PDA

View Full Version : registry change startup



superflag
2008-07-03, 01:15
When I startup my computer, I get Creative Media Source graphic on my screen then Spybot asking be to allow a change to a startup entry or not. If I say "no", I still get the graphic when I start the computer and have to close the graphic, then a quick pop-up says Spybot startup entry denied. Should I allow change or not? Is something trying to invade my computer? And if so, can I be protected and still have the graphic go away?
Thanks

spybotsandra
2008-07-03, 10:15
Hello,

Please read this information about TeaTimer:
http://www.safer-networking.org/en/faq/33.html
and http://www.safer-networking.org/en/faq/34.html
If you surf the web and without any user interaction the teatimer pops up and warns about a registry change it is better to "deny", but if you install something by yourself it is OK to "allow" the change.
The tutorial (point 8) on our homepage should also help explaining:
http://www.safer-networking.org/en/tutorial/index.html

Best regards
Sandra
Team Spybot

superflag
2008-07-03, 17:13
THanks for the reply. So I deny the change, click "remember this decision" but everytime I start up my computer, I still get the creative media source graphic that I then have to "x" out of (close). I want the graphic not to be there on computer startup. thanks

drragostea
2008-07-04, 03:37
THanks for the reply. So I deny the change, click "remember this decision" but everytime I start up my computer, I still get the creative media source graphic that I then have to "x" out of (close). I want the graphic not to be there on computer startup. thanks

In TeaTimer 1.5:

If you check "Remember this decision" on a registry change, the information concerning that change it is stored in a file. TeaTimer uses that information to automatically "Allow" or "Deny" similar registry changes for all future changes. To edit that information: Right click on the TeaTimer system tray icon (labeled "Spybot-SD Resident") and select Settings. This will bring up TeaTimer's "White & Black List". There are four (4) Buttons across the top of the "White & Black List":
Allowed registry changes
Blocked registry changes
Allowed processes
Blocked processes
You can review all the entries that you have stored by clicking on these buttons. If entries you are interested in are for registry changes, the entries that you should review are in "Allowed registry changes" and "Blocked registry changes". You can delete stored entries by clicking on the scripted black "X" to the right of the entry that you want to delete, answering "Yes" to the confirmation dialog and then clicking the "OK" button when you're done.
--

You can undo the change.

superflag
2008-07-04, 06:32
I want to deny the change, so I clicked "remember this decision". Even so, on start up the Creative Media Source graphic appears no matter what and I have to "x" out of it.

I have gone into tea timer blocked entry changes and I have deleted stored entries by clicking on the scripted black "X" to the right of the entry, answering "Yes" to the confirmation dialog and then clicking the "OK" button.
On computer startup, Creative Media graphic is back and I start all over again.

No matter how this creative media graphic is dealt with, it always returns when I restart the computer.

Thanks

drragostea
2008-07-05, 07:15
flag, any idea what this.. "Creative Media Source" is? Is it installed on your PC?

It seems to be persistent in starting up. So, you're saying that it prompts you with TeaTimer even if you click YES?

It looks like a MP3 player or a music player: http://en.wikipedia.org/wiki/Creative_MediaSource

Do you know how to use "msconfig"? You can run it and disable the entry from starting up.

superflag
2008-07-16, 22:31
Thanks for the reply.
I don't know how to use "msconfig" but I looked into how to use it. I just pulled it up and did not see the dreaded "creative media source" in the list of startups. thanks

drragostea
2008-07-17, 01:04
It seems to be persistent in starting up. So, you're saying that it prompts you with TeaTimer even if you click YES?

It looks like a MP3 player or a music player: http://en.wikipedia.org/wiki/Creative_MediaSource

superflag, do you see Creative MediaSource in your Add/Remove Programs window via Control Panel?

What is your OS?

Just one more question, do you have any idea what this 'Creative MediaSource'?

superflag
2008-07-17, 01:18
This is a good one. I did find it in msconfig and unchecked it, clicked "apply", restarted- still there on desktop when rebooted. It is in my control panel so I could delete it. Problem is, I don't know if I need it or not. I think it has to do with soundblaster, maybe something to do with the music. We do a lot of itunes so I don't want to delete something important.
This stupid thing just appeared one day about 3-4 wks ago for no apparent reason and is been on desktop with startup ever since. I am wondering if it is some sort of computer infection...
Thanks.

superflag
2008-07-17, 01:19
windows xp

drragostea
2008-07-17, 04:59
No worries. I confirmed it. It's related to SoundBlaster.

Is it becoming an annoyance?

It looks like a media player + synchronize music tool.

Okay. How about you allow it during start up? Have you undid the change from TeaTimer?

superflag
2008-07-17, 21:19
yes, the graphic is annoying. It is about 5 inches long and 1 wide and it shows up in the middle of the desktop. I have had teatimer allow it and block it and it continues to show up

drragostea
2008-07-18, 05:45
Just one more detail. Word for word what does TeaTimer say about SoundBlaster?

superflag
2008-07-18, 06:52
the following window comes up when I "x" out of creative media source graphic...
spybot search and destroy has detected an important registry entry that has been changed
category: system startup user entry
change: value deleted
entry: creative media source go
old data: c:\program files\creative\media source\go'

allow change info deny change

I have tried both allow and deny and the large graphic is present upon startup

superflag
2008-07-18, 06:56
spybot window also says
source: Paul Collins startup list

whatever that may mean...

spybotsandra
2008-07-18, 13:58
Hello,

The information from Paul Collins' Startup list is static information to help you decide the validity of the entry.
There is no scan involved to actually determine if your particular entry is good or bad.

You can find Paul Collins' Startup list here:
Startup Applications List
http://www.sysinfo.org/startuplist.php

Best regards
Sandra
Team Spybot

drragostea
2008-07-18, 20:32
It seems like TeaTimer is telling you that the graphic is being deleted, so it's more like removing itself. In addition, there should be a 'source'. Like where is this coming from?

Give the Collin startup list a try.

md usa spybot fan
2008-07-18, 21:35
Superflag:

This thread appears to have been going on for awhile seemingly without a resolution.

Forgive me for interrupting and asking at this time, but what version Spybot - Search & Destroy are you running (Spybot » Help » About)?

superflag
2008-07-21, 17:16
spybot version 1.5.2

md usa spybot fan
2008-07-21, 23:18
Superflag:

From the following:
CTCMSGo.exe Windows process - What is it?
http://www.file.net/process/ctcmsgo.exe.html

The Creative Media Source GO! launcher. Will keep loading at startup if you don't change its options.
MEANMUG
Does that mean anything to you?

Are there options in that GUI ("Creative Media Source graphic") to keep it from lanching at startup?