Persistent SpybotDeleting messages
Hello, I have a big problem with these 'SpybotDeletingAxxx' and 'SpybotDeletingCxxx' messages from TeaTimer, one each at every reboot. Many of these were followed by a string 'C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted', which happens to coincide with a S&D scan reporting the same SENDKEY.DLL under the problem category of VirtuMonde.
Tried several times let Spybot run at reboot to eliminate VirtuMonde to no avial. No other removal tools can seem to find VirtuMonde on my machine. I do not know if this is real.
I found SENDKEY.DLL under system32, could not find a justification for it, so I renamed it to see what would happen. I still get these messages:
08/24/07 12:56:38 Allowed value "Spybot - Search & Destroy" (new data: ""C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck") added in System Startup global entry!
08/24/07 12:56:46 Allowed value "SpybotDeletingB7667" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/24/07 12:56:50 Allowed value "SpybotDeletingD3432" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/24/07 12:56:53 Allowed value "SpybotDeletingA939" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/24/07 12:56:54 Allowed value "SpybotDeletingC6643" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/31/07 01:11:12 Allowed value "Spybot - Search & Destroy" (new data: ""C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck") added in System Startup global entry!
08/31/07 07:51:49 Allowed value "SpybotDeletingB8915" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/31/07 07:52:01 Allowed value "SpybotDeletingD4225" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/31/07 07:52:02 Allowed value "SpybotDeletingA778" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/31/07 07:52:03 Allowed value "SpybotDeletingC5113" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/31/07 09:44:52 Allowed value "SpybotDeletingB8915" (new data: "") deleted in System Startup user entry!
08/31/07 09:45:02 Allowed value "SpybotDeletingD4225" (new data: "") deleted in System Startup user entry!
08/31/07 14:52:18 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 14:52:21 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 19:40:34 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 19:40:40 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 19:57:09 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 19:57:11 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:04:11 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 20:04:19 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:09:43 Allowed value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 20:09:43 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:10:31 Allowed value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:36:46 Allowed value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 20:36:48 Allowed value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 21:01:58 Allowed value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 21:02:06 Allowed value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
Please help.
Jon
Experiencing the same problem
I've got the same issue. Have for a while now. I've been using 1.5 for a long time, but it's been a while since I ran it in Safe Mode. I'll have to try that later when I can reboot.
If you have success with this, please let the forum know.
Thanks,
nebulous
SpybotDeleting messages have cleared up
Installed S&D 1.5 as Sandra suggested. 'SpybotDeleting' messages seem to have mysteriously disappeared - as if it never happened. Downloaded updates, immunized, ran full scan from normal bootup, found no issues. I'll take all this as good news.
BTW, I tried earlier to reboot in Safe Mode, but seemed not to go. My work computer is managed by network administrator - a script appears to require network login.
Sorry about duplicate post. Not sure my problem would have been noticed by tacking onto someone else's similar question. Thanks for the quick and intelligent response :) !
Jon
SpybotDeleting messages have NOT cleared up
I installed S & D today to check on other problems I've been having, only to find that I contracted the dreaded 'SpybotDeletingBxxx', plus a couple similar ones ('MSConfig' was another). I tried the Safe Mode approach, but found that didn't work - any other ideas?