View Full Version : Spybot loading automatically at every startup!!!
Spybot is starting automatically at every startup! It's getting REALLY annoying, it never did this before, it just started one day and hasn't stopped. I checked msconfig, and went through my registry in the Windows\Run sections and didn't see it. I checked my Start menu > Startup folder too.
What is going on? :(
Does Spybot the program open on start-up,or do you see an icon down in the area by the clock?
The actual program itself. Just like if I had opened it from my start menu.
Okay.I know you've looked around in your registry,etc.,but maybe if you posted the startup section of Spybot,it'll show something.To do that you could go to mode->advanced mode->Tools,then click System Startup.Over to the right,click export,then save the startup log somewhere,then maybe could you copy and paste it here?
Has Spybot asked you if it can run on your next system startup after a scan recently,if it couldn't clear any problems?Do you use Teatimer?(Just throwing out some questions to see if there's any clues to why it's doing that.)
No, it didn't ask me about cleaning after rebooting after a scan. Is TeaTimer the system scanner? If so, I don't use that, but I do use the IE helper.
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2007-03-15 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2007-01-15 advcheck.dll (1.2.1.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2007-01-02 Tools.dll (2.0.1.0)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2007-03-14 Includes\Cookies.sbi
2006-12-08 Includes\Dialer.sbi
2007-03-14 Includes\DialerC.sbi
2007-02-07 Includes\Hijackers.sbi
2007-03-14 Includes\HijackersC.sbi
2006-10-27 Includes\Keyloggers.sbi
2007-03-14 Includes\KeyloggersC.sbi
2007-02-14 Includes\Malware.sbi
2007-03-14 Includes\MalwareC.sbi
2007-01-19 Includes\PUPS.sbi
2007-03-14 Includes\PUPSC.sbi
2007-03-14 Includes\Revision.sbi
2006-12-08 Includes\Security.sbi
2007-03-14 Includes\SecurityC.sbi
2007-02-02 Includes\Spybots.sbi
2007-03-14 Includes\SpybotsC.sbi
2005-02-17 Includes\Tracks.uti
2007-03-14 Includes\Trojans.sbi
2007-03-14 Includes\TrojansC.sbi
Located: HK_LM:Run, ATI Tray Tools
command: "C:\Program Files (x86)\ATI Tray Tools\atitray.exe" /LD3D "4xAA_8xAF"
file: C:\Program Files (x86)\ATI Tray Tools\atitray.exe
size: 515584
MD5: 5a8a2d6b309709eb4923526f56b0a36c
Located: HK_LM:Run, DAEMON Tools
command: "C:\Program Files (x86)\DAEMON Tools\daemon.exe" -lang 1033
file: C:\Program Files (x86)\DAEMON Tools\daemon.exe
size: 157592
MD5: 4323a5ee3ebc7f5681cd41b69360d2d4
I notice TeaTimer in there ... ^ hmmm
by_accident
2007-03-18, 15:11
Dumpyz, try this.
In Advanced Mode (Mode-> Advanced mode), go to down to SETTINGS. In the information box on the right, scroll down to "System start" under "Automation". Change the radio button from "Automatically run program at system startup" to "No automation". Tea Timer will ask you if you want to accept or deny the change. Of course you want to allow the change.
Hopefully this will help.
It already is set to "no automation," and all of the check boxes in that section are un-checked. :(
Thanks for your help so far, I apprecitate it. :)
Here is a description of teatimer:
http://www.safer-networking.org/en/faq/33.html
Is that your whole SpybotSD.System startup report.txt?
That's the whole log.
I don't use TeaTimer, or at least I told it to not be used when I installed SpyBot.
It never did this before, this just started and I have no idea why.
Uninstalling/reinstalling SpyBot didn't work either.
Okay.Truthfully,I'm not too sure why Spybot is running on startup like that,but someone has been helping me with this,so he may have some further suggestions.Which version of Windows do you run?
On a side note,that is a very small startup list.Usually,antivirus programs,etc. are set to run on startup.Do you have an antivirus installed?
Also,another thought.Maybe the configuration.ini file will show something,worth a shot,I guess.
First,here is how to show hidden Files and Folders:
http://www.xtra.co.nz/help/0,,4155-1916458,00.html
You'd have to unhide them,if they aren't already,or you may not be able to find the file listed below.
That file should be located at:
* Windows 95 or 98:
C:\Windows\Application Data\Spybot - Search & Destroy
* Windows ME:
C:\Windows\All Users\Application Data\Spybot - Search & Destroy
* Windows NT, 2000 or XP:
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
If you double-click Configuration.ini,it should open in notepad.Then,you could click edit->Select all,then Copy and paste it here.
To rehide Sytem files,just reverse the steps shown at http://www.xtra.co.nz/help/0,,4155-1916458,00.html when you're done. :)
Well.... I found the problem.
In
HCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
I found a key named with the value:
"c:\program files (x86)\spybot - search & destroy\update.exe"
Once I removed that, it doesn't auto-startup anymore. Any idea how that got there? I assume it needed to update when the program wasn't running, so it scheduled the update for the next boot. But why then wouldn't Spybot remove that key?
I have no idea. :spider: But,glad you got it.
Sorry but this instruction doesn't make any since to me.
If you double-click Configuration.ini,it should open in notepad.Then,you could click edit->Select all,then Copy and paste it here.
So you highlight everything then paste it over itself and it's supposed to change? What am I missing?
No,nothing would change,and I didn't mean to paste it over itself,I meant copy/paste it to here,and that way configuration.ini could be seen,in case something was being missed.