Undoing an Allow or Denied Action

[mln1963]

I decided to turn on Resident Tea Timer and Spybot started asking me questions about allowing certain actions. I thought I was allowing the action but what I was really doing was allowing Spybot to delete the action from the system start up global entry. So I made all opposite choices instead of what I thought I was doing. Once I realized this I shut Tea Timer back off.

I tried uninstalling Spybot thinking that would do it. I installed the latest version and of course it was smarter than me and kept the previous settings I didn't want.

This is a cut-n-paste of my list.

2/3/2009 1:09:43 PM Allowed (based on user decision) value "AuctionNavigator" (new data: "") deleted in System Startup user entry!
2/3/2009 1:09:50 PM Allowed (based on user whitelist) value "QuickTime Task" (new data: ""C:\Program Files\QuickTime\qttask.exe" -atboottime") changed in System Startup global entry!
2/3/2009 1:10:09 PM Allowed (based on user decision) value "hpqSRMon" (new data: "C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe") added in System Startup global entry!
2/3/2009 1:10:13 PM Allowed (based on user decision) value "SunJavaUpdateSched" (new data: "") deleted in System Startup global entry!
2/3/2009 1:10:18 PM Allowed (based on user decision) value "hpsysdrv" (new data: "") deleted in System Startup global entry!
2/3/2009 1:15:23 PM Allowed (based on user decision) value "HotKeysCmds" (new data: "") deleted in System Startup global entry!
2/3/2009 1:15:32 PM Allowed (based on user decision) value "HPHUPD06" (new data: "") deleted in System Startup global entry!
2/3/2009 1:15:34 PM Allowed (based on user decision) value "HPHmon06" (new data: "") deleted in System Startup global entry!
2/3/2009 1:15:40 PM Allowed (based on user decision) value "KBD" (new data: "") deleted in System Startup global entry!
2/3/2009 1:16:25 PM Allowed (based on user decision) value "Recguard" (new data: "") deleted in System Startup global entry!
2/3/2009 1:17:03 PM Allowed (based on user decision) value "VTTimer" (new data: "") deleted in System Startup global entry!
2/3/2009 1:18:00 PM Allowed (based on user decision) value "AGRSMMSG" (new data: "") deleted in System Startup global entry!
2/3/2009 1:18:58 PM Allowed (based on user decision) value "PS2" (new data: "") deleted in System Startup global entry!
2/3/2009 1:19:18 PM Allowed (based on user decision) value "SetDefaultPrinter" (new data: "") deleted in System Startup global entry!
2/3/2009 1:19:24 PM Allowed (based on user decision) value "IgfxTray" (new data: "") deleted in System Startup global entry!
2/3/2009 1:19:27 PM Allowed (based on user decision) value "Adobe Photo Downloader" (new data: "") deleted in System Startup global entry!
2/3/2009 1:19:41 PM Denied (based on user decision) value "TkBellExe" (new data: "") deleted in System Startup global entry!
2/3/2009 1:19:41 PM Denied (based on user decision) value "ThreatFire" (new data: "") deleted in System Startup global entry!
2/3/2009 1:19:42 PM Denied (based on user decision) value "AppleSyncNotifier" (new data: "") deleted in System Startup global entry!
2/3/2009 1:19:42 PM Allowed (based on user whitelist) value "iTunesHelper" (new data: "") deleted in System Startup global entry!
2/3/2009 4:47:15 PM Allowed (based on authenticode whitelist) value "SpybotSD TeaTimer" (new data: "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe") added in System Startup user entry!


I don't know how to undo my screw up or how it will affect me? How bad have I screwed myself?

Mods, if this is posted in the wrong place please feel free to move it

[md usa spybot fan]

mln1963:

You cannot reverse any Registry change decisions ("Allow change" or "Deny change") that you make with TeaTimer. You have to redo whatever you were doing so that the Registry change is done again (or manually edit the Registry).

If your Windows OS has a System Restore capability, you could try doing a System Restore to a restore point before all the startup entries were deleted.

[mln1963]

If I go into regedit will I be able to identify the spybot changes?

[md usa spybot fan]

No.

Are you experiencing any problems?

With exception of the three entries that you denied weren't they all startup entries that you added (QuickTime Task and hpqSRMon) or deleted sometime between the last time you used TeaTimer prior starting it on February 3rd?

In regards to the three entries that you denied and therefore restored. Do you really need these startup entries; TkBellExe, ThreatFire and AppleSyncNotifier? For example do you still use ThreatFire?