PDA

View Full Version : Not sure what I just did with tea timer?



spybo
2008-04-29, 03:03
Dunno what I'm doing here or what it's about :red:? thx
v1.5.2.2
---------------------------------
27/04/2008 11:44:55 PM Allowed (based on user decision) value "{4A368E80-174F-4872-96B5-0B27DDD11DB2}" (new data: "") added in Browser Helper Object!
27/04/2008 11:46:07 PM Allowed (based on user decision) value "InnoSetupRegFile.0000000001" (new data: ""C:\WINDOWS\is-23IAB.exe" /REG") added in System Startup global entry!
28/04/2008 11:49:44 AM Allowed (based on user decision) value "SpybotDeletingB539" (new data: "command /c del "C:\WINDOWS\wt\webdriver.dll"") added in System Startup user entry!
28/04/2008 11:49:49 AM Allowed (based on user decision) value "SpybotDeletingD4470" (new data: "cmd /c del "C:\WINDOWS\wt\webdriver.dll"") added in System Startup user entry!
28/04/2008 11:49:53 AM Allowed (based on user decision) value "SpybotDeletingA2584" (new data: "command /c del "C:\WINDOWS\wt\webdriver.dll"") added in System Startup global entry!
28/04/2008 11:49:57 AM Allowed (based on user decision) value "SpybotDeletingC6359" (new data: "cmd /c del "C:\WINDOWS\wt\webdriver.dll"") added in System Startup global entry!
28/04/2008 6:24:29 PM Allowed (based on user decision) value "SpybotDeletingB539" (new data: "") deleted in System Startup user entry!
28/04/2008 6:24:35 PM Allowed (based on user decision) value "SpybotDeletingD4470" (new data: "") deleted in System Startup user entry!

spybo
2008-04-29, 03:22
(This came up on a scan & selected fix. I think it's related to the above)
28.04.2008 00:06:37 - found: Microsoft.WindowsSecurityCenter_disabled Settings

spybotsandra
2008-04-29, 12:45
Hello,

1. Please read this information about TeaTimer:
http://www.safer-networking.org/en/faq/33.html
and http://www.safer-networking.org/en/faq/34.html
If you surf the web and without any user interaction the teatimer pops up and warns about a registry change it is better to "deny", but if you install something by yourself it is OK to "allow" the change.
The tutorial (point 8) on our homepage should also help explaining:
http://www.safer-networking.org/en/tutorial/index.html

2. Spybot - Search & Destroy is detecting Windows Security Center associated with Microsoft Security Center Registry changes. This is neither a false positive nor a bug. It is just an information.
Spybot-S&D only wants to bring to your attention that "someone" disabled one or more notifications in the Windows Security Center, e.g. the notifications that your virus protection is not active or not up-to-date. If you changed the settings yourself you can safely tell Spybot-S&D to exclude those detections from further scans.
In order to do so please right-click each in turn, then click "exclude this detection from future scans". That way, should any other part of security center settings change, Spybot-S&D will still detect those.
The same is true if you have another security solution installed (like McAfee Security Center or Norton Internet Security). These programs do also disable the Windows Security Center in order to take care of things themselves.
The reason why the changes are flagged by Spybot-S&D is that there are also malware programs that disable the notifications so the user doesn't take note of his security tools not being effective.

Some more information is also available in our forum:
http://forums.spybot.info/showthread.php?t=87

Best regards
Sandra
Team Spybot