Persistent SpybotDeleting messages

Hello, I have a big problem with these 'SpybotDeletingAxxx' and 'SpybotDeletingCxxx' messages from TeaTimer, one each at every reboot. Many of these were followed by a string 'C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted', which happens to coincide with a S&D scan reporting the same SENDKEY.DLL under the problem category of VirtuMonde.

Tried several times let Spybot run at reboot to eliminate VirtuMonde to no avial. No other removal tools can seem to find VirtuMonde on my machine. I do not know if this is real.

I found SENDKEY.DLL under system32, could not find a justification for it, so I renamed it to see what would happen. I still get these messages:

08/24/07 12:56:38 Allowed value "Spybot - Search & Destroy" (new data: ""C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck") added in System Startup global entry!
08/24/07 12:56:46 Allowed value "SpybotDeletingB7667" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/24/07 12:56:50 Allowed value "SpybotDeletingD3432" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/24/07 12:56:53 Allowed value "SpybotDeletingA939" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/24/07 12:56:54 Allowed value "SpybotDeletingC6643" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/31/07 01:11:12 Allowed value "Spybot - Search & Destroy" (new data: ""C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck") added in System Startup global entry!
08/31/07 07:51:49 Allowed value "SpybotDeletingB8915" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/31/07 07:52:01 Allowed value "SpybotDeletingD4225" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/31/07 07:52:02 Allowed value "SpybotDeletingA778" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/31/07 07:52:03 Allowed value "SpybotDeletingC5113" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/31/07 09:44:52 Allowed value "SpybotDeletingB8915" (new data: "") deleted in System Startup user entry!
08/31/07 09:45:02 Allowed value "SpybotDeletingD4225" (new data: "") deleted in System Startup user entry!
08/31/07 14:52:18 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 14:52:21 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 19:40:34 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 19:40:40 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 19:57:09 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 19:57:11 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:04:11 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 20:04:19 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:09:43 Allowed value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 20:09:43 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:10:31 Allowed value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:36:46 Allowed value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 20:36:48 Allowed value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 21:01:58 Allowed value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 21:02:06 Allowed value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!

Please help.
Jon

Hello,

I suggest to upgrade to Spybot - Search & Destroy version 1.5 and make a scan in safe mode.
http://www.computerhope.com/issues/chsafe.htm
That should fix it.

Best regards
Sandra
Team Spybot

I've got the same issue. Have for a while now. I've been using 1.5 for a long time, but it's been a while since I ran it in Safe Mode. I'll have to try that later when I can reboot.

If you have success with this, please let the forum know.

Thanks,

nebulous

Hello,

You can't be using 1.5 for a long time because it has been released today.
*gg*
http://www.spybotupdates.com/files/spybotsd15.exe

Best regards
Sandra
Team Spybot

You are correct. Spybot S&D 1.4. Teamtimer 1.5.0.6.

I'm upgrading now.

Thanks,

nebulous

BTW, this is a duplicate thread to the following:
http://forums.spybot.info/showthread...SpybotDeleting

Well, I "spoke" too soon. I went to the download page and do not see 1.5 as an option. The latest download available is 1.4.

Sorry for the confusion. I just realized you gave me a link to download 1.5. I really am downloading it now.

I guess it just hasn't made it to the links page yet.

It's been a l-o-o-o-o-n-g night!

nebulous

Installed S&D 1.5 as Sandra suggested. 'SpybotDeleting' messages seem to have mysteriously disappeared - as if it never happened. Downloaded updates, immunized, ran full scan from normal bootup, found no issues. I'll take all this as good news.

BTW, I tried earlier to reboot in Safe Mode, but seemed not to go. My work computer is managed by network administrator - a script appears to require network login.

Sorry about duplicate post. Not sure my problem would have been noticed by tacking onto someone else's similar question. Thanks for the quick and intelligent response :) !

Jon

I installed S & D today to check on other problems I've been having, only to find that I contracted the dreaded 'SpybotDeletingBxxx', plus a couple similar ones ('MSConfig' was another). I tried the Safe Mode approach, but found that didn't work - any other ideas?

Hello,

Did you start your pc new after fixing those items after the scan?

Best regards
Sandra
Team Spybot

I did a restart after scanning in Safe mode - should I have just turned Off and then back ON?

Yes. :)