Spybot - registry entry problems!!

[Foxbody]

I am sorry for the potential newbie question as I have searched the FAQ and the forum for an answer to no avail.

I just updated Spybot to 1.5, and after updating, scanning and immunizing my computer, Spybot started saying it has detected an important registry change. This is only a partial list, and isn't showing signs of stopping.

1/4/2008 6:52:48 PM Denied (based on user decision) value "SpybotDeletingB8876" (new data: "command /c del "C:\WINNT\system32\azledit.dll_old"") added in System Startup user entry!
1/4/2008 7:05:36 PM Denied (based on user decision) value "SpybotDeletingD241" (new data: "cmd /c del "C:\WINNT\system32\azledit.dll_old"") added in System Startup user entry!
1/4/2008 7:05:44 PM Denied (based on user decision) value "SpybotDeletingB9184" (new data: "command /c del "C:\WINNT\system32\axlui.dll_old"") added in System Startup user entry!
1/4/2008 7:05:53 PM Denied (based on user decision) value "SpybotDeletingD7736" (new data: "cmd /c del "C:\WINNT\system32\axlui.dll_old"") added in System Startup user entry!
1/4/2008 8:18:06 PM Denied (based on user decision) value "SpybotDeletingB8216" (new data: "command /c del "C:\WINNT\system32\axaamon.dll_old"") added in System Startup user entry!
1/4/2008 8:18:15 PM Denied (based on user decision) value "SpybotDeletingD7416" (new data: "cmd /c del "C:\WINNT\system32\axaamon.dll_old"") added in System Startup user entry!
1/4/2008 8:18:21 PM Denied (based on user decision) value "SpybotDeletingB9342" (new data: "command /c del "C:\WINNT\system32\awsetupc.dll_old"") added in System Startup user entry!
1/4/2008 8:18:24 PM Denied (based on user decision) value "SpybotDeletingD4008" (new data: "cmd /c del "C:\WINNT\system32\awsetupc.dll_old"") added in System Startup user entry!
1/4/2008 8:18:26 PM Denied (based on user decision) value "SpybotDeletingB4462" (new data: "command /c del "C:\WINNT\system32\awd.dll_old"") added in System Startup user entry!
1/4/2008 8:18:29 PM Denied (based on user decision) value "SpybotDeletingD3418" (new data: "cmd /c del "C:\WINNT\system32\awd.dll_old"") added in System Startup user entry!
1/4/2008 8:18:31 PM Denied (based on user decision) value "SpybotDeletingB4148" (new data: "command /c del "C:\WINNT\system32\awctres.dll_old"") added in System Startup user entry!
1/4/2008 8:18:35 PM Denied (based on user decision) value "SpybotDeletingD4233" (new data: "cmd /c del "C:\WINNT\system32\awctres.dll_old"") added in System Startup user entry!
1/4/2008 8:18:37 PM Denied (based on user decision) value "SpybotDeletingB9293" (new data: "command /c del "C:\WINNT\system32\avsldp.dll_old"") added in System Startup user entry!
1/4/2008 8:18:40 PM Denied (based on user decision) value "SpybotDeletingD5459" (new data: "cmd /c del "C:\WINNT\system32\avsldp.dll_old"") added in System Startup user entry!
1/4/2008 8:18:41 PM Denied (based on user decision) value "SpybotDeletingB9500" (new data: "command /c del "C:\WINNT\system32\avctres.dll_old"") added in System Startup user entry!
1/4/2008 8:18:42 PM Denied (based on user decision) value "SpybotDeletingD4660" (new data: "cmd /c del "C:\WINNT\system32\avctres.dll_old"") added in System Startup user entry!
1/4/2008 8:18:44 PM Denied (based on user decision) value "SpybotDeletingB4735" (new data: "command /c del "C:\WINNT\system32\aului.dll_old"") added in System Startup user entry!
1/4/2008 8:18:47 PM Denied (based on user decision) value "SpybotDeletingD8743" (new data: "cmd /c del "C:\WINNT\system32\aului.dll_old"") added in System Startup user entry!
1/4/2008 9:34:45 PM Allowed (based on user decision) value "SpybotDeletingB8944" (new data: "command /c del "C:\WINNT\system32\atsetupc.dll_old"") added in System Startup user entry!
