Teatimer Looping

[Spyrobot]

:eek: I have a suspicious problem with Spybot.
When I install a called program NAOMÍ of http://www.radiance.m6.net /.
Him TEATIMER resident constantly an explosion is being presented
the modification in the registration allowed being based on my white list.
I think that is in looping


Thank you

[md usa spybot fan]

Exit and restart TeaTimer as follows:
Right click Spybot's TeaTimer System Tray Icon > click Exit Spybot-S&D Resident.
TeaTimer should close.

Restart TeaTimer:
Using Windows Explorer, navigate to C:\Program Files\Spybot - Search & Destroy.
Double click TeaTimer.exe to start it.


You did not indicate if this is an ongoing problem or if it only happened during the installation of NAOMI. If it is an on going problem when you use NAOMI please provide information about the registry change NAOMI is making that is being processed by TeaTimer. Go into Spybot > Mode > Advanced Mode > Tools > Resident > highlight a portion of the log that shows the registry changes being processed, then right click and select Copy. Paste the log entries to another post in this thread.

[Spyrobot]

Thanks
The problem happens in the installation and continually also,
same disabling TEATIMER and activating again.
The problem does happen after restarting again

[Spyrobot]

:eek: Here it is what happens when TEATIMER is activated.


27/1/2006 4:45:09 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:45:10 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:45:10 p.m. Permitido value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") eliminado in Browser Helper Object!
27/1/2006 4:45:12 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:45:14 p.m. Permitido value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") agregado in Browser Helper Object!
27/1/2006 4:45:55 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:45:56 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:45:57 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:45:58 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:46:00 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:46:04 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:46:06 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:46:16 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:46:18 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:46:21 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:46:22 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:46:25 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:46:26 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:46:28 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:46:30 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:46:32 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:46:33 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:46:35 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:46:37 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:46:39 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:46:41 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:46:59 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:00 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:47:02 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:03 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:47:09 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:11 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:47:17 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:18 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:47:19 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:25 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:47:27 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:29 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:47:32 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:33 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:47:34 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:36 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:47:38 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:39 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:47:44 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:47:46 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:02 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:04 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:08 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:09 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:10 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:11 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:23 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:24 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:26 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:27 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:29 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:31 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:36 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:37 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:38 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:40 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:48 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:49 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:50 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:51 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:48:57 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:48:58 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:00 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:01 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:05 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:07 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:08 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:09 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:11 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:13 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:15 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:17 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:19 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:20 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:21 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:22 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:30 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:31 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:32 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:34 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:38 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:40 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
27/1/2006 4:49:43 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
27/1/2006 4:49:47 p.m. Permitido value "wrna3ls" (new data: "") eliminado in
System Startup global entry!



Thanks

[md usa spybot fan]

I don't quite understand what is happening, but it seems that the following system startup registry entry is being added and then immediately deleted:


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"wrna3ls"="C:\Archivos de programa\rnamfler\naomf.exe"
Both events appear to have been authorized by doing a "Allow change" with the "Remember this decision" option.

Go into TeaTimer’s "White & Black List" and delete all entries that look like this:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wrna3ls=…
You can edit the entries that TeaTimer uses to automatically "Allow" or "Deny" changes that were based on the use of "Remember this decision" (TeaTimer's "White & Black List") as follows:Right click on the TeaTimer system tray icon and select Settings. This will bring up TeaTimer's "White & Black List". There are four (4) Buttons across the top of the "White & Black List":
Allowed processes
Blocked processes
Allowed registry changes
Blocked registry changes

If you don't see all four buttons, try expanding the window to the right.

You can review all the entries that you have stored by clicking on these buttons. The entries that you should review are in "Allowed registry changes" and "Blocked registry changes". You can delete entries by clicking on the scripted black "X" to the right of the entry that you want to delete and then clicking the "OK" button when you're done. This will in effect make TeaTimer forget what you told it to remember so that during future changes to these items TeaTimer will issue a pop-up dialog rather then just a notification pop-up.

After that is done answer any TeaTimer messages for wrna3ls without using the "Remember this decision" option and see what happens.

[Spyrobot]

ok, will try to do that and as soon as possible I post again.

Thank you

[Spyrobot]

:rofl: I tried to do the suitable and the following happens:
As soon as I finish installing Naomi.
He asks me to allow the alteration of the registration
As soon as I allow without remembering that decision, returns the ask for me again that how many times I authorize I am going to ask again.
If in one of them mark remembers that decision, he doesn't ask me more only than it is appearing the pop-up constantly.


28/1/2006 12:17:38 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:17:42 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:17:46 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:17:49 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:17:53 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:17:56 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:17:58 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:18:01 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:18:06 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:18:09 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:18:17 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:18:22 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:18:25 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:18:29 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:18:36 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:18:37 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:18:39 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:18:42 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:18:44 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:18:45 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!
28/1/2006 12:18:51 p.m. Permitido value "wrna3ls" (new data: "C:\Archivos de programa\rnamfler\naomf.exe") agregado in System Startup global entry!
28/1/2006 12:18:54 p.m. Permitido value "wrna3ls" (new data: "") eliminado in System Startup global entry!

[md usa spybot fan]

Do you use any other protective software similar to TeaTimer that would remove the startup entry for "naomf.exe" as soon as it added?

[Spyrobot]

I also use AD-Watch of Ad-Aware.
I will verify if he can be it is interferind

Thanks :bigthumb:

[Spyrobot]

In first place he would like to ask excuses.
The support was worthy of a program that has the value that has.
I got to discover for your clue that the ad-watch was interfering in the process
and he was not giving any warning, because the warning was incapacitated.
I thank a lot of released attention and again I apologize
for the primary mistake.

:banghead: :banghead: :banghead: :banghead: :banghead: :banghead:

[md usa spybot fan]

There is absolutely no need to apologize.

I assume that you have gotten NAOMI installed and that you are no longer getting messages from TeaTimer.

TeaTimer is not perfect and when used with other programs that monitor registry entry changes (like Lavasoft's Ad-Watch) it can cause problems.

If there are any other problems you have, please feel free to ask.