Why is teatimer constantly running registry operations?

1

Whenever I have procmon running the number one activity seems to be teatimer. I believe this is part of the spybot search and destroy program. Why is its activity level so high?

kpierce8

Posted 2009-09-11T14:28:42.123

Reputation: 342

I notice it as well. Often I just kill it when it gets over-eager. – None – 2009-09-11T14:35:33.217

Question is subjective - depends on user-assigned weightage to security, and understanding of oneself's as a computer user. – caliban – 2009-09-11T14:47:13.287

I have never had problems with it taking up resources. It is indeed part of Spybot. – D'Arvit – 2009-09-11T15:55:21.230

I changed the original question which admittedly asked the subjective question about system resource drain. The answers covered my real question which was why is it running so much. Thanks. – kpierce8 – 2009-09-11T20:20:31.787

Answers

3

TeaTimer is the part of SpyBot that supposed to pro-actively protects your system from infection and/or spot the infection immediately rather than waiting for you to manually run a full Spybot scan.

As one of the things Teatimer does is watch your registry for suspicious changes you'll probably find that every time another app makes a registry change Teatimer jumps in straight afterwards and checks that this isn't a harmful change. This means that Teatimer is bound to be the top registry accesser as its job is to do nearly as many accesses as all your other apps put together.

Any continuously running spyware/anti-virus/firewall app is going to be a drain on system resources as they're always double-checking what your other apps are up to, whether or not you're happy with the trade-off between system speed and system security is totally your judgement call.

Teatimer is only an optional part of the Spybot install, you don't have to install it if you don't want to.

GAThrawn

Posted 2009-09-11T14:28:42.123

Reputation: 4 176

2

The reason why it is the number one activity is because you are not doing anything else at the moment except for looking at Process Monitor.

It answer depends on how much you value security, and the balance you strike between having more resources, or having better security.

If you think you are a super-safe browser, and you have good surfing habits (i.e not clicking on weird links, running Firefox, does not download warez), then I'd say yes, it's a drain on system resources.

However, if you constantly click on links that say "Find the girl of your dreams today!", or "Make your organ larger!", etc... then I'd say you'd better keep teatimer on even if it uses up 50% of your CPU.

caliban

Posted 2009-09-11T14:28:42.123

Reputation: 18 979

0

Is this a drain on system resources?

it sure is, big time.

run your web browser (and other web-related applications) in an isolated environment (i.e. Sandboxie) where they belong and be done with superfluous gimmicks such as 'Teatimer'.

Molly7244

Posted 2009-09-11T14:28:42.123

Reputation:

Sandboxie doesn't drain system resources? ;) – imagodei – 2009-09-11T15:02:36.063

i would not consider a memory footprint of 12 MB and zero CPU usage a major impact on the system performance. – None – 2009-09-11T15:31:09.797

For future clarification This refers to the original question which I changed to, "why does is its activity so high?" – kpierce8 – 2009-09-11T20:22:13.143