spybot registry change block

new

« Prev
1
Next »

fairywings
New Member

Posts: 3

spybot registry change block Jan 20, 2006 20:04:25 GMT

Quote

Post by fairywings on Jan 20, 2006 20:04:25 GMT

hi i have spybot on my computer and i keep getting a box popping up saying registry change blocked, but i don't know if i'm blocking the right thing or not here is a copy of the changes set to block if somebody could let me know if i'm blocking the right things i would be so grateful.

"{6E5A37BF-FD42-463A-877C-4EB7002E68AE}" (new data: "") added in ActiveX Distribution Unit!
13/01/2006 14:08:50 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
13/01/2006 16:59:40 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
13/01/2006 17:02:41 Denied value "MSConfig" (new data: "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto") added in System Startup global entry!
13/01/2006 17:48:16 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
13/01/2006 20:33:09 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
13/01/2006 20:49:02 Allowed value "wextract_cleanup0" (new data: "rundll32.exe C:\WINDOWS\System32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\ANNE\LOCALS~1\Temp\IXP000.TMP\"") added in System Startup global entry!
13/01/2006 20:49:09 Denied value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
13/01/2006 21:08:43 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
14/01/2006 16:41:00 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
14/01/2006 16:55:58 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:55:59 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:00 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:01 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:02 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:03 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:07 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:10 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:15 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:17 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:18 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:20 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:57:59 Denied value "OE_WMPWMFSDK_Install_2" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmnetmgr.dll"") added in System Startup global entry!
14/01/2006 16:57:59 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:00 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:02 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:03 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:04 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:05 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:07 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:08 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:09 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:10 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:11 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:12 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:13 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:14 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:15 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:17 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:18 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:19 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:20 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:21 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:22 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:23 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:24 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:25 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:26 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:27 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:29 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:30 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:31 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:32 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:33 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:34 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:35 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:36 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:37 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:39 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:40 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:41 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:42 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:43 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 17:35:56 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
14/01/2006 17:36:27 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
15/01/2006 16:08:49 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
15/01/2006 16:10:48 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
15/01/2006 16:12:29 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
15/01/2006 16:13:34 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
16/01/2006 13:20:25 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
16/01/2006 13:22:47 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
16/01/2006 13:24:18 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
16/01/2006 13:26:28 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
16/01/2006 13:27:24 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
16/01/2006 23:05:55 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
17/01/2006 15:52:19 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
17/01/2006 15:55:28 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
17/01/2006 20:43:19 Denied value "QuickTime Task" (new data: ""C:\Program Files\QuickTime\qttask.exe" -atboottime") added in System Startup global entry!
17/01/2006 20:44:09 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
17/01/2006 20:47:48 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
17/01/2006 20:47:52 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
17/01/2006 20:47:57 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
17/01/2006 20:48:04 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
17/01/2006 20:48:25 Allowed value "BearShare" (new data: ""C:\Program Files\BearShare\BearShare.exe" /pause") added in System Startup global entry!
17/01/2006 20:48:30 Allowed value "VVSN" (new data: "C:\Program Files\VVSN\VVSN.exe") added in System Startup global entry!
17/01/2006 22:22:50 Allowed value "VVSN" (new data: "") deleted in System Startup global entry!
17/01/2006 22:28:20 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
17/01/2006 22:34:09 Denied value "{21569614-B795-46B1-85F4-E737A8DC09AD}" (new data: "") added in User-specific browser toolbar!
17/01/2006 22:34:10 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
18/01/2006 15:09:18 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
18/01/2006 15:09:40 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
18/01/2006 15:10:23 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
18/01/2006 15:13:33 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
19/01/2006 11:29:40 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
19/01/2006 11:33:50 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
19/01/2006 13:51:42 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
19/01/2006 20:12:16 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
19/01/2006 20:12:44 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
19/01/2006 20:13:04 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
19/01/2006 20:16:25 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
20/01/2006 16:34:44 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
20/01/2006 16:34:51 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
20/01/2006 16:38:00 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!

