PDA

View Full Version : Allow or Deny History Log



CalExplorer
2007-07-02, 02:25
When one is prompted to Allow or Deny a change to the registry by Spybot Search and Destroy, is there some sort of log file that is created of these Allow or Deny choices, so that one can go back and see exactly what was allowed or denied and which registry key was or was not changed. If there is a log file or something created where is it and how can I review it?

Lately I keep getting an error message 'The instruction at 0x009a96bc referenced memory at 0x0000000 .... ' This error is immediately followed by a Spybot Allow or Deny Registry Change window, then the system locks up and the only way I can get it to unlock is to say ' Allow ' on the Spybot Message Prompt Window. I would like to be able to find out what registry is being accessed and changed.

Speaking of which, it sure would be nice if instead of such a cryptic allow or deny change message, it would be very beneficial if it was able to tell us which main application was requesting the change. Then one would at least have a way to research that program or application.

Zenobia
2007-07-02, 05:28
There is a Resident.log.To see it,you could just right-click Teatimer,then select Show Log.

md usa spybot fan
2007-07-02, 06:04
When one is prompted to Allow or Deny a change to the registry by Spybot Search and Destroy, is there some sort of log file that is created of these Allow or Deny choices, so that one can go back and see exactly what was allowed or denied and which registry key was or was not changed. If there is a log file or something created where is it and how can I review it?
Right click Spybot's TeaTimer System Tray Icon (Spybot-SD Resident) > select Show log. Or go into Spybot > Mode > Advanced Mode > Tools > Resident.


Speaking of which, it sure would be nice if instead of such a cryptic allow or deny change message, it would be very beneficial if it was able to tell us which main application was requesting the change. Then one would at least have a way to research that program or application.
TeaTimer does not intercept registry changes. It recognizes registry changes by comparing the registry with copies of the registry keys it monitors giving you the opportunity to reverse the registry change with a "Deny Change". The only information available at that time is the new and old registry values.

CalExplorer
2007-07-02, 11:50
Thanks.

After posting my comment I discovered as you mentioned that the information is available while in the Advanced Mode under Tools / Resident.

Thank you for your other comments as well.