Remember This

wk357mag

New member
Since updating to the newest Beta (1.5 addon) Everytime I set my rig to do a checkdisc on next reboot, A popup window from TeaTimer comes up. No problem, but when I select the "Remember This" option and hit ALLOW button, it never remembers it.
 
Last edited:
If you right-click the TeaTimer icon, open the Settings window and there look at "Allowed registry changes", do you see one entry

there?

Is it still there if you manually close and restart TeaTimer?

That HKEY isnt there, even after I set it to run disk check on next reboot. Though the popup window does show and continue as normal. I have included a screen shot of the ONE entry listed in the black/white list
 
Last edited:
wait, I made a mistake (its early here)

There is a long list of ALLOWED things. There is ALOT listed (screen shot)
 
Last edited:
Hmmm...
Could this registry value be a REG_MULTI_SZ? That would explain the separated lines :sick: Will check!

update: for the display, it was "fixed" by displaying line breaks as backslashes. Even upon remembering, the form showed no line breaks. But after restarting TeaTimer it did, so we added the backslashes as linebreak indicators there as well. Should work now, let's see if I can still get it into tomorrows updates or one for the weekend maybe.
 
So that is with todays beta? Damn ;)
I tested it with a bunch of test keys without anything repeating :sick:
At least the entries now show up as correct lines in the whitelist...

Against those variants (items appearing in different order) I guess there's not a lot we could/should do - who knows when a changed order may be something one wants to actually know (anti-rootkit moved in load order to a later position or something). But the number of variantions there should be limited, so after remembering half a dozen or so, nothing further should come... I guess I'll have to check that PDBoot... maybe the way it reboot kills TeaTimer the hard way? TeaTimer will now save changes to the white/blacklists way more often, but I'll have to check that I guess...
 
nOInfectIOn:

To download (and install) the most resent ßTeaTimer 1.5 (teatimer1506):
  • Go into Spybot > Mode > Advanced mode > Settings > Settings.
  • Page down the option tree until you see a section titled "Web update" (just past half way down).
  • In the "Web update" section check the following option:
    • Display available beta versions.
  • Click Spybot-S&D (left pane).
  • Click "Search for Updates" (right pane).
  • When the list of available updates appears, check the following item:
    • ßTeaTimer 1.5 - !Resident protection update (1 MB) - 2007-02-14
  • Click Download Updates.
 
@md usa spybot fan:

Herzlichen Dank (many thanks with heart) :)!

Your advisory was perfect!
Everything is working normal and fine (at the moment, after first reboot ;))
 
Back
Top