NHH
Administrator

Posts: 327

spybot registry change block Jan 22, 2006 1:46:53 GMT

Quote

Post by NHH on Jan 22, 2006 1:46:53 GMT

Looks as if you need to update Spybot and scan your system, maybe even run a virus scan to look for trojans, why?.....

-------------------------------------------------------------------------------
17/01/2006 20:47:48 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
17/01/2006 20:48:25 Allowed value "BearShare" (new data: ""C:\Program Files\BearShare\BearShare.exe" /pause") added in System Startup global entry!
17/01/2006 20:48:30 Allowed value "VVSN" (new data: "C:\Program Files\VVSN\VVSN.exe") added in System Startup global entry!
17/01/2006 22:22:50 Allowed value "VVSN" (new data: "") deleted in System Startup global entry!
17/01/2006 22:28:20 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
17/01/2006 22:34:09 Denied value "{21569614-B795-46B1-85F4-E737A8DC09AD}" (new data: "") added in User-specific browser toolbar!
-------------------------------------------------------------------------------

You've installed the Bearshare file sharing program which is wracked with spyware, not only has it managed to successfuly install a browser toolbar and 'VVSN' adware but it's also included the nasty 'WhenU' malware which will require a virus scan as well as an spyware scan to remove, you may need to disconnect your PC from the internet in order to successfully remove these.

Hope that helps

Last Edit: Jan 22, 2006 1:51:44 GMT by NHH

fairywings
New Member

Posts: 3

spybot registry change block Jan 31, 2006 22:58:27 GMT

Quote

Post by fairywings on Jan 31, 2006 22:58:27 GMT

thank you for your help i did what you said did scans updated spybot, i got rid of bearshare here is the most recent logfile.

