rosencrantz
2011-12-05, 23:37
I'm using Spybot SD 1.6.2.46 with Tea Timer resident. I downloaded Comodo free firewall and started the installation program. During the process Spybot terminated the installation.
What sort of workaround can I do to see why this happened, and then get Spybot to like Comodo?
Could you open Spybot,click Mode->Advanced Mode->Tools->Resident,and in the window to the right,rightclick and select Select All,then rightclick and select Copy,then Paste the teatimer log here.
rosencrantz
2011-12-07, 21:47
Sure... here's what I had in the log file...
12/5/2011 9:34:38 AM Allowed (based on user decision) value "aswAhAScr.dll" (new data: ""C:\Program Files\Alwil Software\Avast5\aswRegSvr.exe" "C:\Program Files\Alwil Software\Avast5\AhAScr.dll"") added in System Startup global entry!
12/5/2011 9:56:07 AM Allowed (based on user decision) value "NoSMMyPictures" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 9:56:16 AM Allowed (based on user decision) value "ClearRecentDocsOnExit" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 9:56:33 AM Allowed (based on user decision) value "NoSMMyDocs" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 9:56:37 AM Allowed (based on user decision) value "NoRecentDocsMenu" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 9:56:42 AM Allowed (based on user decision) value "NoRecentDocsHistory" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 9:56:43 AM Allowed (based on user decision) value "NoRecentDocsNetHood" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 9:56:43 AM Allowed (based on user decision) value "NoComputersNearMe" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 9:56:43 AM Allowed (based on user decision) value "NoNetworkConnections" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 9:56:43 AM Allowed (based on user decision) value "NoDriveAutoRun" (new data: "hex:1F,00,00,") changed in System Startup user entry!
12/5/2011 9:56:43 AM Allowed (based on user decision) value "aswAhAScr.dll" (new data: "") deleted in System Startup global entry!
12/5/2011 10:00:21 AM Allowed (based on user whitelist) value "ZoneAlarm Client" (new data: "") deleted in System Startup global entry!
12/5/2011 10:00:39 AM Allowed (based on user decision) value "ZoneAlarm Installer" (new data: ""C:\Program Files\CheckPoint\Install\Launcher.exe" "C:\Program Files\CheckPoint\Install\Install.exe" /r software /c "C:\Program Files\CheckPoint\Install\Install.xml" /l /w") changed in System Startup global entry!
12/5/2011 10:09:36 AM Allowed (based on user decision) value "NoSMMyPictures" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:09:38 AM Allowed (based on user decision) value "ClearRecentDocsOnExit" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:09:38 AM Allowed (based on user decision) value "NoSMMyDocs" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:09:38 AM Allowed (based on user decision) value "NoRecentDocsMenu" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:09:38 AM Allowed (based on user decision) value "NoRecentDocsHistory" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:09:38 AM Allowed (based on user decision) value "NoRecentDocsNetHood" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:09:39 AM Allowed (based on user decision) value "NoComputersNearMe" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:09:39 AM Allowed (based on user decision) value "NoNetworkConnections" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:09:39 AM Allowed (based on user decision) value "NoDriveAutoRun" (new data: "hex:1F,00,00,") changed in System Startup user entry!
12/5/2011 10:10:17 AM Allowed (based on user decision) value "ZoneAlarm Installer" (new data: ""C:\Program Files\CheckPoint\Install\Launcher.exe" "C:\Program Files\CheckPoint\Install\Install.exe" /r install /c "C:\Program Files\CheckPoint\Install\Install.xml" /l /w") changed in System Startup global entry!
12/5/2011 10:14:23 AM Allowed (based on user decision) value "ISW" (new data: ""C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"") added in System Startup global entry!
12/5/2011 10:14:39 AM Allowed (based on user decision) value "{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}" (new data: "ZoneAlarm Security Engine") added in Global browser toolbar!
12/5/2011 10:15:13 AM Allowed (based on user decision) value "{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}" (new data: "") added in Browser Helper Object!
12/5/2011 10:15:29 AM Allowed (based on user decision) value "ZoneAlarm" (new data: ""C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe"") added in System Startup global entry!
12/5/2011 10:22:54 AM Allowed (based on user decision) value "NoSMMyPictures" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:23:03 AM Allowed (based on user decision) value "ClearRecentDocsOnExit" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:23:05 AM Allowed (based on user decision) value "NoSMMyDocs" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:23:05 AM Allowed (based on user decision) value "NoRecentDocsMenu" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:23:05 AM Allowed (based on user decision) value "NoRecentDocsHistory" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:23:05 AM Allowed (based on user decision) value "NoRecentDocsNetHood" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:23:05 AM Allowed (based on user decision) value "NoComputersNearMe" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:23:05 AM Allowed (based on user decision) value "NoNetworkConnections" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:23:05 AM Allowed (based on user decision) value "NoDriveAutoRun" (new data: "hex:1F,00,00,") changed in System Startup user entry!
12/5/2011 10:58:45 AM Allowed (based on user decision) value "NoSMMyPictures" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:59:00 AM Allowed (based on user decision) value "ClearRecentDocsOnExit" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:59:00 AM Allowed (based on user decision) value "NoSMMyDocs" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:59:00 AM Allowed (based on user decision) value "NoRecentDocsMenu" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:59:01 AM Allowed (based on user decision) value "NoRecentDocsHistory" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:59:01 AM Allowed (based on user decision) value "NoRecentDocsNetHood" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:59:02 AM Allowed (based on user decision) value "NoComputersNearMe" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:59:02 AM Allowed (based on user decision) value "NoNetworkConnections" (new data: "hex:01,00,00,") changed in System Startup user entry!
12/5/2011 10:59:02 AM Allowed (based on user decision) value "NoDriveAutoRun" (new data: "hex:1F,00,00,") changed in System Startup user entry!
12/5/2011 11:27:27 AM Allowed (based on user decision) value "{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}" (new data: "") deleted in Global browser toolbar!
12/5/2011 11:27:28 AM Allowed (based on user decision) value "{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}" (new data: "") deleted in Browser Helper Object!
12/5/2011 11:27:34 AM Allowed (based on user decision) value "ISW" (new data: "") deleted in System Startup global entry!
12/5/2011 8:09:16 PM Allowed (based on user decision) value "FlashPlayerUpdate" (new data: "C:\WINDOWS\system32\Macromed\Flash\FlashUtil11c_Plugin.exe -update plugin") added in System Startup user entry!
I do not see in your logfile where Teatimer terminated the Comodo install.
Did you get a popup from Teatimer when the Comodo install was stopped? :)
rosencrantz
2011-12-08, 00:55
yes, I got the pop-up, saying it was terminating the installation, and then clicked 'ok'...
If Teatimer encountered and terminated a process,etc.,related to Comodo free firewall,it may well be a false positive.
There is info listed here on how to Report a False Positive:
http://forums.spybot.info/showthread.php?t=19117
You can post about that in here:
http://forums.spybot.info/forumdisplay.php?f=16
Unfortunately,there is no info about the Comodo install being terminated contained in your teatimer logfile that I can find,so just give as much info listed in the "How to Report a False Positive" post as you can,and provide a link to this thread,so the detective is up to speed on everything. :)