Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Spyware and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Important Announcement: We have two terrific contests running on the site that I wanted all our members and guests to know about.

The first contest is the HP Magic Giveaway, which is underway as of November 28th. More information can be found at this topic, which will be updated very soon with further information.

The second contests, is for the chance to win two Seagate FreeAgent external hard drives. More information about this contest can be found here.

These are both amazing contests and I suggest everyone submit an entry for them.

- BleepingComputer Management
 
Reply to this topicStart new topic
> Spybot S&d, teatimer
craneop
post Mar 16 2008, 01:41 PM
Post #1


Member
**

Group: Members
Posts: 101
Joined: 22-December 07
From: mountains
Member No.: 178,287



Hello, I hope this is the right forum. I know that this is an easy fix, but i'm frustrated. I have been removing malware all weekend. I just reinstalled spybot s&d. There are three user accts on comp. Running windows xp sp2. The problem is that teatimer, is only starting on the admin acct that it was installed from. It is not starting on the two limited accts.Spybot is installed in C:\programs,but i can't locate the icon for teatimer in the folder, to move to the all users startup folder. I believe that in my frustration i'm over looking something. Any help would be greatly appreciated . Thanks Joe Mc
Go to the top of the page
 
+Quote Post
DaChew
post Mar 16 2008, 01:47 PM
Post #2


Visiting Alien
******

Group: Members
Posts: 4,987
Joined: 20-May 07
From: millenium falcon and rockytop
Member No.: 131,963



are all three user accounts administative? or the other 2 limited users(xp?)

teatimer is protecting administrative changes to the registry?


--------------------
Chewy

life is like a box of chocolates and stupid is as stupid does but you can always run
Go to the top of the page
 
+Quote Post
craneop
post Mar 16 2008, 01:51 PM
Post #3


Member
**

Group: Members
Posts: 101
Joined: 22-December 07
From: mountains
Member No.: 178,287



Chewy, I appreciate the reply. The two accts that teatimer isn't showing on are limited. Is that ok ? I have had 3 malware problems in the last 6 months and believe it's from one of the limited accts d\ling pictures.
Go to the top of the page
 
+Quote Post
DaChew
post Mar 16 2008, 02:04 PM
Post #4


Visiting Alien
******

Group: Members
Posts: 4,987
Joined: 20-May 07
From: millenium falcon and rockytop
Member No.: 131,963



jpegs and mp3's are pretty foolproof until it involves some microsoft program with some vulnerabilty that can be exploited

now IE or java from a bad website is a different story, the new spybot immunize should protect from the worst sites since the hosts file protection is global

someone can still install malware from a limited account by running as administrator, is your account password protected?

the default safe mode hidden adminstrator's account should be protected also, kids pass these tricks around, you can run a script from safe mode and enable that login for normal mode, run the script again and turn it off before you come home

I had this all types out and someone moved the post


--------------------
Chewy

life is like a box of chocolates and stupid is as stupid does but you can always run
Go to the top of the page
 
+Quote Post
craneop
post Mar 16 2008, 02:14 PM
Post #5


Member
**

Group: Members
Posts: 101
Joined: 22-December 07
From: mountains
Member No.: 178,287



Thanks Chewy, Yes the admin acct is p\w protected. I have been browsing thru the am i infected forum. I first noticed the malware problems when is started folding. After browsing the forums, i'm wondering if i have ever gotten rid of the malware to begin with. I do all my banking/bill's online. I won't be doing that anymore until i figure out whats up.This weekend my av/malware programs found.RiskTool.Win32.PsKill.p
Trojan.WinREG.StartPage
Trojan.Win32.RC5_Dropper.e Trojan horse downloader. presario A Anything else I should be doing would be greatly appreciated. Should I post in the am i infected forum ? Thanks joe mc
Go to the top of the page
 
+Quote Post
DaChew
post Mar 16 2008, 02:26 PM
Post #6


Visiting Alien
******

Group: Members
Posts: 4,987
Joined: 20-May 07
From: millenium falcon and rockytop
Member No.: 131,963



post some logs and details there, but just for the programs you are using

if it looks like it's a more serious problem then you will be refered on to the hijackthis forum, they are overloaded and there's quite a wait there, unfortunately there's not enough trained helpers to go around

don't get carried away with do-it-yourself fixes and use dangerous tools, you'll be reloading your computer



--------------------
Chewy

life is like a box of chocolates and stupid is as stupid does but you can always run
Go to the top of the page
 
+Quote Post
craneop
post Mar 16 2008, 02:28 PM
Post #7


Member
**

Group: Members
Posts: 101
Joined: 22-December 07
From: mountains
Member No.: 178,287



Thanks Chewy , i Will post there. Thanks for the help. Joe mc
Go to the top of the page
 
+Quote Post
DaChew
post Mar 16 2008, 02:38 PM
Post #8


Visiting Alien
******

Group: Members
Posts: 4,987
Joined: 20-May 07
From: millenium falcon and rockytop
Member No.: 131,963



I forgot to mention, one of the most dangerous programs in my experience is teatimer

that's the first thing they turn off when they are trying to fix your computer


--------------------
Chewy

life is like a box of chocolates and stupid is as stupid does but you can always run
Go to the top of the page
 
+Quote Post
craneop
post Mar 16 2008, 03:01 PM
Post #9


Member
**

Group: Members
Posts: 101
Joined: 22-December 07
From: mountains
Member No.: 178,287



Chewy, I have learned more from coming to bleeping comp,in the last few months. You guys/gals are great. I wish that i had a better understanding of computers when i started. I could have avoided alot of problems. I will turn teatimer off now. Thanks Joe MC
Go to the top of the page
 
+Quote Post
ruby1
post Mar 16 2008, 04:08 PM
Post #10


a forum member
******

Group: Members
Posts: 2,218
Joined: 27-August 07
Member No.: 153,171



to assist; this thread http://www.bleepingcomputer.com/forums/ind...howtopic=136654

is now running in the 'am I infected' section ,to avoid duplication of advise


--------------------
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 2nd December 2008 - 02:52 AM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Malware Removal Guides

© 2003-2008 All Rights Reserved Bleeping Computer LLC.