Resident log entry

[Argee]

Over the last few days, I noticed when firing up my computer (Windows XP Pro, SP2+all updates) that the Resident popped up a box indicating an allowed Registry change "according to your white list." I looked in the log and found:

Allowed value "scrnsave.exe" (new data: "C:\WINDOWS\system32\logon.scr") changed in Desktop settings!

Is this anything to worry about, please. I've tried searching, but couldn't find anything similar, sorry.

TIA.

Ray.

[md usa spybot fan]

That is a normal registry entry and shouldn't be a problem. However, it is not necessarily normal to receive it every time you start the system although there may be an explanation for that. What version of TeaTimer are you running?

[Argee]

Version 1.4.0.2 is the version of TeaTimer. HTH

Thanks again.

Ray.

[md usa spybot fan]

The most likely cause of that repetitive registry change is because TeaTimer's snapshot files are out of sync with the registry.

TeaTimer takes snapshots of Registry entries and compares these with the Registry at startup. Until these snapshots are updated you are likely to get pop-ups (at startup) of changes you made in the past. In other words, TeaTimer attempts to return the Registry to the state it was in when the snapshots were taken. This happens primarily when you reboot the system.

To refresh TeaTimer's snapshot files and correct the problem:
Right click Spybot's TeaTimer System Tray Icon > click Exit Spybot-S&D Resident.
TeaTimer closes.
TeaTimer's snapshot files are refreshed at this time.

Restart TeaTimer:
Using Windows Explorer, navigate to C:\Program Files\Spybot - Search & Destroy.
Double click TeaTimer.exe to start it.

I this behavior in TeaTimer 1.3 and 1.4 is because of the following:
When TeaTimer starts the snapshot files are read into memory and maintained there. The snapshot files are only rewritten when TeaTimer closes. During system shutdown (or restart) it appears that TeaTimer is terminated before it has a chance to rewrite the snapshot files.
The problem has been corrected in TeaTimer 1.5.

[Argee]

Many thanks for your prompt, informative and comprehensive reply - much appreciated! I'll follow your instructions and re-sync.

Ray.

[md usa spybot fan]

Also consider upgrading to Spybot 1.5. Downloads here:
Download Spybot-S&D
http://www.spybot.info/en/mirrors/index.html

[Argee]

All now upgraded and - so far - everything working fine. Thanks again!

Ray.