S&D detecting Registry Change??

[jay80424]

Hi all,

I have been getting pop up messages that "Spybot S&D has detected an important registry entry that has been changed"
It asks me if I should allow or deny. The message in "spybot deleting A3850"

Not sure what to do. Whenever I run spybot, it finds "Virtumunde.dll", so I tell it to fix it, but it always shows back up.

Something is going on here, and I'm not sure what.

Please help!

[md usa spybot fan]

jay80424:

You should allow the change. It is TeaTimer detecting that the entry Spybot placed in the registry in an attempt to deleted the Virtumunde.dll.

If the Virtumunde.dll is detected again, consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
After you have completed the required scans and produced the requested logs, start your own thread in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum making sure to post the HijackThis log.