11/01/2006 22:38:11 Denied value "{6E5A37BF-FD42-463A-877C-4EB7002E68AE}" (new data: "") added in ActiveX Distribution Unit!
13/01/2006 14:08:50 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
13/01/2006 16:59:40 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
13/01/2006 17:02:41 Denied value "MSConfig" (new data: "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto") added in System Startup global entry!
13/01/2006 17:48:16 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
13/01/2006 20:33:09 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
13/01/2006 20:49:02 Allowed value "wextract_cleanup0" (new data: "rundll32.exe C:\WINDOWS\System32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\ANNE\LOCALS~1\Temp\IXP000.TMP\"") added in System Startup global entry!
13/01/2006 20:49:09 Denied value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
13/01/2006 21:08:43 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
14/01/2006 16:41:00 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
14/01/2006 16:55:58 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:55:59 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:00 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:01 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:02 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:03 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:07 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:10 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:15 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:17 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:18 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:56:20 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:57:59 Denied value "OE_WMPWMFSDK_Install_2" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmnetmgr.dll"") added in System Startup global entry!
14/01/2006 16:57:59 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:00 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:02 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:03 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:04 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:05 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:07 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:08 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:09 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:10 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:11 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:12 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:13 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:14 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:15 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:17 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:18 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:19 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:20 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:21 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:22 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:23 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:24 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:25 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:26 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:27 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:29 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:30 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:31 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:32 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:33 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:34 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:35 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:36 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:37 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:39 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:40 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:41 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:42 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 16:58:43 Denied value "{8E718888-423F-11D2-876E-00A0C9082467}" (new data: "") deleted in Global browser toolbar!
14/01/2006 17:35:56 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
14/01/2006 17:36:27 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
15/01/2006 16:08:49 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
15/01/2006 16:10:48 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
15/01/2006 16:12:29 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
15/01/2006 16:13:34 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
16/01/2006 13:20:25 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
16/01/2006 13:22:47 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
16/01/2006 13:24:18 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
16/01/2006 13:26:28 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
16/01/2006 13:27:24 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
16/01/2006 23:05:55 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
17/01/2006 15:52:19 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
17/01/2006 15:55:28 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
17/01/2006 20:43:19 Denied value "QuickTime Task" (new data: ""C:\Program Files\QuickTime\qttask.exe" -atboottime") added in System Startup global entry!
17/01/2006 20:44:09 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
17/01/2006 20:47:48 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
17/01/2006 20:47:52 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
17/01/2006 20:47:57 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
17/01/2006 20:48:04 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
17/01/2006 20:48:25 Allowed value "BearShare" (new data: ""C:\Program Files\BearShare\BearShare.exe" /pause") added in System Startup global entry!
17/01/2006 20:48:30 Allowed value "VVSN" (new data: "C:\Program Files\VVSN\VVSN.exe") added in System Startup global entry!
17/01/2006 22:22:50 Allowed value "VVSN" (new data: "") deleted in System Startup global entry!
17/01/2006 22:28:20 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
17/01/2006 22:34:09 Denied value "{21569614-B795-46B1-85F4-E737A8DC09AD}" (new data: "") added in User-specific browser toolbar!
17/01/2006 22:34:10 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
18/01/2006 15:09:18 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
18/01/2006 15:09:40 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
18/01/2006 15:10:23 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
18/01/2006 15:13:33 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
19/01/2006 11:29:40 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
19/01/2006 11:33:50 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
19/01/2006 13:51:42 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
19/01/2006 20:12:16 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
19/01/2006 20:12:44 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
19/01/2006 20:13:04 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
19/01/2006 20:16:25 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
20/01/2006 16:34:44 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
20/01/2006 16:34:51 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
20/01/2006 16:38:00 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
20/01/2006 22:12:25 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
21/01/2006 11:44:23 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
21/01/2006 11:48:33 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
21/01/2006 12:35:42 Denied value "QuickTime Task" (new data: ""C:\Program Files\QuickTime\qttask.exe" -atboottime") added in System Startup global entry!
21/01/2006 12:45:08 Allowed value "VVSN" (new data: "C:\Program Files\VVSN\VVSN.exe") added in System Startup global entry!
21/01/2006 12:45:12 Encountered and terminated WhenU.Search.Desktoptoolbar in C:\Program Files\VVSN\VVSN.exe!
21/01/2006 12:46:10 Allowed value "WhenUSave" (new data: ""C:\Program Files\Save\Save.exe"") added in System Startup user entry!
21/01/2006 12:46:33 Encountered and terminated WhenU.SaveNow in C:\Program Files\Save\Save.exe!
21/01/2006 12:46:39 Encountered and terminated WhenU.SaveNow in C:\Program Files\Save\Save.exe!
21/01/2006 12:46:45 Encountered and terminated WhenU.SaveNow in C:\Program Files\Save\Save.exe!
21/01/2006 12:47:10 Allowed value "VVSN" (new data: "") deleted in System Startup global entry!
21/01/2006 13:03:01 Denied value "{D27CDB6E-AE6D-11CF-96B8-444553540000}" (new data: "") added in ActiveX Distribution Unit!
21/01/2006 14:55:31 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
21/01/2006 15:07:05 Allowed value "wextract_cleanup0" (new data: "rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\ANNE\LOCALS~1\Temp\IXP000.TMP\"") added in System Startup global entry!
21/01/2006 15:10:02 Allowed value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
21/01/2006 15:12:34 Encountered and terminated WhenU.SaveNow in C:\Program Files\Save\SaveUninst.exe!
21/01/2006 15:15:41 Encountered and terminated WhenU.SaveNow in C:\Program Files\Save\Save.exe!
21/01/2006 15:15:53 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
21/01/2006 15:20:56 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
21/01/2006 15:24:02 Allowed value "WhenUSave" (new data: "") deleted in System Startup user entry!
23/01/2006 07:09:33 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
23/01/2006 07:13:49 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
23/01/2006 15:23:14 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
23/01/2006 15:27:26 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
23/01/2006 15:44:46 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
23/01/2006 19:40:01 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
23/01/2006 19:43:50 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
23/01/2006 20:34:39 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
24/01/2006 00:03:56 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
24/01/2006 00:09:43 Denied value "{21569614-B795-46B1-85F4-E737A8DC09AD}" (new data: "") added in User-specific browser toolbar!
24/01/2006 11:44:39 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
24/01/2006 20:06:51 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
24/01/2006 20:10:13 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
25/01/2006 14:24:43 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
26/01/2006 15:47:23 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
26/01/2006 17:26:01 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
26/01/2006 17:41:05 Denied value "KernelFaultCheck" (new data: "") deleted in System Startup global entry!
26/01/2006 17:41:06 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
26/01/2006 17:41:10 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
26/01/2006 18:02:47 Denied value "{21569614-B795-46B1-85F4-E737A8DC09AD}" (new data: "") added in User-specific browser toolbar!
26/01/2006 22:13:03 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
26/01/2006 23:28:47 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
27/01/2006 11:47:49 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
27/01/2006 11:51:34 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
27/01/2006 11:55:44 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
27/01/2006 11:57:27 Allowed value "ALUAlert" (new data: "C:\Program Files\Symantec\LiveUpdate\ALUNOTIFY.EXE") added in System Startup global entry!
27/01/2006 20:34:57 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
27/01/2006 20:37:11 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
27/01/2006 21:30:48 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
27/01/2006 21:31:32 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
28/01/2006 12:19:02 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
28/01/2006 14:16:55 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
28/01/2006 14:40:13 Denied value "{21569614-B795-46B1-85F4-E737A8DC09AD}" (new data: "") added in User-specific browser toolbar!
28/01/2006 14:44:33 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
28/01/2006 14:56:44 Denied value "{21569614-B795-46B1-85F4-E737A8DC09AD}" (new data: "") added in User-specific browser toolbar!
30/01/2006 12:50:30 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
30/01/2006 12:54:45 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
30/01/2006 21:28:03 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
30/01/2006 21:32:11 Denied value "SSC_UserPrompt" (new data: "") deleted in System Startup global entry!
30/01/2006 22:29:27 Allowed value "{6E32070A-766D-4EE6-879C-DC1FA91D2FC3}" (new data: "") added in ActiveX Distribution Unit!
30/01/2006 22:32:40 Allowed value "wextract_cleanup0" (new data: "rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\ANNE\LOCALS~1\Temp\IXP000.TMP\"") added in System Startup global entry!
30/01/2006 22:32:59 Allowed value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
30/01/2006 23:23:33 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
31/01/2006 10:09:04 Denied value "{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}" (new data: "") added in User-specific browser toolbar!
31/01/2006 10:09:25 Denied value "{EFA24E64-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
31/01/2006 15:42:50 Denied value "EmailChecker" (new data: "") deleted in System Startup global entry!
31/01/2006 15:53:10 Denied value "{EFA24E61-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
31/01/2006 16:23:21 Denied value "{EFA24E62-B078-11D0-89E4-00C04FC9E26E}" (new data: "") added in User-specific browser toolbar!
31/01/2006 20:54:48 Allowed value "{17492023-C23A-453E-A040-C7C580BBF700}" (new data: "") added in ActiveX Distribution Unit!

