Modify Resident List

Just out of question, I was wondering if it is possible to change the registry because this one registry change keeps poping and poping back up even when it is denied and is eating up my processor speed. It is one of those IE things that keeps wanting to change your homepage or something but I don't really care 'cuz I use Firefox. Please explain if possible or not.

-Cpt. Overkill

Please show us what change is being denied:

• Go into Spybot > Mode > Advanced Mode > Tools > Resident > page (scroll) to the bottom of the listing and highlight a portion of the log that shows the denied change, then right click and select Copy. Paste (Ctrl+V) the log entries to another post in this thread.

-I hope this information suffices.

28/02/2007 5:40:05 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:06 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:07 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:08 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:09 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:10 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:12 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:13 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:14 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:15 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:16 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!
28/02/2007 5:40:17 PM Denied value "Default_Search_URL" (new data: "http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch") changed in Browser page!

-Cpt Overkill

Cpt Overkill:

The default registry entry for "Default_Search_URL" in Internet explorer (IE 6 and IE 7):
I have no idea what may have stimulated the change, but the loop that you are experiencing is cause by the fact that something is trying to return the Default_Search_URL" entry to it default value and you are repetitively denying the change via TeaTimer. More than likely you did a "Deny change" and checked the "Remember this decision" option.

To correct the problem:

• Exit TeaTimer:
  • Right click on the TeaTimer (Spybot-SD Resident) icon in the system tray (system notification area).
  • Click Exit Spybot-S&D Resident.
• Edit Spybot's RegKeyBlack.sbe file to remove the "Remember this decision" for the registry change (or just delete the RegKeyBlack.sbe file):
  • The RegKeyBlack.sbe file is located in one of the following directories:
    • Windows 95/98
      C:\Windows\Application Data\Spybot - Search & Destroy\Excludes
    • Windows ME
      C:\Windows\All Users\Application Data\Spybot - Search & Destroy\Excludes
    • Windows NT/2000/XP
      C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes
  • Open the RegKeyBlack.sbe file with Notepad.
  • Remove the following entry:
    
    Code:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

• I also suggest that you delete all of TeaTimer's snapshot files before restarting TeaTimer so that TeaTimer will start fresh and does not use the snapshot files to compare against the current content of the registry. To do that:
  • Delete all the .reg files located in one the following directories:
    • Windows 95/98
      C:\Windows\Application Data\Spybot - Search & Destroy\Snapshots
    • Windows ME
      C:\Windows\All Users\Application Data\Spybot - Search & Destroy\Snapshots
    • Windows NT/2000/XP
      C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots
  • Restart TeaTimer:
    • Using Windows Explorer, navigate to C:\Program Files\Spybot - Search & Destroy.
    • Double click TeaTimer.exe to start it.
  • Exit TeaTimer to store a new set of snapshot files:
    • Right click Spybot's TeaTimer System Tray Icon > click Exit Spybot-S&D Resident.
      • TeaTimer closes.
      • TeaTimer's snapshot files are refreshed at this time.
  • Restart TeaTimer:
    • Using Windows Explorer, navigate to C:\Program Files\Spybot - Search & Destroy.
    • Double click TeaTimer.exe to start it.

Sorry but there was no Spy-Bot folder in the application data folder.

Just so there is no misunderstanding, the two folders you are looking for are:

• …\Spybot - Search & Destroy\Excludes
• …\Spybot - Search & Destroy\Snapshots

If they are not in the default installation location indicated above, you can use Windows Explorer and search for the RegKeyBlack.sbe file to located where they are.