SpyBot Tea-Timer - Is it worth installing?

[unholyone]

Hi,

I have SpyBot S&D 1.3. It came with Tea-Timer which I did not install. I have upgrading to Windows XP Pro.

Is Tea-Timer worth installing?

Does it use alot of resources?

What does it truly do?

Thanks,

Woody

[Peaches4U]

Hi & welcome to Wilders. Yes, it is worth installing . The Resident TeaTimer is a new tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options, how to deal with this process in the future: You can set TeaTimer to:

* be informed, when the process tries to start again
* automatically kill the process
* or generally allow the process to run

There is also an option to delete the file associated with this process.

In addition, TeaTimer detects, when something wants to change some critical registry keys. TeaTimer can protect you against such changes again giving you an option: You can either "Allow" or "Deny" the change.

As TeaTimer is always running in the background, it takes some resources of about 5 MB. SpyBot including teatimer utilizes 13.70 MB -

[unholyone]

Spy bot doesn't run in the back ground so it does not use any system resources unless you start it to remove spyware correct?

If tea timer monitrs the registry what happens when you install a new program or update to a program? Does tea time try and stop it?

Thanks so much,

Woody

[Peaches4U]

Originally Posted by unholyone

Spy bot doesn't run in the back ground so it does not use any system resources unless you start it to remove spyware correct?

If tea timer monitrs the registry what happens when you install a new program or update to a program? Does tea time try and stop it?

Thanks so much,

Woody

SpyBot scanner only runs when u activate it to do a scan. With Teatimer, when u instal a new program, it will notify u of the registry change and ask if u permit the change or deny it. The same holds if u update a program. In this case u would permit the change as it is required to run the program. But say for example if u are simply surfing the internet and Teatimer pops up advising u of a registry change asking if u wish to permit it - I would say "no" because it would tell me that there is something in my computer trying to make a change without my knowledge. In this case, I would immediately scan my computer for spyware, etc. Teatimer blocks registry changes until u give permission that the change is okay or deny. With teatimer u have full control over any registry changes.

[unholyone]

Thanks. That help mee understand it so much more and clearer. I appreciate it.
I will definitly install the Tea Timer option.

Woody

[hojtsy]

Originally Posted by Peaches4U

Teatimer blocks registry changes until u give permission that the change is okay or deny. With teatimer u have full control over any registry changes.

Please allow me to make two small corrections.
1) TeaTimer do not block the change, it detects the change after it was done, and offers to undo it.
2) TeaTimer only monitors a few keys in the registry. You definitely do not have full control over any registry changes. Particularry there are several dangerous keys not monitored by TeaTimer. See this post about Registry Monitor Comparison
-hojtsy-

[unholyone]

So are you saying that Tea Timer is not worth installing and that a better software application is available for this purpose?

[Bubba]

sadi by hojtsy
"Please allow me to make two small corrections.
TeaTimer do not block the change, it detects the change after it was done, and offers to undo it.
"

Actually....Tea Timer advises\warns as the change is being attempted....not after.

@ unholyone

The link hojtsy provided is an excellent source for information concerning registry monitoring programs....but realize there is more to Tea Timer than just registry monitoring.

Related info on Tea Timer---> Teatimer Question, Browser compatibility?

[Dazed_and_Confused]

I used to have TeaTimer installed. Just Uninstalled it today. In my opinion, it's overkill on my machine. MJ RegistryWatcher is much more effective (as alluded to above by Hojtsy) at detecting changes to the Registry.

[snowbound]

Originally Posted by Dazed_and_Confused

I used to have TeaTimer installed. Just Uninstalled it today. In my opinion, it's overkill on my machine. MJ RegistryWatcher is much more effective (as alluded to above by Hojtsy) at detecting changes to the Registry.

I also don't have TeaTimer installed. Like u, i have other apps. that do the same or better job at this.


snowbound

[unholyone]

OK so what is the consenses? That Tea Timer is not worth installing and that there are better programs for such?

What I woory about is system resourses. By the time you instal and run Anti-Virus, Anti-Trojan, Firewall, Anti-Spyware/Adware Registry programs your resourses could become to low.

It appears that many are running multiple system programs as Privacy Guard, Tea Timer, TDS and such.

What is the best for the job?

[Bubba]

Originally Posted by unholyone

What is the best for the job?

What is stored between your ears

Actually....that really should have more meaning to it than it does but unfortunately prevention to most folks means more guard dogs. Knowledge of how best to secure our browsing experience, proper e-mail handling....etc....would go along way in curtailing system resources. The anti-trojan\virus folks would go hungry if they waited for me to purchase there programs but fortunately the market is there and will always be there.

As for your question....I'm not sure there can be a consensus given the fact there has not to my knowledge been any extensive testing between programs that monitor certain registry keys and processes like Tea Timer does. I have not come across any official post or comments explaining\showing every process that Tea Timer watches for.

Perhaps a consensus needs to be pared down to what programs need to be compared to each other so testing can be done ?

[Dazed_and_Confused]

Originally Posted by unholyone

OK so what is the consenses?

I didn't detect a consensus. Depends on your preferences and your current security arsenal.

[TopperID]

No, it is not a consensus that Tea Timer is not worth installing! It does things that no mere Registry monitor can do - unfortunately no one seems able/willing to give a detailed account of these additional features.

I've been happily running SpywareGuard, SpywareBlaster, Tea Timer all together for some months. Now I am trialing Giant AS as well - without conflicts so far! If I could be sure Giant is definately covering all the functions of SG, SB & TT, I'd happily drop them. But I'm still waiting for this assurance!