1/4/2008 9:34:48 PM Allowed (based on user decision) value "SpybotDeletingD7876" (new data: "cmd /c del "C:\WINNT\system32\atsetupc.dll_old"") added in System Startup user entry!
1/4/2008 9:34:50 PM Allowed (based on user decision) value "SpybotDeletingB7541" (new data: "command /c del "C:\WINNT\system32\atd.dll_old"") added in System Startup user entry!
1/4/2008 9:34:54 PM Allowed (based on user decision) value "SpybotDeletingD4964" (new data: "cmd /c del "C:\WINNT\system32\atd.dll_old"") added in System Startup user entry!
1/4/2008 9:34:55 PM Allowed (based on user decision) value "SpybotDeletingB5248" (new data: "command /c del "C:\WINNT\system32\assldpc.dll_old"") added in System Startup user entry!
1/4/2008 9:34:56 PM Allowed (based on user decision) value "SpybotDeletingD4728" (new data: "cmd /c del "C:\WINNT\system32\assldpc.dll_old"") added in System Startup user entry!
1/4/2008 9:34:59 PM Allowed (based on user decision) value "SpybotDeletingB5703" (new data: "command /c del "C:\WINNT\system32\asd.dll_old"") added in System Startup user entry!
1/4/2008 9:35:01 PM Allowed (based on user decision) value "SpybotDeletingD7933" (new data: "cmd /c del "C:\WINNT\system32\asd.dll_old"") added in System Startup user entry!
1/4/2008 9:35:03 PM Allowed (based on user decision) value "SpybotDeletingB7558" (new data: "command /c del "C:\WINNT\system32\ard.dll_old"") added in System Startup user entry!
1/4/2008 9:35:04 PM Allowed (based on user decision) value "SpybotDeletingD144" (new data: "cmd /c del "C:\WINNT\system32\ard.dll_old"") added in System Startup user entry!
1/4/2008 9:35:06 PM Allowed (based on user decision) value "SpybotDeletingB8138" (new data: "command /c del "C:\WINNT\system32\araamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:07 PM Allowed (based on user decision) value "SpybotDeletingD3993" (new data: "cmd /c del "C:\WINNT\system32\araamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:07 PM Allowed (based on user decision) value "SpybotDeletingB8208" (new data: "command /c del "C:\WINNT\system32\aoctres.dll_old"") added in System Startup user entry!
1/4/2008 9:35:08 PM Allowed (based on user decision) value "SpybotDeletingD7005" (new data: "cmd /c del "C:\WINNT\system32\aoctres.dll_old"") added in System Startup user entry!
1/4/2008 9:35:09 PM Allowed (based on user decision) value "SpybotDeletingB8796" (new data: "command /c del "C:\WINNT\system32\and.dll_old"") added in System Startup user entry!
1/4/2008 9:35:10 PM Allowed (based on user decision) value "SpybotDeletingD6273" (new data: "cmd /c del "C:\WINNT\system32\and.dll_old"") added in System Startup user entry!
1/4/2008 9:35:11 PM Allowed (based on user decision) value "SpybotDeletingB1651" (new data: "command /c del "C:\WINNT\system32\anaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:13 PM Allowed (based on user decision) value "SpybotDeletingD5703" (new data: "cmd /c del "C:\WINNT\system32\anaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:14 PM Allowed (based on user decision) value "SpybotDeletingB5787" (new data: "command /c del "C:\WINNT\system32\alsmib.dll_old"") added in System Startup user entry!
1/4/2008 9:35:16 PM Allowed (based on user decision) value "SpybotDeletingD7455" (new data: "cmd /c del "C:\WINNT\system32\alsmib.dll_old"") added in System Startup user entry!
1/4/2008 9:35:17 PM Allowed (based on user decision) value "SpybotDeletingB913" (new data: "command /c del "C:\WINNT\system32\ald.dll_old"") added in System Startup user entry!
1/4/2008 9:35:19 PM Allowed (based on user decision) value "SpybotDeletingD1598" (new data: "cmd /c del "C:\WINNT\system32\ald.dll_old"") added in System Startup user entry!
