3 replies to this topic

[kevbuck]

Not sure exactly where to post this. I hope here is good enough
No scans were done- just spybot s&d resident teatimer log(the problem)
I need help asap- need to finish taxes ugh

Running mbam, spybot s&d, avg, zonealarm and secunia psi
Installed new printer last night, decided to update security before bed, while trying to update mbam/box pops up informing me that mbam will close to install update--then---spybot resident teatimer box pops up and says hot tv in mbam has been deleted. I assumed this was a conflict and i would double check here this morning and then do a system restore to fix it.
However, upon booting up this morning a popup tells me that the C: Program cannot be found ( what the ?????)What program???
Tried to do several system restore points--even back to april 1, both system points and spybot restore points -- no go
I shut down resident teatimer and tried again-no go
I have included below a copy of the teatimer log--note the entries for april 6th & 7th
Please help and understand that i know very little so i would need step by step instructions
Thank you so much for your help

4/6/2009 12:45:10 PM Allowed (based on user decision) value "{3041D03E-FD4B-44E0-B742-2D9B88305F98}" (new data: "") deleted in User-specific browser toolbar!
4/6/2009 1:12:58 PM Allowed (based on user decision) value "{3041D03E-FD4B-44E0-B742-2D9B88305F98}" (new data: "hex:3E,D0,41,30,4B,FD,E0,44,B7,42,2D,9B,88,30,5F,98") added in User-specific browser toolbar!
4/6/2009 6:13:23 PM Allowed (based on lassh blacklist) value "SSBkgdUpdate" (new data: ""C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot") added in System Startup global entry!
4/6/2009 6:13:39 PM Allowed (based on lassh blacklist) value "PaperPort PTD" (new data: "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe") added in System Startup global entry!
4/6/2009 6:13:57 PM Allowed (based on lassh blacklist) value "IndexSearch" (new data: "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe") added in System Startup global entry!
4/6/2009 6:22:47 PM Allowed (based on lassh blacklist) value "BrMfcWnd" (new data: "C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN") added in System Startup global entry!
4/6/2009 6:22:56 PM Allowed (based on user decision) value "SetDefPrt" (new data: "C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe") added in System Startup global entry!
4/6/2009 6:23:04 PM Allowed (based on user decision) value "Brother MFC-240C USB" (new data: "C:\Program Files\Brother\Brmfl06a\BrWiEvRg.exe /R /M="Brother MFC-240C USB" /A="ControlCenter3"") added in System Startup global entry!
4/6/2009 6:23:11 PM Allowed (based on user decision) value "Installation Diagnostics" (new data: ""C:\Program Files\Brother\Brmfl06a\Brinstck.exe" /I MFC-240C USB") added in System Startup global entry!
4/6/2009 6:23:17 PM Allowed (based on user decision) value "ControlCenter3" (new data: "C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun") added in System Startup global entry!
4/6/2009 6:45:53 PM Allowed (based on lassh blacklist) value "PPort9reminder" (new data: ""C:\Program Files\ScanSoft\PaperPort\WebEreg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\9\Config\ereg.ini"") added in System Startup global entry!
4/6/2009 7:03:39 PM Allowed (based on user decision) value "Installation Diagnostics" (new data: "") deleted in System Startup global entry!
4/6/2009 7:03:40 PM Allowed (based on user decision) value "Brother MFC-240C USB" (new data: "") deleted in System Startup global entry!
4/6/2009 7:25:34 PM Allowed (based on user decision) value "Brother MFC-240C USB" (new data: "C:\Program Files\Brother\Brmfl06a\BrWiEvRg.exe /R /M="Brother MFC-240C USB" /A="ControlCenter3"") added in System Startup global entry!
4/6/2009 7:25:47 PM Allowed (based on user decision) value "Installation Diagnostics" (new data: ""C:\Program Files\Brother\Brmfl06a\Brinstck.exe" /I MFC-240C USB") added in System Startup global entry!
4/6/2009 7:32:38 PM Allowed (based on user decision) value "Installation Diagnostics" (new data: "") deleted in System Startup global entry!
4/6/2009 7:32:39 PM Allowed (based on user decision) value "Brother MFC-240C USB" (new data: "") deleted in System Startup global entry!
4/6/2009 9:46:39 PM Allowed (based on user decision) value "Malwarebytes' Anti-Malware" (new data: "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent") added in System Startup global entry!
4/6/2009 9:46:39 PM Encountered and terminated HotTV in C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe!
4/7/2009 10:34:19 AM Allowed (based on user decision) value "Malwarebytes' Anti-Malware" (new data: "") deleted in System Startup global entry!
4/7/2009 10:35:37 AM Allowed (based on user decision) value "*Restore" (new data: "C:\WINDOWS\system32\restore\rstrui.exe -i") added in System Startup global entry!
4/7/2009 11:20:32 AM Allowed (based on user decision) value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!

[tango54]

Run msconfig, disable all start up processes, then reboot

[kevbuck]

tango54, on Apr 8 2009, 03:35 PM, said:

Run msconfig, disable all start up processes, then reboot

[kevbuck]

Thanks tango54
However, as i said i know very little, so i need step by step instructions
I don't know how to do this, nor do i know what it means and why this happened
If you could please elaborate