behind.