Author Topic: how to undo 'always take this action' for Tea Timer alerts?  (Read 2234 times)

0 Members and 1 Guest are viewing this topic.

Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Hi Friends,
It was hard for me to come up with a title for this problem, and I'm not sure it accurately describes it.  So please feel free to tweak it, if necessary  :lol:

I use Spybot S&D with Tea Timer enabled.  I have one particular program which triggers alerts from S&D, and I'm pretty sure Tea Timer in particular (with options to Allow or Deny certain changes), as a normal part of this program's process.  Soon after I installed it, I got tired of all the alerts.  I wasn't really ready to use the program, at the time, so I thought the safest thing would be to choose "always take this action" and then click Deny.  I don't really know why, but it just seemed less complicated, since I wasn't ready to use the program yet.

But now, I'm ready to use the program, and I need to reverse the 'always Deny'.  But a thorough look through everything I actually understand about S&D has not turned up a means to change it.  Can someone tell me how to change that so I can get the alerts once again.  Eventually, I will probably change it to always Allow, but for now, I want the alerts.

As always, thanks for your help.
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln

Offline little eagle

  • Visiting Experts
  • Newbie
  • *****
  • Posts: 11
Re: how to undo 'always take this action' for Tea Timer alerts?
« Reply #1 on: May 24, 2006, 11:11:49 PM »
The best way will be to remove spybot completely and reinstall it.  :2cents:

Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Re: how to undo 'always take this action' for Tea Timer alerts?
« Reply #2 on: May 25, 2006, 02:26:03 AM »
You can't be serious?
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln

Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Re: how to undo 'always take this action' for Tea Timer alerts?
« Reply #3 on: May 25, 2006, 06:18:55 AM »
Hi again,
Just wanted to correct some of the terms I used to describe my problem/question.

It's the Resident part of S&D that creates the alerts.  That's definite, but now I'm not sure if it's the SDHelper part of Resident or Tea Timer part.

On the alert, which offers Allow the change, or Deny the change, the checkbox actually says "Always use this decision".

Every time it denies a change, I get a little bitty popup at the bottom right corner of my screen.  (It's maybe one and a half square inch in size.)  It says something close to "Resident has denied [this change] to [this program] according to your blacklist."

So now I can phrase my question -- How do I get a program off the Resident's blacklist?  Oh dear, I've also heard the Host file called a blacklist, at times, but just to be clear, I'm not talking about the Host file here.

Also, I can report that I tried removing this program from the System Startup list (in S&D)(and then replacing it), thinking it would somehow reset.  But no, still not getting alerts :(

I'll keep investigating.  No offense to little eagle, I just find it hard to believe this can't be reversed, except by reinstalling S&D.  Maybe he (or she?) misunderstood my original message?

All comments are welcome!  And as always, thanks for your help :D
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln

Offline tashi

  • Malware Experts
  • Jr. Member
  • *****
  • Posts: 51
    • safer-networking
Re: how to undo 'always take this action' for Tea Timer alerts?
« Reply #4 on: May 25, 2006, 02:04:48 PM »
So now I can phrase my question -- How do I get a program off the Resident's blacklist? 

Hello.
To reset TeaTimer so that it does not remember any previous entries; edit the entries that TeaTimer uses to automatically "Allow" or "Deny" changes that were based on the use of "Remember this decision" as follows:

Right click on the TeaTimer system tray icon and select Settings. This will bring up TeaTimer's "White & Black List". There are four (4) Buttons across the top of the "White & Black List":
  • Allowed processes
  • Blocked processes
  • Allowed registry changes
  • Blocked registry changes
Note: If you don't see all four buttons, try expanding the window to the right.

The entries that you should review are in "Allowed registry changes" and "Blocked registry changes". You can delete entries by clicking on the scripted black "X" to the right of the entry that you want to delete and then clicking  the "OK" button when you're done. This will in effect make TeaTimer forget what you told it to remember so that during future changes to these items TeaTimer will issue a pop-up dialog rather then just a notification pop-up.

Reset TeaTimers snapshot files:
TeaTimer takes snapshots of Registry entries and compares these with the Registry at startup. Until these snapshots are updated you are likely to get pop-ups (at startup) of changes you made in the past. In other words, TeaTimer attempts to return the Registry to the state it was in when the snapshot was taken. This happens primarily when you reboot the system. To refresh TeaTimer's snapshot files:
  • Right click Spybot's TeaTimer System Tray Icon > click Exit Spybot-S&D Resident.
  • TeaTimer closes.
  • TeaTimer's snapshot files are refreshed at this time.
  • Restart TeaTimer either by:
  • Using Windows Explorer, navigate to C:\Program Files\Spybot - Search & Destroy.
  • Double click TeaTimer.exe to start it.
Or
  • Open Spybot-S&D>Mode>Advanced>Tools>Resident>Check Resident "tea timer"

Hope that helps.


Consumer Security
2006-2011

Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Re: how to undo 'always take this action' for Tea Timer alerts?
« Reply #5 on: May 25, 2006, 08:10:17 PM »
Oh wow!
Thank you SO much, tashi   :Yahoo:

THANK YOU, THANK YOU, THANK YOU, THANK YOU

Geez, I didn't even realize there IS a tray icon for S&D, for 1.  And 2, who would've thought there would be settings associated with a tray icon.  And 3, who would've thought settings associated with a tray icon would not also be available elsewhere in the program itself??????

Well, I never really had a chance of figuring this out on my own, did I?  You know, I'm beginning to think the geniuses who write computer programs actually do this kind of thing on purpose.  It's like they're all back there behind the curtain, sending me on missions I have no hope of completing.  Gotta keep 'em confused!  And they're all probably back there, watching me in their crystal balls, and having a great laugh at people like me and all the while, scheming up new tricks to put in new programs, insuring their own entertainment for years and years to come!

Ok, sorry for the rant, just blowing off steam ;)   But seriously, why isn't this in the Help files, or on the Spybot website, or somewhere it can actually be found by users?  I mean fine, put the settings in the tray icon, if you must.  But at least put instructions for finding them, somewhere the user can actually get to them!

And one more comment, for others who may need the instructions tashi provided.  After Exiting Spybot S&D Resident, the icon disappeared from the tray.  Since I had practically memorized the Mode > Advanced > Tools > Resident page, while trying to find some way to get this program off the black list, I decided to use that route to re-enabling Tea Timer.  But when I got to that page, however, Tea Timer had already been re-enabled.  And the icon appeared in the tray, as before.  So for me, just opening Spybot S&D enabled Tea Timer.

Anyway, I'm now getting the alerts again and ready to learn this program and use it!  Thank you again, tashi!  And thanks to everyone else for patience with my impatience!  And a special thanks to skittlespc, whose apparently huge network of specialists brought tashi here to help me.  You guys are THE BEST!!
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln

Offline tashi

  • Malware Experts
  • Jr. Member
  • *****
  • Posts: 51
    • safer-networking
Re: how to undo 'always take this action' for Tea Timer alerts?
« Reply #6 on: May 25, 2006, 08:28:36 PM »
 But seriously, why isn't this in the Help files, or on the Spybot website, or somewhere it can actually be found by users? 

The Spybot-S&D Support forums are here:
http://forums.spybot.info/forumdisplay.php?f=4
Usually, not always I admit.......  :mrgreen: the advanced search will bring up similar questions.

Glad it worked out Brynn.    :thumbsup:

Consumer Security
2006-2011