Resident log entry

A

Argee

New member
Over the last few days, I noticed when firing up my computer (Windows XP Pro, SP2+all updates) that the Resident popped up a box indicating an allowed Registry change "according to your white list." I looked in the log and found:

Allowed value "scrnsave.exe" (new data: "C:\WINDOWS\system32\logon.scr") changed in Desktop settings!

Is this anything to worry about, please. I've tried searching, but couldn't find anything similar, sorry.

TIA.

Ray.
 
That is a normal registry entry and shouldn't be a problem. However, it is not necessarily normal to receive it every time you start the system although there may be an explanation for that. What version of TeaTimer are you running?
 
The most likely cause of that repetitive registry change is because TeaTimer's snapshot files are out of sync with the registry.

TeaTimer takes snapshots of Registry entries and compares these with the Registry at startup. Until these snapshots are updated you are likely to get pop-ups (at startup) of changes you made in the past. In other words, TeaTimer attempts to return the Registry to the state it was in when the snapshots were taken. This happens primarily when you reboot the system.

To refresh TeaTimer's snapshot files and correct the problem:
  • Right click Spybot's TeaTimer System Tray Icon > click Exit Spybot-S&D Resident.
    • TeaTimer closes.
    • TeaTimer's snapshot files are refreshed at this time.
  • Restart TeaTimer:
    • Using Windows Explorer, navigate to C:\Program Files\Spybot - Search & Destroy.
    • Double click TeaTimer.exe to start it.
I this behavior in TeaTimer 1.3 and 1.4 is because of the following:
  • When TeaTimer starts the snapshot files are read into memory and maintained there. The snapshot files are only rewritten when TeaTimer closes. During system shutdown (or restart) it appears that TeaTimer is terminated before it has a chance to rewrite the snapshot files.
The problem has been corrected in TeaTimer 1.5.
 
Many thanks for your prompt, informative and comprehensive reply - much appreciated! I'll follow your instructions and re-sync.

Ray.
 
You must log in or register to reply here.
Back
Top