1/4/2008 9:35:20 PM Allowed (based on user decision) value "SpybotDeletingB9614" (new data: "command /c del "C:\WINNT\system32\alaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:22 PM Allowed (based on user decision) value "SpybotDeletingD921" (new data: "cmd /c del "C:\WINNT\system32\alaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:23 PM Allowed (based on user decision) value "SpybotDeletingB3590" (new data: "command /c del "C:\WINNT\system32\aksmib.dll_old"") added in System Startup user entry!
1/4/2008 9:35:24 PM Allowed (based on user decision) value "SpybotDeletingD5889" (new data: "cmd /c del "C:\WINNT\system32\aksmib.dll_old"") added in System Startup user entry!
1/4/2008 9:35:25 PM Allowed (based on user decision) value "SpybotDeletingB2867" (new data: "command /c del "C:\WINNT\system32\aksldpc.dll_old"") added in System Startup user entry!
1/4/2008 9:35:25 PM Allowed (based on user decision) value "SpybotDeletingD5157" (new data: "cmd /c del "C:\WINNT\system32\aksldpc.dll_old"") added in System Startup user entry!
1/4/2008 9:35:27 PM Allowed (based on user decision) value "SpybotDeletingB8169" (new data: "command /c del "C:\WINNT\system32\akd.dll_old"") added in System Startup user entry!
1/4/2008 9:35:28 PM Allowed (based on user decision) value "SpybotDeletingD5881" (new data: "cmd /c del "C:\WINNT\system32\akd.dll_old"") added in System Startup user entry!
1/4/2008 9:35:29 PM Allowed (based on user decision) value "SpybotDeletingB8550" (new data: "command /c del "C:\WINNT\system32\akaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:31 PM Allowed (based on user decision) value "SpybotDeletingD828" (new data: "cmd /c del "C:\WINNT\system32\akaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:33 PM Allowed (based on user decision) value "SpybotDeletingB8428" (new data: "command /c del "C:\WINNT\system32\ajptif.dll_old"") added in System Startup user entry!
1/4/2008 9:35:34 PM Allowed (based on user decision) value "SpybotDeletingD1011" (new data: "cmd /c del "C:\WINNT\system32\ajptif.dll_old"") added in System Startup user entry!
1/4/2008 9:35:35 PM Allowed (based on user decision) value "SpybotDeletingB5492" (new data: "command /c del "C:\WINNT\system32\ajaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:36 PM Allowed (based on user decision) value "SpybotDeletingD9181" (new data: "cmd /c del "C:\WINNT\system32\ajaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:37 PM Allowed (based on user decision) value "SpybotDeletingB2473" (new data: "command /c del "C:\WINNT\system32\aitiveds.dll_old"") added in System Startup user entry!
1/4/2008 9:35:38 PM Allowed (based on user decision) value "SpybotDeletingD7192" (new data: "cmd /c del "C:\WINNT\system32\aitiveds.dll_old"") added in System Startup user entry!
1/4/2008 9:35:39 PM Allowed (based on user decision) value "SpybotDeletingB6734" (new data: "command /c del "C:\WINNT\system32\aid.dll_old"") added in System Startup user entry!
1/4/2008 9:35:43 PM Allowed (based on user decision) value "SpybotDeletingD748" (new data: "cmd /c del "C:\WINNT\system32\aid.dll_old"") added in System Startup user entry!
1/4/2008 9:35:45 PM Allowed (based on user decision) value "SpybotDeletingB4529" (new data: "command /c del "C:\WINNT\system32\aictres.dll_old"") added in System Startup user entry!
1/4/2008 9:35:46 PM Allowed (based on user decision) value "SpybotDeletingD7719" (new data: "cmd /c del "C:\WINNT\system32\aictres.dll_old"") added in System Startup user entry!
1/4/2008 9:35:47 PM Allowed (based on user decision) value "SpybotDeletingB1182" (new data: "command /c del "C:\WINNT\system32\ahtxprxy.dll_old"") added in System Startup user entry!
1/4/2008 9:35:48 PM Allowed (based on user decision) value "SpybotDeletingD7740" (new data: "cmd /c del "C:\WINNT\system32\ahtxprxy.dll_old"") added in System Startup user entry!