Is there still a problem, and am i blocking the correct changes thank you.

NHH
Administrator

Posts: 327

spybot registry change block Feb 6, 2006 7:20:21 GMT

Quote

Post by NHH on Feb 6, 2006 7:20:21 GMT

Hi again,

Looks as if the WhenU malware is still on your system, even though it may have been removed with Spybot it is being replaced by a trojan resident on your system.
This trojan is likely to be residing in the 'System Restore' area which can't be scanned for viruses unless you disable System Restore first as explained here

Disable System Restore then use a decent anti virus program to get rid, then you will need to repeat a spyware scan with Spybot.

Hope that helps...

tinkabell
Guest

spybot registry change block Feb 6, 2006 20:48:45 GMT

Quote

Post by tinkabell on Feb 6, 2006 20:48:45 GMT

Hello i did everything you said and there were alot of tracking cookies found, there hasn't been any more registry changed blocked pop-ups so hopefully they are all gone. Thank you so much for your help, i didn't know bearshare was so bad, do you know any safe free music download sites?

nethomehelp

spybot registry change block

Post by fairywings on Jan 20, 2006 20:04:25 GMT

Post by NHH on Jan 22, 2006 1:46:53 GMT

Post by fairywings on Jan 31, 2006 22:58:27 GMT

Post by NHH on Feb 6, 2006 7:20:21 GMT

Post by tinkabell on Feb 6, 2006 20:48:45 GMT

Quick Reply