Problems with registry changes

[another person]

I have found one really really BIG problem with Spybot S&D. When something changes (i.e. change my home page on Internet Explorer) and it says registry change, the two buttons are chopped off so that I can't see what the buttons say. I have been able to figure them out, Block and Unblock, but it is annoying when I forget which one is which and it denies it or allows it. When I installed a new program, Google Earth, I accidentally hit Block and now I can't use it. It is driving me NUTS! I had to eventually write it down on a piece of paper. So, in case anyone has this same problem, the right one says Block and the left one says Unblock. I think that this won't be a fix that will work forever. What if I loose the piece of paper and maybe I have to install a future service pack and I don't know which one to hit. Then what happens?!?!

 

[md usa spybot fan]

It sounds like you activated TeaTimer which is an advanced mode add-on to Spybot.

There are two distinct functions within TeaTimer. One is rule based the other is not:

1. TeaTimer Processes Monitor (Rule based).
   • TeaTimer monitors processes that are called or initiated in the system. If the process being called or initiated matches a list of known malicious processes in Spypot’s detection files, the process is terminated and an alert is issued to notify you and allow you to make choices as to how to handle the same process during future detections. TeaTimer terminates the application before asking because threats like toll dialers are time critical - they have to be terminated before they can connect.
2. TeaTimer Registry Monitor (Not rule based).
   • TeaTimer monitors approximately 35 registry keys. If any change is made to one of the registry keys that TeaTimer is monitoring it appears that the change is actually made to the registry. When TeaTimer recognizes that the change has been made it checks to see if there is a stored "Remember this decision" entry that covers the change. If there is, TeaTimer uses that information and just issues a pop-up notification of the action it took. If not a TeaTimer popup dialog is issued. If you "Allow change" the change nothing is done. If you "Deny change" the change the registry change is reversed (note if you exit out of the pop-up dialog it arrears that TeaTimer denies the registry change (reverses it). Checking the "Remember this decision" option during the popup dialog stores the information for that change so that similar changes in the future will be handled automatically. After you answer the pop-up dialog TeaTimer issues a pop-up notification of the action you took.

There is currently a bug in the Registry Monitor function of TeaTimer 1.4. Portions of TeaTimer's popup dialog overlay the "Allow change" and "Deny change" buttons. On my system the very top edges of the "Allow change" and "Deny change" buttons are showing and I am still able to select the options. I also can check "Remember this decision" since it is visible. If no portion of the "Allow change" and "Deny change" buttons are showing, you can answer TeaTimer's popup dialog (English language version) by pressing "A" on your keyboard for "Allow change" or "D" for "Deny change". If you close the dialog without answering "Allow change" or "Deny change" the registry change is denied. Note that if you close the popup dialog without answering it the registry change will be denied.

If you can't deal with the problem that way until it is fixed, you can:

1. Apply one of the workarounds found in the following pinned (Sticky) thread that fixes the pop-up dialog so the buttons are visible:
   Solution to fix the pop-ups in TeaTimer
   http://forums.spybot.info/showthread.php?t=122
2. Disable TeaTimer as follows:
   • Go into Spybot > Mode > Advanced Mode > Tools > Resident.
   • Uncheck the following:
     • Resident "TeaTimer" (Protection of over-all system settings) Active.