Disable TeaTimer Firewall

[PeteMoon]

ps I have Windows Firewall turned OFF (running another firewall).
Pete

[ELECTRO]

Ich habe gleiches Problem auf 3 Windows XP Rechnern genau nach diesem Windows-Update:

Update für Windows XP (KB971029) Installieren Sie dieses Update, um AutoRun-Einträge im Dialogfeld der automatischen Wiedergabe auf CD- und DVD-Laufwerke zu beschränken.

Habe dabei jeweils 3x erlauben (ob mit oder ohne Haken "Merke diese Entscheidung") für das gleiche Programm.

jeweils hier:

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

Der Teatimer findet aber nicht alle 3 auf einmal, sondern jeweils einen oder zwei, dann nach Neustart nochmal.

Bei 35 Programmen die in der Windows-Firewall eingetragen sind, sind das dann 105 mal "Erlauben" klicken und 105 mal "Merke die Entscheidung" klicken.

In der Log-Datei kommen die dann logischerweise bei jedem Start.

Bei einem Freund von mir war noch nichts, da er dieses Update von Microsoft noch nicht hatte, daher denke ich da besteht der Zusammenhang.

Gruß ELECTRO

[hitman72]

hi, from yesterday I have this PROBLEM again (I have reinstalled spybot few days ago). It is very BORING! if the problem can not be resolved I will have to use other programs similar to SpyBot. nice day to all

[spybotsandra]

Hello,

The best way for you is probably to disable the "Paranoid Mode" of the resident TeaTimer.
Therfore right click on the TeaTimer icon (named Spybot SD Resident) in the system tray (lower right of your pc).
Now untick "Paranoid Mode (as on any unknown)".

Best regards
Sandra
Team Spybot

[hitman72]

Yes I know (but I need "registry protection"), I use SpyBot from its early versions. but is it so hard ad a menu like "enable/disable firewall"? I am using MY firewall! it 's all so strange... ciao

[spybotsandra]

Hello,

You will have resident protection.
I did not say disable the resident TeaTimer.
I said disable the paranoid mode.

Best regards
Sandra
Team Spybot

[hitman72]

I use "Paranoid mode" mainly to prevent programs from installing on the startup (including trusted programs!). ok if it can not be solved, there are no problems ... thanks

[PeteMoon]

Hi

These are the latest messages I was getting:
02/03/2011 13:07:05 Allowed (based on user decision) value "%windir%\system32\sessmgr.exe" (new data: "%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019") added in Firewall Authorized Applications!
02/03/2011 13:07:08 Allowed (based on user decision) value "%windir%\Network Diagnostic\xpnetdiag.exe" (new data: "%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000") added in Firewall Authorized Applications!
02/03/2011 13:07:10 Allowed (based on user decision) value "%windir%\system32\sessmgr.exe" (new data: "%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019") added in Firewall Authorized Applications!
02/03/2011 13:07:11 Allowed (based on user decision) value "%windir%\Network Diagnostic\xpnetdiag.exe" (new data: "%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000") added in Firewall Authorized Applications!

I have now turned Paranoid Mode off, and it seems to have stopped the messages, but what does "Paranoid Mode" do? There's no mention of it in Spybot's help.

Thanks.

[spybotsandra]

Hello,

The "Paranoid Mode" alerts every registry change.
If you disable that mode only bad changes or suspicious ones will be alerted.
This thread has more details on the new TeaTimer.

Best regards
Sandra
Team Spybot

[PeteMoon]

Thanks spybotsandra.
It seems strange though that these messages have all started for us at the same time. Before updating Spybot on Feb 17 I never got them, and I've always been on Paranoid Mode. PeteMoon