spysheriff victim and mcafee virus

Hi

Well how about checking your pc out every fiveteen minutes or so while you get that online scan ?

Turn off Tea Timer if its on (right-click its icon in the tray area near the windows clock and choose exit) and close SpyBot if open. Download ResetTeaTimer.bat
http://downloads.subratam.org/ResetTeaTimer.bat
To your desktop, run ResetTeaTimer.bat.
Since it will not be needed again delete ResetTeaTimer.bat.
Turn Tea timer back on again via SpyBots tools resident page.

BUT first befire turning it back on you should read SpyBots help file about tea timer and information found here
http://forums.spybot.info/showthread.php?t=281
 
spy sherrif fix the last inches cont'd

Do I detect a slight loss of interest, or are you just enjoying the weekend? PLease stick with me, as I have pledged to follow thru with you, like the forum rules say "noting worse for you than for us to "bail" near the end").

By the way, Comcast isn't turning off my block, they just keep sending me their original block notification and "since you're still having problems" notices every time I send a direct web mail message telling them you have cleaned me and asking to be unblocked. Oh well, I'll wait til Monday.

Per my prior post, I checked and then immediately unchecked the tea timer box before hitting ok/apply (that's when the spybot message that tried changing mcafee filename case popped up) so I assume Tea Timer was still off from when you first had me uncheck it.
But, since we never ran resetteatimer.bat before, I went ahead and did it just now. Was that OK? (see log below, if you need to. Also I AM reading the spybot 4 level summary but frankly I don't understand enough about references to make a wise choice. I am going to do the Java uninstall, reinstall now, also.)

LOG FROM SAT 06 10 06 10 AM:

@echo off

VER|find "Windows 2000">NUL
IF NOT ERRORLEVEL 1 GOTO NT

VER|find "Windows XP">NUL
IF NOT ERRORLEVEL 1 GOTO NT

VER|find "Windows 95">NUL
IF NOT ERRORLEVEL 1 GOTO win

VER|find "Windows 98">NUL
IF NOT ERRORLEVEL 1 GOTO win

VER|find "Windows Millennium">NUL
IF NOT ERRORLEVEL 1 GOTO winme

VER|find "Windows 2003">NUL
IF NOT ERRORLEVEL 1 GOTO NT

echo Unsupported Version
goto last

:NT
del /q %SYSTEMDRIVE%\docume~1\alluse~1\applic~1\spybot~1\Snapshots\*.*
del /q %SYSTEMDRIVE%\docume~1\alluse~1\applic~1\spybot~1\excludes\RegKeyWhite.sbe
del /q %SYSTEMDRIVE%\docume~1\alluse~1\applic~1\spybot~1\excludes\RegKeyblack.sbe
del /q %SYSTEMDRIVE%\docume~1\alluse~1\applic~1\spybot~1\excludes\ProcWhite.sbe
del /q %SYSTEMDRIVE%\docume~1\alluse~1\applic~1\spybot~1\excludes\ProcBlack.sbe
del /q %SYSTEMDRIVE%\docume~1\alluse~1\applic~1\spybot~1\logs\resident.log
del /q %SYSTEMDRIVE%\docume~1\alluse~1\applic~1\spybot~1\excludes\UpdateDL.sbe

exit
:win

deltree /y %WINDIR%\applic~1\spybot~1\snapshots\*.*
del %WINDIR%\applic~1\spybot~1\logs\resident.log
del %WINDIR%\applic~1\spybot~1\excludes\ProcBlack.sbe
del %WINDIR%\applic~1\spybot~1\excludes\ProcWhite.sbe
del %WINDIR%\applic~1\spybot~1\excludes\RegKeyWhite.sbe
 
spy sheriff fix last few inches ?

So, I did that and then reset Tea Timer in Syybot.

Now I can't remember wher we are, except that CA's web scan does freezes even when I am monitoring it every 10 minutes with no other activity going on.

WOuld Panda be just as good?? or what?
 
spy sheriff fix the last inches cont'd

So I ran spybot and here is the results log, mostly cookies but including two HKEY entries, should I "fix"all or just the two or what? (remember right after I uninstalled all Java updates from control pane, then re-installed Java Runtime from their web site, and then followed Comcast's last instructions (below) to delete all internet temp files as follows (they said sometimes it doesn't work from the browser menu ??):

"1. Close all Internet Explorer windows you have open
2. Click on Start (If you are using a version of window other than XP, you will need to click on Settings after Start, to see the Control Panel Option.) 3. Select Control Panel 4. Double click on Internet Options 5. On the General Tab click on the Settings Button 6. Click on View Files 7. Select the Edit Option in the toolbar at the top of the page 8. Click on Select All 9. Press the Delete key on your keyboard 10. You will get a box asking if you if you want to delete all the selected files 11. Click on Yes on this box 12. Close the Temporary Internet Files Window you have open 13. Click Ok 14. Close the Control Panel"

So what do you think I should do about the Spybot report and the "final" web scan difficulty?
 
There are lots of places to get free online scans, several are mentioned in our sticky topics.

BY all means fix all items found with SpyBot

I think you can handle whatever pops up from here on out
 
spysheriff fix the last fraction of an inch ?

I hope you are right. Sometimes I sound smarter than I am, and then I forget what I did, or find out later that I didn't realize what I did or why and proceeded in a way that made it seem like I understood better than I really did - like, for instance: -, will I really understand what to do in the future ater I study the Spybot tutorials or will it be over my head? My only comfort is knowing that your forum :angel: will always be there for us - I hope.

Anyway, I cannot adaquately express my appreciation for all your effective help, except to say thank you, and with out your dedication and perservenance and patience, I would not be getting back to business at this point. Your fourm is fantastic and your performance on their behalf was outstanding. As soon as I get my new retirement business up and running smoothly, I will come back and make a donation to the cause. :bigthumb:

Please pass this on to your leaders.

Thanks again, I hope you are reaching your goals in life and are having a great time working at them. :crowned:

J. Peter Holsman :D
 
Im Glad we could help
Since the problems are solved Im going to close the topic now, this keeps others with similar problems from posting there logs/question here, they should start a new topic.
If you should need to post another log for the same PC let Me or Tashi know.
 
You must log in or register to reply here.
Back
Top