Infinite loop?

[ToniBranca]

Hi,

seems my son downloaded something, I tried to stop it from changing the settings by not allowing it to change the registration bank when I was prompted to allow/block the change and I seem to have gotten into an infinite loop.

When I restart the computer, the message 'Changing your registration data bank was not allowed per your instructions. (toolbar in question -- ITBarLayout -- which I think is IE related.)' Sorry about the wording -- I'm translating from German...

Anyway the message keeps popping up until I disable Spybot, which I of course don't like to do.

Can you please tell me 1) how to get out of the loop and 2) if you know anything about the ITBarLayout?

Thanks!

Toni

[md usa spybot fan]

See if this thread helps:
http://forums.spybot.info/showthread.php?t=1380

If not please copy and paste some of the details from the resident log (Spybot > Mode > Advanced Mode > Tools > Resident).

[ToniBranca]

Thanks for the thread, sounds exactly like what is going on.

Only problem is, I can't seem to follow the instructions, I think because of the new version?:

"Right click on the TeaTimer system tray icon and select Settings. This will bring up TeaTimer's "White & Black List". There are four (4) Buttons across the top of the "White & Black List":
Allowed processes
Blocked processes
Allowed registry changes
Blocked registry changes"

Can't find the systerm tray icon. The help section seemed to indicate that in the newest version, this function is included under 'Resident', but I've looked everywhere I can think of and can't find the "White & Black List" anywhere...

Any insights?

Thanks again.

[md usa spybot fan]

Go into Spybot > Help > About. What version are you running (i.e. Spybot - Search & Destroy 1._)?


… keeps popping up until I disable Spybot, ..

Can't find the systerm tray icon.
Note: If you disabled TeaTimer the System Tray icon will no longer be available.


See if this thread helps:
...
If not please copy and paste some of the details from the resident log (Spybot > Mode > Advanced Mode > Tools > Resident).
Method:
Go into Spybot > Mode > Advanced Mode > Tools > Resident.
Highlight the portion of the log that reflects the logging of the problems that you were/are experiencing.
Right click and select "copy" to copy the highlight entries to the clipboard.
Paste those entries into a new post in the thread.

[ToniBranca]

hmmm.. running version 1.4

didn't even hear of teatimer until your instructions so I don't think I disabled it. :scratch:

There are thousands of the entries but here is a sample of some of the changing things. Sorry, it's in German but I think understandable... some translations, just in case...

verweigert is blocked, gelöscht is deleted, hinzugefügt is added, erlaubt is allowed, geändert is changed

