Tea Timer popups

Daren:

dclineattamu said:
So changing the registry myself wouldn't be reliable?
Click to expand...
In some cases that can be done but in many cases it can not. The Resident.log is a summary of activities and does not necessarily contain the entire registry entry that is being modified. In addition you may have to know how that particular registry entry is used by the program that is setting it. For example, at one time I was running an anti-virus program that would set a startup entry for a cleanup job every time there was a program update, run the cleanup job and then delete the entry. I assume that the setting of the startup entry was to make sure the cleanup job was run to completion even if there was an intervening restart of the system. If I allow both registry changes, things would be as they should be. However, if I decided to deny the first registry there would be no startup entry for the update program to attempt to remove and TeaTimer would not react to the attempted removal of the entry. Now if I decide at a later point in time that I made a mistake and edit the registry to include the startup entry that I denied, I would adding an entry to the registry that in fact should not be there. However, I can't tell that because the sequence of events I observed were altered by my intervention in that sequence of events.

dclineattamu said:
Also, I presume your reply means one cannot go back and allow changes that previously were denied?
Click to expand...
If you are asking if there is a facility within Spybot/TeaTimer to allows you to reverse previously allowed or denied registry changes, the answer is no.
 
Clearing snapshots

MD USA, I tried what you suggested for removing the startup popups from Teatimer - i.e., I quit the S&D Resident icon. Then I went to the spybot folder and double-clicked teatimer.exe. A minute or so later the icon reappeared on my status bar, and then all those popups appeared again! I then went to the Resident settings and found the Black & white list intact. Is that the way it's supposed to be? Did I miss something here? Why did the popups that always appear when I boot my machine come back?
 
Benzmum:

What version of Spybot are you running?

What do you mean by "intact" in the following?

Benzmum said:
I then went to the Resident settings and found the Black & white list intact.
Click to expand...
Please post a portion of the Resident.log that shows the changes being allowed or denied when you start your system. To do that:
  • Go into Spybot > Mode > Advanced Mode > Tools > Resident > page (scroll) to the bottom of the listing and highlight a portion of the log that shows those activities, then right click and select Copy. Paste (Ctrl+V) the log entries to another post in this thread.
 
Resident.log

I'm running Spybot 1.5.0.9. Following your instructions, I wind up at a list labelled "Resident 'Teatimer' (Protection of over-all system settings active." Here's the list:
17/09/2007 10:03:14 AM Allowed (based on user decision) value "WindowsWelcomeCenter" (new data: "rundll32.exe oobefldr.dll,ShowWelcomeCenter") added in System Startup user entry!
17/09/2007 1:50:34 PM Denied (based on user decision) value "ehTray.exe" (new data: "C:\Windows\ehome\ehTray.exe") added in System Startup user entry!​
When I said "Black & White list intact" I was referring to the list of allowed registry changes that I found in the settings for the resident icon. I assumed that when you referred to snapshots that this must be what you meant. So I wondered why it was full of changes when I'd expected that everything would be cleared when I'd followed your instructions. But I guess the list of registry changes wasn't what you were referring to, huh?

BTW: I haven't seen the teatimer popups today, but I haven't watched closely as my computer started up. I'm going to try that now....
 
Popups

OK, the Resident popups are still there. When I start my computer, four of them appear on the right side of my screen. Maybe I misunderstood, but I thought you were saying that those would disappear if we cleared our teatimer snapshots in the way you described.
 
Popups, cont'd

The popups are entitled something like "Registry change allowed," and the same ones have been appearing for over a week.
 
Benzmum:

Spybot 1.5 or more specifically TeaTimer Version 1.5.0.9 does not have the defect that sometimes made refreshing the snapshot necessary in the prior versions to prevent TeaTimer from thinking the registry changed when you restarted the system. That is why refreshing the snapshot didn't cure your problem.

The only explanation that I can think of is that something is actually attempting to add those registry entries during each system startup.
 
Registry changes

It occurred to me later that I don't know for sure that these popups aren't different every day, mainly because they disappear so quickly that I can't really read more than one of them. Is it possible that they're the same old registry changes I made sometime ago, considering the steps you described don't work with this particular version of Spybot? If that's the case, I can live with the little devils popping up and disappearing quickly every day.
 
Window fixed, but not working!

I have completed the fix by ElPiedra, and the window is full size now.

However, the "old Data" and "New Data" lines are not highlighted and there is no information next to them. Also, the "deny change" tab is not highlighted and I am not able to select it. I can only select the "allow change" tab.

I am running Windows XP.

Is there a solution?

Thank you.
 
Hello,

Please start your own tread and do not post in more than half year old threads.
Thanks. :)

Which version of Spybot do you run?
Perhaps you have blacklisted processes?
Please right-click the Resident icon in the system tray "Spybot S&D resident" and select "Settings". There you will find 4 lists for remembered decisions (allowed/denied processes and registry changes). In order to remove an entry just click on the cross next to it. TeaTimer will then "forget" this decision and you will be asked again the next time.

Best regards
Sandra
Team Spybot
 
avg4me2:

avg4me2 said:
... Also, the "deny change" tab is not highlighted and I am not able to select it. I can only select the "allow change" tab....
Click to expand...
What was the "Category" and type of "Change" where the "Deny change" was grayed out?

During some changes the "Deny change" option is grayed out (not an option). This appears to be on changes such as the removal of a Browser Helper Object (Value deleted). This is speculation but I assume that the "Deny change" is grayed out because by the time TeaTimer recognizes the Registry change the underlying code for the BHO has been deleted and therefore denying the change would do no good to save the BHO from being deleted. I assume that the same would hold true for a "Value deleted" for an ActiveX process and possibly other changes. In this case the registry change dialog serves as a warning that something has changed.
 
