Right click and save link as
Save it as resetteatimer.bat
Save it to your Desktop
1) Run Spybot-S&D
2) Go to the Mode menu, and make sure "Advanced Mode" is selected
3) On the left hand side, choose Tools -> Resident
4) Uncheck "Resident TeaTimer" and OK any prompts
5) Restart your computer.
Double click on resetteatimer.bat and wait for it to finish
Since it will not be needed again, delete ResetTeaTimer.bat after you run it.
When we are COMPLETELY finished with ALL your fixes, you can turn Teatimer back on again via SpyBot's tools resident page.
Rightclick on an empty space on your desktop and choose New > Folder
Name it HijackThis (HJT, or something similar)
Rightclick HijackThis.exe, choose Cut.
Doubleclick (to open) the folder you created.
Rightclick inside and choose Paste.
Please run MBAM again, and post that log along with a fresh Hijackthis log.
Also if TrendMicro is still giving you alerts about it, please copy and post the text of notifications from TrendMicro that indicate that the "offender" is still present.
Thanks for the reply. I didn't realize that I had TeaTimer running on my machine. It isn't something that I intentionally loaded. Unfortunately, I uninstalled SpyBot because I thought it was conflicting with TrendMicro. I kept getting messages that SpyBot found important registry items that had been changed. Should I re-install SpyBot and follow your instructions below?
TeaTimer was running in your last HijackThis log. We were not uninstalling it. We were running a .bat to take care of those messages you were getting from Spybot.
From now on while we are working on this, please print or copy all instructions to Notepad in order to assist you when carrying out procedures.
Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that you have not been instructed to use because this may cause conflicts with the tools that I am using.
Please post a fresh HijackThis log now that you have uninstalled Spybot.
Thanks.
Bugbatter
3 Apprentice
•
20.5K Posts
0
April 2nd, 2008 15:00
Most likely TeaTimer was interfering with removal.
While both Teatimer and SpyBot are closed:
Download ResetTeaTimer.bat to remove all entries set by TeaTimer (and preventing TeaTimer from restoring them upon reactivation).
http://downloads.subratam.org/ResetTeaTimer.bat
Alternate link:
http://www.bleepingcomputer.com/files/lonny/ResetTeaTimer.bat
Right click and save link as
Save it as resetteatimer.bat
Save it to your Desktop
1) Run Spybot-S&D
2) Go to the Mode menu, and make sure "Advanced Mode" is selected
3) On the left hand side, choose Tools -> Resident
4) Uncheck "Resident TeaTimer" and OK any prompts
5) Restart your computer.
Double click on resetteatimer.bat and wait for it to finish
Since it will not be needed again, delete ResetTeaTimer.bat after you run it.
When we are COMPLETELY finished with ALL your fixes, you can turn Teatimer back on again via SpyBot's tools resident page.
Rightclick on an empty space on your desktop and choose New > Folder
Name it HijackThis (HJT, or something similar)
Rightclick HijackThis.exe, choose Cut.
Doubleclick (to open) the folder you created.
Rightclick inside and choose Paste.
Please run MBAM again, and post that log along with a fresh Hijackthis log.
Also if TrendMicro is still giving you alerts about it, please copy and post the text of notifications from TrendMicro that indicate that the "offender" is still present.
chattingnettie
6 Posts
0
April 2nd, 2008 17:00
Hi,
Thanks for the reply. I didn't realize that I had TeaTimer running on my machine. It isn't something that I intentionally loaded. Unfortunately, I uninstalled SpyBot because I thought it was conflicting with TrendMicro. I kept getting messages that SpyBot found important registry items that had been changed. Should I re-install SpyBot and follow your instructions below?
Bugbatter
3 Apprentice
•
20.5K Posts
0
April 2nd, 2008 19:00
From now on while we are working on this, please print or copy all instructions to Notepad in order to assist you when carrying out procedures.
Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that you have not been instructed to use because this may cause conflicts with the tools that I am using.
Please post a fresh HijackThis log now that you have uninstalled Spybot.
Thanks.