PDA

View Full Version : "Whitelist" in Tea Timer



jongs
2005-12-13, 15:49
Hi - I have a machine which had spyspot and teatimer installed but still got infected with spy sheriff I wonder if this is because someone allowed a setting to be changed when the tea timer pop up came up.

I cannot see where or how to amend previous instructions to (always) allow a setting to be changed.

Spybot aoears to have successfully got rid of the infection but I need to be sure it ain;t coming back!

thanks

Jon

md usa spybot fan
2005-12-13, 16:17
If you checked "Remember this decision" on a change the information concerning that change it is stored in a file. TeaTimer uses that information to automatically "Allow" or "Deny" changes. Check and see if you have any entries stored for the registry entries that are being denied as follows:Right click on the TeaTimer system tray icon and select Settings. This will bring up TeaTimer's "White & Black List". There are four (4) Buttons across the top of the "White & Black List":

Allowed processes
Blocked processes
Allowed registry changes
Blocked registry changes

Note: If you don't see all four buttons, try expanding the window to the right.


You can review all the entries that you have stored by clicking on these buttons. The entries that you should review are in "Allowed registry changes". You can delete entries by clicking on the scripted black "X" to the right of the entry that you want to delete and then clicking the "OK" button when you're done. This will in effect make TeaTimer forget what you told it to remember so that during future changes to these items TeaTimer will issue a pop-up dialog rather then just a notification pop-up.

jongs
2005-12-13, 18:50
Many thanks for prompt reply. I had seen that window and tried right clicking etc, never noticed the crosses - must have some (a lot of) dirt on my contact lenses!! Appreciate the help.