Time Sink - how to i get rid or delete it ? please help

[kyleste]

when i was checking out my startup items by clicking on start , run . and typing in msconfig and then clicking on the startup tab on the far right i noticed that i have the follwing listed in with those items : C:\Program Files\TimeSink\AdGateway\TSADBOT.EXE"
i want to know how to delete this
i cant do it from the msconfig screen
and i cant seem to find it by searching for files and folders on my Pc . i went to c/ program files and there was not a folder in there named timesink or either of the other names. i tried telling my pc to show all hidden files but even after i did that timesink was not any where to be found .
i am sure that its on my pc - its listed in the msconfig/startup screen. how in the heck do i get rid of it ? i have the latest version of ad-aware and for some reason it is not detecting it either . can any one tell me whats going on and how to get rid of this spyware program ? why am i having trouble with this ?
thanks
best regards
kyle stephens


------------------
kyle

PIII
96mb ram
15g hd
Win 98
dsl(internal modem)
Latest version of mcafee virus scan - DAT files updated regularly
Compaq presario
IE 5.0

[This message has been edited by kyleste (edited 03-28-2001).]

[moke]

Removing TSADBOT.EXE from it's stated location should stop TimeSink from loading but doing just that will probably result in an error message at start up. You need to locate where TimeSink is being loaded at start up. The below should help you locate the offending entry.

Start-up Locations

Windows loads start-up items from three locations in the Registry, two lines in Win.ini, and two menu folders. Observation reveals that it always loads the seven groups in the same order. Here are the seven locations, in order of priority, with the names given them by Windows 98:

Registry (Machine Service)
Each value in the Registry key
HKEY_LOCAL_MACHINE-\SOFTWARE-\Microsoft-\ Windows-\CurrentVersion-\RunServices defines a start-up item. The value's data string is the command to be executed at start-up.

Win.ini (Load=)
The value of the Load= key in the [Windows] section of Win.ini consists of one or more start-up program names, separated by semicolons. Neither long filenames nor command-line arguments may be used.

Win.ini (Run=)
The value of the Run= key in the [Windows] section of WIN.INI consists of one or more start-up program names, separated by semicolons. Neither long filenames nor command-line arguments may be used.

Registry (Machine Run)
Each value in the Registry key
HKEY_LOCAL_MACHINE-\SOFTWARE-\Microsoft-\
Windows-\CurrentVersion-\Run defines a start-up item. The value's data string is
the command to be executed at start-up.

Registry (Per-User Run)
Each value in the Registry key
HKEY_CURRENT_USER-\SOFTWARE-\Microsoft-\
Windows-\CurrentVersion-\RunServices defines a start-up item. The value's data string is the command to be executed at start-up.

Common Start-up Group
Each shortcut or URL shortcut in the common start-up group (by default,C:\Windows-\All Users-\Start Menu-\Programs-\StartUp) is launched at start-up. This group does not appear on the Start menu, and may be entirely absent in some Windows installations.

Start-up Group
Each shortcut or URL shortcut in the Start menu's start-up group (by default, C:\Windows-\Start Menu-\Programs-\StartUp) is launched at start-up.


------------------
"Tell me and I forget. Show me
and I remember. Involve me and I learn."

My help page...

http://rvi.net/~moke/MokeHlp/MAIN.htm

[pfoerste]

www.lavasoft.de
has a free program Ad-aware, that will remove that program and others, which you probably have

Good luck

------------------
Too much knowlege never makes for simple decisions.

KT7-Raid w/800 T-Bird,
WD 20GB ATA66 & Sam 6.5GB ATA33, 192MB RAM, Viper V550
SB Live, Win98

[StevenPeterYevchak]

You probably have a freeware program on your computer that contains the TimeSink element. AdAware will point it out for you when you run it - but its removal MAY result in the programs not functioning anymore. The actual page explaining the AdAware program is here: http://www.lavasoft.de/aaw/index.html . Or, you can try the SpyBlocker 3.0 program from here: http://noads.hypermart.net/sb.htm , which will allow you to keep using the program but which will prevent the Timesink element from (a) phoning home and (b)presenting you with any ads. Read both pages carefully before choosing which one you want to try out, including the 'Help' files and/or FAQ's pages. Both programs are free - with NO spyware or strings attached. Pete

------------------
Compaq4/100,4gigHD,52mbRAM,W98SE,IE5.01/SP2,NS4.75 Mod.@URL=http://www.suggestafix.com/]http://www.suggestafix.com/[/url] Mod.@http://www.morelerbe.com/cgi-bin/ubb-cgi/ultimatebb.cgi

[kyleste]

as i stated above - i have the latest version of add-aware and for reason it is not detecting the timesink prgram.
it looks like moke kmows what he is talking about but all that is way over my head and he might as well have written it in spanish.
any other suggestions ?

------------------
kyle

PIII
96mb ram
15g hd
Win 98
dsl(internal modem)
Latest version of mcafee virus scan - DAT files updated regularly
Compaq presario
IE 5.0

[Jim Simon]

Do you happen to have Free Solitaire installed or some other free program with ads? You have to have these ads for the program to run.

[kyleste]

i already had addaware but for some reason it was not picking up that i had timesink
i did what moke said and deleted the registry key for the time sink adbot.exe using a program that i just downloaded from lavesoft called reghance
thanks for all the help everyone ... i hope this did the trick
best regards
kyle


------------------
kyle

PIII
96mb ram
15g hd
Win 98
dsl(internal modem)
Latest version of mcafee virus scan - DAT files updated regularly
Compaq presario
IE 5.0

[StevenPeterYevchak]

Did you also have the latest AdAware signature file 203-2303 (reflist.zip) installed in the AdAware program? And did you have the AdAware program itself set or not set to automatically delete. Pardon me for not seeing that mention of AdAware in your first post. I realize the problem's solved, but now you've got ME wondering why it wasn't picked up by AA. Pete

------------------
Compaq4/100,4gigHD,52mbRAM,W98SE,IE5.01/SP2,NS4.75 Mod@ http://www.suggestafix.com/ Mod.@ http://www.morelerbe.com/cgi-bin/ubb-cgi/ultimatebb.cgi

[kyleste]

i just upgraded last week to their latest version of adaware 4.55
do i need to downlaod an additional file ?
please tell me if so so i can go download it .
i am wondering why aa didnt pick it up also . b/c it was definately there in the startup menu and it had one of those hockey keys or what ever you call them . thank God for reghance or i would have never been able to find and delete tha key
best
kyle


------------------
kyle

PIII
96mb ram
15g hd
Win 98
dsl(internal modem)
Latest version of mcafee virus scan - DAT files updated regularly
Compaq presario
IE 5.0

[stev-rey]

http://www.lavasoft.de/BINARY/awbin/reflist.zip

unzip this file, copy the file and paste it into Adaware program files, you will overwrite older copy.

------------------

It's either that or it's into the woodchipper

[StevenPeterYevchak]

The link I gave you in my first post has two links off of it - one gets you the reflist.exe and another tells you what to do with it. Later. Pete