I am also running WinPatrol for Reg monitoring (and am keeping a close eye on RegWatcher). All this duplication is not a good idea - but what to leave off?

[Dazed_and_Confused]

Originally Posted by TopperID

I've been happily running SpywareGuard, SpywareBlaster, Tea Timer all together for some months.

Agreed. But Spyware Blaster is not a Stay-Resident program as the other two are. It's not even a scanner. Therefore, takes no resources.

[TopperID]

Spyware Blaster is not a Stay-Resident program as the other two are. It's not even a scanner. Therefore, takes no resources.

No, but there is still potential conflict of function; which is what I was referring to. Up until a few days/weeks ago, if you used Giant's innoculation capability you knocked out some items from SB's protection list (and vice versa). Fortunately this problem has now been sorted, but who knows, there may be others!

[Dazed_and_Confused]

Originally Posted by TopperID

No, but there is still potential conflict of function; ..

Good point. I stand corrected.

[unholyone]

This is a point. Look at Daiseys (dazed & Confudes) security she has on her PC.

Security Portfolio: TDS-3; PortExplorer; ProcessGuard; Wormguard; CryptoSuite; NOD32; ZoneAlarm Pro; RoboForm Pro; Spybot S&D; SpywareBlaster; SpySweeper; AdAware; WindowsWasher; MJ RegistryWatcher;

Now I don't see an Anti-virus inclided but with all that running system resources are low are they not?

I don't know anything about DS-3; PortExplorer; ProcessGuard; Wormguard; CryptoSuite; NOD32; RoboForm Pro; SpySweeper; AdAware; WindowsWasher; MJ RegistryWatcher; so I don't know if all are needed or not seems like overkill and drain on the system.

I currently Use AVG Pro 7 Anti-virus, SpywareBlaster, Spybot (without Tea Timer), Zone Alarm Pro, and will be installing BoClean for Trojans. I am thinking about AdWare also. But how much is to much before your system is drained where you cannot operate properly meaning running your normal programs such as word processors and graphic software.

Woody

[bigc73542]

I have had quite a few problems with processguard 3 so I uninstalled it and turned on tea timer and it is working pretty well with no problems yet.

[Detox]

NOD32 is her antivirus - and most of the applications mentioned are not going to be running resident.

SWB doesn't run at all after setting its protection except to update.
The free version of Ad-Aware is used only to scan on-demand. I believe the same applies to Spysweeper and WindowsWasher.
Spybot is also for scanning on-demand with the exception of Tea-Timer. In my case, I have Tea-Timer installe but simply shut it off whenever I'm not using IE (which is most of the time) since I use FF.
I also don't think CyptoSuite will have a resident process either - though I may well be mistaken - I only tried the proggie out - quite impressive but just not something I feel I need at this time.

[Dazed_and_Confused]

Originally Posted by Detox

NOD32 is her antivirus - and most of the applications mentioned are not going to be running resident..

Correct.

Originally Posted by Detox

SWB doesn't run at all after setting its protection except to update. The free version of Ad-Aware is used only to scan on-demand. I believe the same applies to Spysweeper and WindowsWasher. Spybot is also for scanning on-demand with the exception of Tea-Timer.....I also don't think CyptoSuite will have a resident process either ....

Correct.

Originally Posted by Detox

...I have Tea-Timer installe but simply shut it off whenever I'm not using IE (which is most of the time) since I use FF....

I always use an IE Shell. But I disabled TT because I use MJRW. More powerful and comprehensive IMO.

Originally Posted by Detox

...CyptoSuite...quite impressive....

Correct, again!

Thanks, Detox

[Dazed_and_Confused]

Originally Posted by bigc73542

I have had quite a few problems with processguard 3 so I uninstalled it and turned on tea timer and it is working pretty well with no problems yet.

Really sorry to hear that, BigC. I'll have to go over to the PG forum to get the details. No (substantial) problems here!

[bellgamin]

Originally Posted by Bubba

Actually....Tea Timer advises\warns as the change is being attempted....not after.

Umm... I am *fairly* certain that Tea Timer polls for registry changes. If I am correct, then there is no way that Tea Timer can know a change has been made until after the change takes place. Therefore, if the user declines the change, Tea Timer THEN reverts the registry item back to its previous state.

Concerning which, it might be useful to read...
_/ Post #65 HERE.
_/ Posts #132 & #135 & #145 HERE.


It would be helpful if someone, who knows how to run an actual TEST of Tea Timer on this matter, would do so.

[bigc73542]

Originally Posted by Dazed_and_Confused

Really sorry to hear that, BigC. I'll have to go over to the PG forum to get the details. No (substantial) problems here!

I didn't even go to the PG forum I just got tired of it blocking almost everything that was allowed and yanked it out. It will probably take the three other apps I have that work in that line to fill the gap.

[Bubba]

Originally Posted by bellgamin

It would be helpful if someone, who knows how to run an actual TEST of Tea Timer on this matter, would do so.

I reckon we can split hairs if picky is your suit....and yes....technically at that split second in time an entry is being written to the registry and a split second later Tea Timer presents it's registry change pop up.

As for an actual test....I believe even you could accomplish that yourself given a little knowledge of a simple program like RegMon. Make a simple change of your Home Page and watch the action begin.

Edit:
TeaTimer in action as the change is being attempted to change the Home page. As was said....the entry is written to the registry and if Deny Change is selected....the Old data: is written back from the polling info it holds in memory.