Reggie Stry
2007-03-22, 21:06
Every time I close Teatimer, I see an "ITBarLayout" alert, which I've blocked.
Now it seems when I look at the log I see:
3/22/2007 1:40:32 PM Denied (based on user decision) value "ITBarLayout" (new data
: (followed by a load of hexadecimal data)
and then:
added in User-specific browser toolbar!
I also see from time to time:
3/20/2007 6:14:23 PM Allowed (based on user decision) value "{0E5CBF21-D15F-11D0-8301-00AA005B4383}" (new data: "hex:21,BF,5C,0E,5F,D1,D0,11,83,01,00,AA,00,5B,43,83,22 and so on, followed by:
added in User-specific browser toolbar!
Other times it says:
/20/2007 6:11:24 PM Denied (based on user decision) value "{0E5CBF21-D15F-11D0-8301-00AA005B4383}" and followed by data with:
added in User-specific browser toolbar!
When I look at the Black and White List, both of the above are listed on the "blocked registry changes" tab. I've even tried deleting them, but the popup alerts appear again and I deny the registry change.
I've searched the net and found quite a few posts here that refer to this problem with Teatimer. I've used Hijackthis (after closing Teatimer as recommended) and don't see anything other than all the processes I'm aware of and personally loaded (all safe).
I check my running processes frequently, and use TCPview to watch internet activity.
Another site recommends deleting ITBarLayout from:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Explorer
and:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser
Any solution?
Now it seems when I look at the log I see:
3/22/2007 1:40:32 PM Denied (based on user decision) value "ITBarLayout" (new data
: (followed by a load of hexadecimal data)
and then:
added in User-specific browser toolbar!
I also see from time to time:
3/20/2007 6:14:23 PM Allowed (based on user decision) value "{0E5CBF21-D15F-11D0-8301-00AA005B4383}" (new data: "hex:21,BF,5C,0E,5F,D1,D0,11,83,01,00,AA,00,5B,43,83,22 and so on, followed by:
added in User-specific browser toolbar!
Other times it says:
/20/2007 6:11:24 PM Denied (based on user decision) value "{0E5CBF21-D15F-11D0-8301-00AA005B4383}" and followed by data with:
added in User-specific browser toolbar!
When I look at the Black and White List, both of the above are listed on the "blocked registry changes" tab. I've even tried deleting them, but the popup alerts appear again and I deny the registry change.
I've searched the net and found quite a few posts here that refer to this problem with Teatimer. I've used Hijackthis (after closing Teatimer as recommended) and don't see anything other than all the processes I'm aware of and personally loaded (all safe).
I check my running processes frequently, and use TCPview to watch internet activity.
Another site recommends deleting ITBarLayout from:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Explorer
and:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser
Any solution?