Undoing resident blacklist
- Thread starter pchef21
- Start date
spybotsandra
New member
Hello,
Please right-click the Resident icon in the system tray "Spybot S&D resident" and select "Settings". There you will find 4 lists for remembered decisions (allowed/denied processes and registry changes). In order to remove an entry just click on the cross next to it. TeaTimer will then "forget" this decision and you will be asked again the next time.
Best regards
Sandra
Team Spybot
Please right-click the Resident icon in the system tray "Spybot S&D resident" and select "Settings". There you will find 4 lists for remembered decisions (allowed/denied processes and registry changes). In order to remove an entry just click on the cross next to it. TeaTimer will then "forget" this decision and you will be asked again the next time.
Best regards
Sandra
Team Spybot
md usa spybot fan
Spybot Advisor Team [Retired]
There is no facility within TeaTimer to reverse any Registry change decisions ("Allow change" or "Deny change") that you make with TeaTimer. You have to redo whatever you were doing so that the Registry change is done again (or manually edit the Registry).
If you would like to post the change that was denied perhaps someone can figure out what was happening at the time of the registry change. To do that:
If you would like to post the change that was denied perhaps someone can figure out what was happening at the time of the registry change. To do that:
- Right click on the TeaTimer (Spybot-SD Resident) system tray icon and select Show Log. Page (scroll) to the bottom of the listing and highlight a portion of the log that shows the change you are questioning, then right click and select Copy. Paste (Ctrl+V) the log entries to another post in this thread.
Ok here it is....
1/29/2007 9:27:07 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:27:25 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:27:29 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:27:35 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:28:31 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:28:38 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:28:58 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:29:53 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:30:09 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:30:28 PM Allowed value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
2/1/2007 9:00:37 AM Denied value "TkBellExe" (new data: ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot") added in System Startup global entry!
2/3/2007 7:10:31 PM Denied value "InnoSetupRegFile.0000000001" (new data: ""C:\WINDOWS\is-18M9A.exe" /REG") added in System Startup global entry!
2/3/2007 7:28:36 PM Denied value "Yahoo! Pager" (new data: ""C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet") changed in System Startup user entry!
2/3/2007 7:29:45 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:01 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:10 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:13 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:39 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:54 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/4/2007 10:56:58 AM Allowed value "OPSE reminder" (new data: "") deleted in System Startup global entry!
2/4/2007 10:57:13 AM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/4/2007 12:41:39 PM Denied value "OPSE reminder" (new data: "") deleted in System Startup global entry!
2/4/2007 12:41:47 PM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/4/2007 6:05:40 PM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/5/2007 12:48:11 PM Denied value "TkBellExe" (new data: ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot") added in System Startup global entry!
2/6/2007 8:43:38 AM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/6/2007 5:31:10 PM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/7/2007 6:35:50 PM Denied value "updateMgr" (new data: ""C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8") added in System Startup user entry!
2/7/2007 7:17:13 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:16 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:19 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:21 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:23 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:26 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:29 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:30 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:33 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:35 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:36 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:38 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:40 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:42 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:48 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:51 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:00 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:05 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:07 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:12 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:15 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:17 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:21 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:23 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:25 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:27 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:28 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:30 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:32 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:33 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:46 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:54 PM Allowed value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:20:21 PM Allowed value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") added in Browser Helper Object!
2/8/2007 11:12:08 AM Denied value "TkBellExe" (new data: ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot") added in System Startup global entry!
2/9/2007 9:42:03 AM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/10/2007 10:35:13 AM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/11/2007 7:47:21 AM Denied value "Yahoo! Pager" (new data: ""C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet") changed in System Startup user entry!
2/12/2007 11:57:21 AM Denied value "KernelFaultCheck" (new data: "") deleted in System Startup global entry!
2/13/2007 9:01:38 AM Denied value "Yahoo! Pager" (new data: ""C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet") changed in System Startup user entry!
1/29/2007 9:27:07 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:27:25 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:27:29 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:27:35 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:28:31 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:28:38 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:28:58 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:29:53 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:30:09 PM Denied value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
1/29/2007 9:30:28 PM Allowed value "{5CBE2611-C31B-401F-89BC-4CBB25E853D7}" (new data: "") deleted in User-specific browser toolbar!
2/1/2007 9:00:37 AM Denied value "TkBellExe" (new data: ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot") added in System Startup global entry!
2/3/2007 7:10:31 PM Denied value "InnoSetupRegFile.0000000001" (new data: ""C:\WINDOWS\is-18M9A.exe" /REG") added in System Startup global entry!
2/3/2007 7:28:36 PM Denied value "Yahoo! Pager" (new data: ""C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet") changed in System Startup user entry!
2/3/2007 7:29:45 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:01 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:10 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:13 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:39 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/3/2007 7:30:54 PM Denied value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
2/4/2007 10:56:58 AM Allowed value "OPSE reminder" (new data: "") deleted in System Startup global entry!
2/4/2007 10:57:13 AM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/4/2007 12:41:39 PM Denied value "OPSE reminder" (new data: "") deleted in System Startup global entry!
2/4/2007 12:41:47 PM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/4/2007 6:05:40 PM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/5/2007 12:48:11 PM Denied value "TkBellExe" (new data: ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot") added in System Startup global entry!
2/6/2007 8:43:38 AM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/6/2007 5:31:10 PM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/7/2007 6:35:50 PM Denied value "updateMgr" (new data: ""C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8") added in System Startup user entry!
2/7/2007 7:17:13 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:16 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:19 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:21 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:23 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:26 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:29 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:30 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:33 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:35 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:36 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:38 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:40 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:42 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:48 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:17:51 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:00 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:05 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:07 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:12 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:15 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:17 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:21 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:23 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:25 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:27 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:28 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:30 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:32 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:33 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:46 PM Denied value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:18:54 PM Allowed value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") deleted in Browser Helper Object!
2/7/2007 7:20:21 PM Allowed value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") added in Browser Helper Object!
2/8/2007 11:12:08 AM Denied value "TkBellExe" (new data: ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot") added in System Startup global entry!
2/9/2007 9:42:03 AM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/10/2007 10:35:13 AM Denied value "DefaultUserName" (new data: "Owner") changed in Winlogon!
2/11/2007 7:47:21 AM Denied value "Yahoo! Pager" (new data: ""C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet") changed in System Startup user entry!
2/12/2007 11:57:21 AM Denied value "KernelFaultCheck" (new data: "") deleted in System Startup global entry!
2/13/2007 9:01:38 AM Denied value "Yahoo! Pager" (new data: ""C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet") changed in System Startup user entry!
md usa spybot fan
Spybot Advisor Team [Retired]
"yahoom~1.exe" is a part of Yahoo! Messenger. You denied the changes to add startup entry for "yahoom~1.exe" so it is not being automatically started:
Reinstall Yahoo! Messenger and do not deny these registry changes.
Code:
2/11/2007 7:47:21 AM Denied value "Yahoo! Pager" (new data: ""C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet") changed in System Startup user entry!
2/13/2007 9:01:38 AM Denied value "Yahoo! Pager" (new data: ""C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet") changed in System Startup user entry!