Persistent SpybotDeleting messages

Jon Northup

New member
Hello, I have a big problem with these 'SpybotDeletingAxxx' and 'SpybotDeletingCxxx' messages from TeaTimer, one each at every reboot. Many of these were followed by a string 'C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted', which happens to coincide with a S&D scan reporting the same SENDKEY.DLL under the problem category of VirtuMonde.

Tried several times let Spybot run at reboot to eliminate VirtuMonde to no avial. No other removal tools can seem to find VirtuMonde on my machine. I do not know if this is real.

I found SENDKEY.DLL under system32, could not find a justification for it, so I renamed it to see what would happen. I still get these messages:

08/24/07 12:56:38 Allowed value "Spybot - Search & Destroy" (new data: ""C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck") added in System Startup global entry!
08/24/07 12:56:46 Allowed value "SpybotDeletingB7667" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/24/07 12:56:50 Allowed value "SpybotDeletingD3432" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/24/07 12:56:53 Allowed value "SpybotDeletingA939" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/24/07 12:56:54 Allowed value "SpybotDeletingC6643" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/31/07 01:11:12 Allowed value "Spybot - Search & Destroy" (new data: ""C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck") added in System Startup global entry!
08/31/07 07:51:49 Allowed value "SpybotDeletingB8915" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/31/07 07:52:01 Allowed value "SpybotDeletingD4225" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup user entry!
08/31/07 07:52:02 Allowed value "SpybotDeletingA778" (new data: "command /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/31/07 07:52:03 Allowed value "SpybotDeletingC5113" (new data: "cmd /c del "C:\WINDOWS\system32\SENDKEY.DLL_tobedeleted"") added in System Startup global entry!
08/31/07 09:44:52 Allowed value "SpybotDeletingB8915" (new data: "") deleted in System Startup user entry!
08/31/07 09:45:02 Allowed value "SpybotDeletingD4225" (new data: "") deleted in System Startup user entry!
08/31/07 14:52:18 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 14:52:21 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 19:40:34 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 19:40:40 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 19:57:09 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 19:57:11 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:04:11 Denied value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 20:04:19 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:09:43 Allowed value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 20:09:43 Denied value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:10:31 Allowed value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 20:36:46 Allowed value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 20:36:48 Allowed value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!
08/31/07 21:01:58 Allowed value "SpybotDeletingA8135" (new data: "") deleted in System Startup global entry!
08/31/07 21:02:06 Allowed value "SpybotDeletingC4004" (new data: "") deleted in System Startup global entry!

Please help.
Jon
 
Experiencing the same problem

I've got the same issue. Have for a while now. I've been using 1.5 for a long time, but it's been a while since I ran it in Safe Mode. I'll have to try that later when I can reboot.

If you have success with this, please let the forum know.

Thanks,

nebulous
 
<blush>

You are correct. Spybot S&D 1.4. Teamtimer 1.5.0.6.

I'm upgrading now.

Thanks,

nebulous
 
Last edited:
Where is SpyBot v. 1.5?

Well, I "spoke" too soon. I went to the download page and do not see 1.5 as an option. The latest download available is 1.4.
 
Sheesh!

Sorry for the confusion. I just realized you gave me a link to download 1.5. I really am downloading it now.

I guess it just hasn't made it to the links page yet.

It's been a l-o-o-o-o-n-g night!

nebulous
 
SpybotDeleting messages have cleared up

Installed S&D 1.5 as Sandra suggested. 'SpybotDeleting' messages seem to have mysteriously disappeared - as if it never happened. Downloaded updates, immunized, ran full scan from normal bootup, found no issues. I'll take all this as good news.

BTW, I tried earlier to reboot in Safe Mode, but seemed not to go. My work computer is managed by network administrator - a script appears to require network login.

Sorry about duplicate post. Not sure my problem would have been noticed by tacking onto someone else's similar question. Thanks for the quick and intelligent response :) !

Jon
 
SpybotDeleting messages have NOT cleared up

I installed S & D today to check on other problems I've been having, only to find that I contracted the dreaded 'SpybotDeletingBxxx', plus a couple similar ones ('MSConfig' was another). I tried the Safe Mode approach, but found that didn't work - any other ideas?
 
SpybotDeleting messages have NOT cleared up

I did a restart after scanning in Safe mode - should I have just turned Off and then back ON?
 
Back
Top