20.05.2006 03:32:20 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
20.05.2006 03:41:07 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
20.05.2006 03:43:30 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
20.05.2006 03:46:14 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
20.05.2006 04:00:28 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
20.05.2006 08:18:57 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
20.05.2006 08:19:50 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
20.05.2006 08:20:28 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
22.05.2006 07:38:29 Erlaubt value "AIM" (new data: "") gelöscht in System Startup user entry!
22.05.2006 07:38:32 Verweigert value "Microsoft Works Update Detection" (new data: "") gelöscht in System Startup global entry!
22.05.2006 07:38:33 Erlaubt value "MessengerPlus3" (new data: "") gelöscht in System Startup global entry!
22.05.2006 07:38:33 Erlaubt value "openspamfiveacid" (new data: "") gelöscht in System Startup global entry!
22.05.2006 07:38:33 Erlaubt value "T-Com W-LAN Manager" (new data: "") gelöscht in System Startup global entry!
22.05.2006 07:38:38 Verweigert value "Start Page" (new data: "http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}") geändert in Browser page!
22.05.2006 07:38:41 Verweigert value "Default_Page_URL" (new data: "http://go.microsoft.com/fwlink/?LinkId=54729") geändert in Browser page!
22.05.2006 07:38:41 Verweigert value "Default_Search_URL" (new data: "http://go.microsoft.com/fwlink/?LinkId=54896") geändert in Browser page!
22.05.2006 07:39:45 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
22.05.2006 07:41:53 Verweigert value "ITBar7Layout" (new data: "") hinzugefügt in User-specific browser toolbar!
22.05.2006 07:44:33 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:44:35 Verweigert value "{C6139A57-16FB-4FA4-8045-A847FBFFD695}" (new data: "") hinzugefügt in Global browser toolbar!
22.05.2006 07:44:38 Verweigert value "{849CC480-5983-4D30-A12C-774E8E8D8291}" (new data: "") hinzugefügt in Browser Helper Object!
22.05.2006 07:44:41 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:44:44 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:44:47 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:44:55 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:44:58 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:45:01 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:45:03 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:45:06 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:45:09 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:46:37 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:46:39 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:46:41 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:46:44 Erlaubt value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 07:56:35 Erlaubt value "AIM" (new data: "") gelöscht in System Startup user entry!
22.05.2006 07:56:35 Erlaubt value "MessengerPlus3" (new data: "") gelöscht in System Startup global entry!
22.05.2006 07:56:35 Erlaubt value "openspamfiveacid" (new data: "") gelöscht in System Startup global entry!
22.05.2006 07:56:35 Erlaubt value "T-Com W-LAN Manager" (new data: "") gelöscht in System Startup global entry!
22.05.2006 07:56:41 Erlaubt value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
22.05.2006 10:01:53 Erlaubt value "Google Desktop Search" (new data: ""C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe" /startup") hinzugefügt in System Startup user entry!
23.05.2006 23:37:05 Erlaubt value "AIM" (new data: "") gelöscht in System Startup user entry!
23.05.2006 23:37:05 Erlaubt value "MessengerPlus3" (new data: "") gelöscht in System Startup global entry!
23.05.2006 23:37:06 Erlaubt value "openspamfiveacid" (new data: "") gelöscht in System Startup global entry!
23.05.2006 23:37:07 Erlaubt value "T-Com W-LAN Manager" (new data: "") gelöscht in System Startup global entry!
23.05.2006 23:37:45 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
23.05.2006 23:37:58 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
23.05.2006 23:38:06 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
23.05.2006 23:38:24 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
23.05.2006 23:38:29 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
23.05.2006 23:38:33 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
23.05.2006 23:38:36 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
23.05.2006 23:38:38 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!
23.05.2006 23:38:41 Verweigert value "ITBarLayout" (new data: "") gelöscht in User-specific browser toolbar!

[md usa spybot fan]

ToniBranca (Toni):

From your first post:


Anyway the message keeps popping up until I disable Spybot, which I of course don't like to do.
From you second post:


didn't even hear of teatimer until your instructions so I don't think I disabled it. :scratch:
The Spybot feature that monitors registry changes and issues message concerning register changes is call TeaTimer. TeaTimer is not a default feature of Spybot. There are two (2) ways that TeaTimer can be activated:
During the installation process by manually checking the optional installation of:
Use system setting protection (TeaTimer)

--- or ---


By going into Spybot > Mode > Advanced Mode > Tools > Resident and checking the following:
Resident "TeaTimer" (Protection of over-all system settings) Active.
The only system tray icon associated Spybot is titled Spybot-SD Resident and is only present when TeaTimer has been activated.

*********************

The entries in the "Resident" log indicate that you (or something) was attempting to delete an ITBarLayout registry entry. I can only assume that when you receive the TeaTimer pop-up dialog for the change that you denied (Verweigert/Refused) the change and most likely checked "Remember this decision" when doing so. This caused the same loop that has been experienced by others in the past. Since you already disabled TeaTimer and because the messages stopped over a week ago, I assume that the deletion of the registry entry should have occurred.

Re-enable TeaTimer as follows:
Go into Spybot > Mode > Advanced Mode > Tools > Resident.
Check the following:
□ Resident "TeaTimer" (Protection of over-all system settings) Active.
Then go into TeaTimer's "White & Black List" and delete the "Blocked registry changes" associated with the ITBarLayout changes that you were originally getting.

[ToniBranca]

Hi again and thanks for your continued help!

It seems that I somehow had activated TeaTimer as it was checked when I went to the settings. I have not yet disabled it, I only did not post the thousands of messages generated since then that were all identical.

I still can't find the only system tray icon, the "White & Black List", or any reference to "Blocked registry changes" though... looked everywhere I could think of -- again.

[md usa spybot fan]

Disable and re-enable TeaTimer as follows:
Exit Spybot if it is already running.
Restart Spybot
Go into Spybot > Mode > Advanced Mode > Tools > Resident
Uncheck (if checked) the following:
Resident "TeaTimer" (Protection of over-all system settings) Active.

Exit Spybot Restart Spybot
Go into Spybot > Mode > Advanced Mode > Tools > Resident
Check the following:
Resident "TeaTimer" (Protection of over-all system settings) Active.