Last edited:
spybotsandra:

I am using Spybot 1.4. I don't see a "Spybot S&D resident" anywhere?


md usa spybot fan:

Category = Browser Menu Extension

Change = Value Deleted

A window with code 11:44 popped up "registry change denied".


Thank you.
 
avg4me2:

avg4me2 said:
spybotsandra:

I am using Spybot 1.4. I don't see a "Spybot S&D resident" anywhere?
Click to expand...
In this statement:

spybotsandra said:
Please right-click the Resident icon in the system tray "Spybot S&D resident" and select "Settings".
Click to expand...
spybotsandra is talking about right clicking on TeaTimer's icon (actually titled "Spybot-SD Resident") which should be present in the taskbar notification area (system tray). It looks like a document with a padlock in the lower left hand corner.

avg4me2 said:
md usa spybot fan:

Category = Browser Menu Extension

Change = Value Deleted

A window with code 11:44 popped up "registry change denied".
Click to expand...
I am some confused now. Originally you were talking about a registry were there the "Deny change" was grayed out. From the "Browser Menu Extension" "Value Deleted", I assume that something was removing an entry from Internet Explorer's Context Menu. Now you are indicating that you got a notification "registry change denied". If you are indicating that both thing happened during that same change, it would indicate that you closed dialog without clicking the "Allow change" button (there was a defect in TeaTimer 1.4 that allowed that to happen - Spybot 1.5 has corrected that defect).

What were you doing at the time you received the TeaTimer dialog and did you just close the dialog by clicking on the red X in the upper right hand corner before clicking "Allow change".
 
md usa spybot fan:

What were you doing at the time you received the TeaTimer dialog and did you just close the dialog by clicking on the red X in the upper right hand corner before clicking "Allow change".
Click to expand...

When I went offline, the Teatimer Window showed the message that I indicated. All of the buttons that I mentioned were still grayed out and inoperable. When I clicked the "allow change" button, the popup showed "registry change allowed", but the original "Value Deleted" window would not go away. When I just clicked the red X to close the window, the "registry change denied" popup repeatedly showed in the lower right, and the "Value Deleted" window would not go away untill I shut Teatimer off.

When I went online again, the window came up again. This time the "deny change" button was active. I clicked it and "registry change denied" popped up. The window stayed and I clicked "deny change" again. Another "registry change denied" popped up, and then the Teatimer window closed.

I don't get it.

I looked in "Resident Settings" and there was nothing listed in any of the four catagories.


Thanks.
 
Last edited:
avg4me2:

Please post the portion of the Resident.log that shows the changes you are having problems with.
  • There are several ways (4 listed below) to access the TeaTimer's Resident.log file:
    1. Right click on the TeaTimer (Spybot-SD Resident) system tray icon and select Show Log.
    2. Go into Spybot > Mode > Advanced Mode > Tools > Resident.
    3. Go into Spybot > Mode > Advanced mode > Tools > View Reports > View Previous reports. Select the Resident.log file and open it.
    4. Using Windows Explorer, navigate to the Resident.log file located in one of the following directories:
      • Windows 95 or 98:
        C:\Windows\Application Data\Spybot - Search & Destroy\Logs
      • Windows ME:
        C:\Windows\All Users\Application Data\Spybot - Search & Destroy\Logs
      • Windows NT, 2000 or XP:
        C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs
      • Windows Vista:
        C:\ProgramData\Spybot - Search & Destroy\Logs
      Double click on Resident.log file and it should open with Notepad.
  • To copy information from the log into a post in the forum:
    1. Copy the information into the Clipboard:
      • Highlight the portion of the log that you want to copy.
      • Right click and select Copy.
    2. Paste (Ctrl+V) the information from the Clipboard to a new post in this thread.
 
Last edited:
tea timer.

The TeaTimer is a resident tool which perpetually monitors the processes called/initiated and changes to some critical registry keys. This is redundant to Windows Defender's superior and less intrusive real-time protection.
So IF you are running windows defender, my suggestion is to uninstall spybot then reinstall selecting the option NOT to install tea timer.
If you are NOT running windows defender, my suggestion is to get it.
 
Last edited:
This is retoricle and this problem is not only fixed but solved as far as if the buttons are jumbled/compressed together in version 1.5, correct?

There is also a workaround fix if you run into this jumbled/compressed "POPUP" window while using TeaTimer which prevented users from seeing to TWO optionable BUTTON's to push, "ACCEPT" and "DENY".

Why is this thread even open after nearly 6 years of initial and about 3 years after the previous Moderator/Contributor posted "do not post after 6 months old" ?

This issue was fized in 1.5. But, what I recently opened a post on under the thread titled "TeaTimer Popup HowTo Resize Entire Window" is just that, how to resize, or enlarge to a larger default, the TeamTimer Popup window/prompts while running TeaTimer:

http://forums.spybot.info/showthread.php?p=398488#post398488

This is the actual fix and page if you have the jumbled/compressed/missing buttons combination issue, which this thread was opened for, see the title "Solution to fix the pop-ups in TeaTimer", which it was except that was part of the issue but not as a whole as far as resizing to a LARGER "default" window LARGER then whats been stated!:

http://forums.spybot.info/showthread.php?t=122

--> See the pictures (.jpg's/Jpegs) that are included on these two links from that page of the TeaTimer popup window prompt:

The Before: http://forums.spybot.info/attachment.php?attachmentid=319&d=1138910241

The After: http://forums.spybot.info/attachment.php?attachmentid=320&d=1138910284

Even in the AFTER window you still have to STRETCH that little bugger out so you can see EXACTLY what you are ACCEPTING or denying just the same :/

The window needs to slide left further and open larger to the right with the appropriate text fixes included :D

- Z
 
You must log in or register to reply here.
Back
Top