View Full Version : TeaTimer shows non-existing changes on each start
Situation: TeaTimer uses snapshots to compare changes between sessions, so that it won't miss what's happening while it is not running.
Experienced: on each start of TeaTimer, a few entries were marked as changed, with their previous contents listed as gibberish.
Problem: only happens with REG_MULTI_SZ values, which were not properly stored/restored in snapshot files.
Expected: proper dealing with REG_MULTI_SZ type values as well.
Workaround: allow it to remember the change, and you'll only get popups.
Fixes test file will available here asap.
Please try this updated file: - version 1.5.2 contains a newer version -
The archive only contains TeaTimer.exe, to replace the current one. First start of this new version will still show the gibberish (which was stored inside the Snapshots), close it, start it again, and it'll read the snapshots correctly and do not display any changes.
Please try this updated file: TeaTimer.exe-1.5.2.16-2008-01-10.zip (http://www.safer-networking.org/files/beta/TeaTimer.exe-1.5.2.16-2008-01-10.zip)
Hello PepiMK,
Now on each start with this TeaTimer v.5.2.16, XPSP2 shows a small windows Warning:
"Open file - Security Warning" - Do you wants to run this file ?... etc..
Indeed I can accept definitely this file by unchecking : "Always ask before opening this file", but the previous version didn't shows any warning !
Thanks.
doodleswest
2008-01-11, 05:22
I'm not getting the same error...the fix works great. Teatimer still taking up 28MB RAM. Is this normal? Documentation says it should take 5 MB
That warning is a typical XP + IE security thing... Windows does it for executables downloaded from the Internet, and here it has noticed that a previous file has been exchanged even.
Files installed through the standard installer shouldn't cause this, that's why you didn't see it with previous versions.
So it's quite as intended by Microsoft, nothing can or should be done against it, and the full release won't show this :)
PepiMK,
Good explanation and all I needed to know ;)
daveoverton
2008-01-16, 06:53
I'm not getting the same error...the fix works great. Teatimer still taking up 28MB RAM. Is this normal? Documentation says it should take 5 MB
Teatimer fixed things for me too, but wondering about the RAM footprint?
Vista Ultimate
33,140 Mb right now.
Ignore the petition stuff.
doodleswest
2008-01-16, 07:20
The bug has returned for me in a slightly different fashion. It happens on a reboot, but only 2 gibberish items now, not 5. It also does not occur if I shut teatimer and restart teatimer. it only happens on re-boot. The log looks like this:
1/16/2008 12:14:37 AM Denied (based on user decision) value "BootExecute" (new data: "ðq cøo ˜'{@WDþ") changed in Session manager!
1/16/2008 12:14:39 AM Denied (based on user decision) value "ExcludeFromKnownDlls" (new data: "/¸") changed in Session manager!
I thought I had updated the documentation quite some time ago :-/
The 5 MB were from times when TeaTimer was really just monitor registry changes, nothing more, and on older Windows versions. On the XP I use, every application gets at least 4 MB, regardless how small it is. And we now have a full file scanner running in TeaTimer, which scans running processes and the files registry entries may point to. Add the size of the database etc.... 30 to 35 MB seem to be a regular size on XP :)
@doodleswest: could you open regedit and check what type of registry value these are? BootExecute can be found at HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\.
But this sounds a bit different... the previous reports where about "new data: [valid entry]", these look like "new data: [gibberish]".
Which Windows are you using?
doodleswest
2008-01-16, 15:48
Pepi:
They are both REG_MULTI_SZ...I am using windows XP SP@...the registry values are now the gibberish that you see above. That can't be good? Should I find an older, backed up registry and change them? Anyone know what they should be? MY system seems to be fine though.
doodleswest
2008-01-16, 15:49
using windows xp, service pack 2...don't know why my reply above is screwed up.
doodleswest
2008-01-16, 21:24
I looked at my laptop registry and restored the gibberish desktop entries to the correct values. I rebooted and teatimer did not show any registry changes. Hopefully the problem is solved. If it pops up again, I'll post.
The "screw up" in the post is probably the forum software trying to make images out of every email address (protection against automatic spam crawlers).
Maybe it would make sense to have the installer remove the whole content of the Snapshots2 folder so that invalid old files can't cause any trouble (just added to the scripts, only need to test it :) ).
Who Knew
2008-01-19, 09:30
I don't know if you want a bunch of me-toos on this item, but I was also getting the 5 false registry change warnings. After I swapped the old teatimer for the one linked above, it did it again, but only once (enough to accept the changes and record them as the new settings), and then never again. So....thanks for the fix.
Who
Terminator
2008-01-20, 19:42
I had the Giberish changes and I've now downloaded and installed the Tea Timer fix and it sorted all my Tea Timer woes. Nice one guys!!!
Who Knew, that was a useful Me Too in this case ;)
Thanks everyone for reporting your test results!
williejames
2008-01-28, 22:58
I'm fixed too. Thanks y'all
williejames
2008-02-01, 12:19
It's back!!! When I first start my system each day, I have the four or five strange warnings until I twice exit TeaTimer and manually restart. That is using the update at the top of this thread.
Could you use Spybot-S&D 1.5.2 instead please? It contains a newer version than the one linked to above :)
williejames
2008-02-02, 10:46
Wilco!
I have problem with spybot. Keeping getting windows opening showing "Resident Denied Changes of ITBarLayout. new number everytime. This window comes up several times and. Have looked at other options to fix. Doesn't seem to work. HELP WHAT CAN I DO. This is slowing down my machine.
Hello, I am new to the forum and cannot find a relevant one for my problem so have jumped on this one, Sorry if thats wrong. but on closing down my PC I started to get a " teatimer not responding" report. I have just uninstalled spybot and reinstalled VIP version only to find it's still doing it. can anyone help please. regards from a newby