Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: [b19: Fixed] Registry Changes after closing Teatimer???

  1. #1
    Member
    Join Date
    Dec 2007
    Posts
    34

    Default [b19: Fixed] Registry Changes after closing Teatimer???

    I am using the latest beta, RC1.5.2 on windows XP with IE7. I exited Spybot Resident via my system tray icon and restarted it by launching Spybot S&D. When I restarted it (and every time my PC boots now) I get about 5 weird Windows registry changes such as Local Page, Boot Execute, Excludefromknowndlls, with gibberish characters for the new values. I have tried deny and allow, but they keeps popping up. I have not tried "Remember this decision" as I don't know what is going on with this. HELLLLLP!!!! I get the same popups when I close and restart teatimer at anytime.

  2. #2
    Member
    Join Date
    Dec 2007
    Posts
    34

    Default

    This ssems to be a bug, as closing teatimer should actually reset the snapshot and eliminate the same problem it seems to be causing. I verified my snapshots are being updated when I close and retart teatimer.

  3. #3
    Member
    Join Date
    Dec 2007
    Posts
    34

    Default

    Can anyone reproduce this bug?

  4. #4
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    Yes!!! There appears to a bug in TeaTimer 1.5.0.15 delivered with spybotsd152rc1.exe.

    A portion of the Resident.log:

    Code:
    1/7/2008 1:16:26 PM Allowed (based on user decision) value "Local Page" (new data: "%SystemRoot%\system32\blank.htm") changed in Browser page!
    1/7/2008 1:16:31 PM Allowed (based on user decision) value "BootExecute" (new data: "autocheck autochk *
    lsdelete
    ") changed in Session manager!
    1/7/2008 1:16:39 PM Denied (based on user decision) value "ExcludeFromKnownDlls" (new data: "") changed in Session manager!
    1/7/2008 1:16:40 PM Denied (based on user decision) value "BootExecute" (new data: "autocheck autochk *
    lsdelete
    ") changed in Session manager!
    1/7/2008 1:16:41 PM Denied (based on user decision) value "ExcludeFromKnownDlls" (new data: "") changed in Session manager!
    Last edited by md usa spybot fan; 2008-01-07 at 19:26.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  5. #5
    Member
    Join Date
    Dec 2007
    Posts
    34

    Default

    Thanks...thought I was going crazy. Teatimer also using over 30 Mb RAM! Is that normal?

  6. #6
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    After exiting TeaTimer.exe, starting SpybotSD.exe should not start Teatimer.exe (it never did in the past but it does now with spybotsd152rc1).

    The snapshot files themselves look ok on preliminary inspection, however after exiting TeaTimer.exe and starting SpybotSD.exe the newly initiated TeaTimer.exe appears to be either reading and translating the information from the snapshot files into gibberish or accessing information not actually read from the snapshot files.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  7. #7
    Member
    Join Date
    Dec 2007
    Posts
    34

    Default

    TeaTimer.exe appears to be either reading and translating the information from the snapshot files into gibberish or accessing information not actually read from the snapshot files.

    _______________________________________________

    Yes and it doesn't stop even after re-booting and resetting the snapshots by closing teatimer and deleting them.

  8. #8
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    Attached is a sample of one of the TeaTimer messages received.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  9. #9
    Member of Team Spybot PepiMK's Avatar
    Join Date
    Oct 2005
    Location
    Planet Earth
    Posts
    3,591

    Default

    Whether starting Spybot-S&D starts TeaTimer depends on whether you've got the checkbox inside Spybot ticked. That shouldn't be that new really.

    But that gibberish... I'm right now looking at it!
    I've noticed that directly after you accept the change, the snapshot files will be correct, but upon exiting TeaTimer, that gibberish is written. The source of the problem should thus be easily found I think.

    update: found & fixed
    Just remember, love is life, and hate is living death.
    Treat your life for what it's worth, and live for every breath
    (Black Sabbath: A National Acrobat)

  10. #10
    Member of Team Spybot PepiMK's Avatar
    Join Date
    Oct 2005
    Location
    Planet Earth
    Posts
    3,591

    Default

    The project tracker entry, including an updated TeaTimer.exe file to verify the fix:

    TeaTimer shows non-existing changes on each start
    Just remember, love is life, and hate is living death.
    Treat your life for what it's worth, and live for every breath
    (Black Sabbath: A National Acrobat)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •