PDA

View Full Version : Teatimer IR loop, XP/SP2, can't use it for now...



apfwebs
2006-08-11, 19:34
I think I want the extra protection Teatimer may provide, but...I've tried to start it on both my laptops, with this result: Teatimer pops into a continuous Interrupt-Response phase, asking me "Is this okay?" for each registry change. I guess this is what it's supposed to do, but then, many apps may have some effect on the registry, que no?

At any rate, I was able to get out of the loop only by brute force (task manager, blow away Teatimer).

Both laptops have XP/SP2, both have various anti-virus (AVG), anti-spyware (Spybot, Spywareblaster, Ad-Aware, CWshredder, Stinger, MS...)

Both had Teatimer started with defaults, as I sort of took it was okay from the doc. Perhaps I am not savvy enough, and was missing something in setup?

md usa spybot fan
2006-08-11, 23:46
Without any indication of what registry changes you were responding to or how you were responding to them, I have no idea what the problem was that you encountered.

Please go into Spybot > Help > About. What version are you running?
Spybot - Search & Destroy 1.3.
Spybot - Search & Destroy 1.4.
etc.
I suggest that you turn off TeaTimer and keep it from restarting at system startup until you have a better understanding of TeaTimer. To do that:
Go into Spybot > Mode > Advanced Mode > Tools > Resident.
Uncheck the following:Resident "TeaTimer" (Protection of over-all system settings) Active.
Next while still in Spybot > Mode > Advanced Mode > Tools > Resident, page (scroll) to near the bottom of the listing in the lower portion of the window that shows a summary of the messages that you were getting and how you answered them. Highlight the portion of that log that shows the problem you encountered, then right click and select Copy. Paste the log entries to another post in this thread after answering the above question.

Finally, using Windows Explorer, navigate to one of the following folders depending on the operating system you run under:

Windows 95/98
C:\Windows\Application Data\Spybot - Search & Destroy\Excludes
Windows ME
C:\Windows\All Users\Application Data\Spybot - Search & Destroy\Excludes
Windows NT/2000/XP
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes

Open the RegKeyWhite.sbe file in Notepad (doubling clicking on it should open it in notpad) and copy its contents to the post.
Also copy the contents of the RegKeyBlack.sbe file to the post.

Thanks.

apfwebs
2006-08-12, 00:26
the exclude files you mention are not present. Mebbe that's the problem! Nothing excluded, so ol' Teatimer (1.4, BTW) goes after everything.

apfwebs
2006-08-12, 00:29
Other files are present...

md usa spybot fan
2006-08-12, 06:33
the exclude files you mention are not present. Mebbe that's the problem!
No, that's not the problem. Those files only contain information if you used "Remember this decision" while responding to a TeaTimer registry change dialog.

Please provide the information from the resident log as requested.


… while still in Spybot > Mode > Advanced Mode > Tools > Resident, page (scroll) to near the bottom of the listing in the lower portion of the window that shows a summary of the messages that you were getting and how you answered them. Highlight the portion of that log that shows the problem you encountered, then right click and select Copy. Paste the log entries to another post in this thread …

apfwebs
2006-08-14, 20:18
I can't find the requested log

I have several items checked in the requested screen in Advanced mode. Perhaps I should uncheck all but one? I went in and rechecked Resident to check what happens (to turn on Teatimer, see symptoms). As before, I got the loop of response requests. They were a series of windows, Browser Helper Object Value Detected. I checked "Remember this decision" which was followed by "Registry change denied"

In the window containing "Browser Helper Object Value Detected" was a value expressed in hex, which I suspect is the value in which you're interested. I'd like to figure out how to fetch it for you. Would *this* be a good test?

(1) Uncheck *everything* in Advanced mode, close Spybot.
(2) Open Spybot, Check Resident. Allow symptoms to occur. Enter Advanced mode during Response loop ("Registry change denied" business, as described above").
(3) Uncheck "resident".
(4) Check something else (what?) to enable fetching the log you request.
(5) Please describe to me, in terms for my simple mind, what to check, if anything, and how to fetch, said log. (And if responding with "Remember this decision" then Xing out of the box is incorrect, please so tell me...)

Zenobia
2006-08-14, 20:57
You should have seen the log when you went in to recheck Teatimer.

http://img223.imageshack.us/img223/5664/untitledxd8.jpg

md usa spybot fan
2006-08-14, 20:59
When you go into Spybot > Mode > Advanced Mode > Tools > Resident and assuming that you did not click the "Archive log" button at the top of the screen, the resident log is the listing immediately below in the following section:
Resident protection status
Resident "SDHelper" (Internet Explorer bad download blocker) active.
Resident "TeaTimer" (Protection of over-all system settings) active.
I will repeat my prior advice:

I suggest that you turn off TeaTimer and keep it from restarting at system startup until you have a better understanding of TeaTimer. To do that:
Go into Spybot > Mode > Advanced Mode > Tools > Resident.
Uncheck the following:Resident "TeaTimer" (Protection of over-all system settings) Active.