first answer
nobodyz:
re: TeaTimer_original.exe vs. TeaTimer.exe.
Did you use ResHacker to fix the button overlay problem with TeaTimer 1.4? Reference:
If so it appears that ResHacker backs up the original TeaTimer.exe as
TeaTimer_original.exe during that process.
re: The actual problem that you are having with CDs and TeaTimer messages.
What type of CD are you having a problem with (audio, software installation, etc.)? What is the content of the TeaTimer dialog messages that you are receiving?
If you answered any of the TeaTimer dialog messages, the content of the Resident.log may be helpful. Go into Spybot > Mode > Advanced Mode > Tools > Resident > page (scroll) to the bottom of the listing and highlight a portion of the log that shows the registry changes that you are concerned with, then right click and select Copy. Paste the log entries to another post in this thread.
Which "explorer" ? Can I assume Windows Explorer vs. Internet Explorer?
Yes, I used ResHacker to fix the button overlay problem with Tea Timer 1.4. Glad to know the TeaTimer_original.exe is a harmless and accounted-for file.
Software installation CD is what I was having trouble with. I get no message until I finally remove the CD from the drive because all it does is spin and freeze explorer. And by "explorer" I am referring to Windows Explorer. I can't get any windows to do anything. So I eject the CD (it's WarcraftII: BNE - one I've had for years and used countless times, so it's not carrying a virus or trojan or whatnot) and get a message, something like this (sorry, don't have exact words): TeaTimer.exe (in the top bar of the window) "There is no CD in the CDRom drive. Please insert a CD." Then the choices "Cancel" "Retry" or "Continue". No cancelling, retrying or continuing works to make that dialogue go away. Not even clicking on the red X at far top right to close window will make it leave. I even tried shutting it down using taskmanager by finding TeaTimer.exe and trying to End Process. Would not end.
Here is the content of the Resident.log you asked for:
9/12/2006 12:12:40 AM Allowed value "LogitechVideoTray" (new data: "") deleted in System Startup global entry!
9/12/2006 12:58:47 AM Allowed value "LogitechVideoTray" (new data: "") deleted in System Startup global entry!
9/12/2006 9:08:11 AM Allowed value "LogitechVideoTray" (new data: "") deleted in System Startup global entry!
9/12/2006 9:24:00 AM Allowed value "LogitechVideoTray" (new data: "") deleted in System Startup global entry!
9/12/2006 9:53:46 AM Allowed value "LogitechVideoTray" (new data: "") deleted in System Startup global entry!
9/12/2006 9:54:07 AM Allowed value "LogitechVideoRepair" (new data: "") deleted in System Startup global entry!
9/12/2006 9:54:26 AM Allowed value "LogitechSoftwareUpdate" (new data: "") deleted in System Startup user entry!
9/12/2006 9:55:11 AM Allowed value "LVCOMSX" (new data: "") deleted in System Startup global entry!
9/12/2006 9:55:52 AM Allowed value "NvCplDaemon" (new data: "") deleted in System Startup global entry!
As a rather important footnote: I arose after all my scans for the day were done and found 4 things that my AVG and Lavasoft Ad-Aware found:
--AVG Vault contained--
Virus name: Adware Generic.llJ
Filename: popcaploader_v6[1].cab
[actually, 2 of them]
--LavaSoft Ad-Aware found--
Win32.Trojan.Downloader (Tac rating of 10)
BargainBuddy (Tac rating of 8)
I mention these because it is highly unusual that I have anything as a result in my scans other than MRU (sp?) tracks. These buggers have been removed by the respective programs that found them and I'm about to try to install WarcraftII:BNE again after posting here. If all goes well with that install, I will return here to let you know.
Thanks very much for your time and effort.