1/4/2008 9:35:49 PM Allowed (based on user decision) value "SpybotDeletingB5588" (new data: "command /c del "C:\WINNT\system32\ahtiveds.dll_old"") added in System Startup user entry!
1/4/2008 9:35:50 PM Allowed (based on user decision) value "SpybotDeletingD4863" (new data: "cmd /c del "C:\WINNT\system32\ahtiveds.dll_old"") added in System Startup user entry!
1/4/2008 9:35:51 PM Allowed (based on user decision) value "SpybotDeletingB6196" (new data: "command /c del "C:\WINNT\system32\ahd.dll_old"") added in System Startup user entry!
1/4/2008 9:35:52 PM Allowed (based on user decision) value "SpybotDeletingD6090" (new data: "cmd /c del "C:\WINNT\system32\ahd.dll_old"") added in System Startup user entry!
1/4/2008 9:35:53 PM Allowed (based on user decision) value "SpybotDeletingB9275" (new data: "command /c del "C:\WINNT\system32\ahaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:54 PM Allowed (based on user decision) value "SpybotDeletingD9001" (new data: "cmd /c del "C:\WINNT\system32\ahaamon.dll_old"") added in System Startup user entry!
1/4/2008 9:35:55 PM Allowed (based on user decision) value "SpybotDeletingB8360" (new data: "command /c del "C:\WINNT\system32\agd.dll_old"") added in System Startup user entry!
1/4/2008 9:35:57 PM Allowed (based on user decision) value "SpybotDeletingD6093" (new data: "cmd /c del "C:\WINNT\system32\agd.dll_old"") added in System Startup user entry!
1/4/2008 9:44:37 PM Allowed (based on user decision) value "SpybotDeletingB7228" (new data: "command /c del "C:\WINNT\system32\afsmib.dll_old"") added in System Startup user entry!
1/4/2008 9:44:38 PM Allowed (based on user decision) value "SpybotDeletingD4199" (new data: "cmd /c del "C:\WINNT\system32\afsmib.dll_old"") added in System Startup user entry!
1/4/2008 9:44:39 PM Allowed (based on user decision) value "SpybotDeletingB5111" (new data: "command /c del "C:\WINNT\system32\afd.dll_old"") added in System Startup user entry!
1/4/2008 9:44:40 PM Allowed (based on user decision) value "SpybotDeletingD5732" (new data: "cmd /c del "C:\WINNT\system32\afd.dll_old"") added in System Startup user entry!
1/4/2008 9:44:41 PM Allowed (based on user decision) value "SpybotDeletingB7042" (new data: "command /c del "C:\WINNT\system32\aesetupc.dll_old"") added in System Startup user entry!

I am also hoping that this issue is what is causing my computer to run EXTREMELY slow.

Any help would be greatly appreciated!

[chi-va]

Do you use the Spybot-S&D 1.5 final version or the latest Spybot-S&D 1.5 beta version?

There could be a slow down in the first restart after your Spybot-S&D fix because it has set many entries in the system startup to delete malware related files in the next reboot. The second restart should be faster because these entries should only run once. Was the second restart faster?

[Foxbody]

The info says it is version 1.5.1.15

I honestly do not know much when it comes to this type of software. I don't know whether I was suppose to allow these changes or not. Something is using all of the computers usage. I restarted the computer to see what would happen, probably a big mistake, and upon startup, about thirty or more different windows popped up and disappeared that looked like windows prompts (I am running Windows 2000 Pro on said computer). After those went away more of the "allow or deny registry change" screens are popping up, so i have just stopped answering them and I am letting that computer sit there.

I am now afraid I have a bigger problem than I initially thought, and i thought it would be best to consult with the masters. Is this post in the right forum???

[chi-va]

About thirty Windows prompts should be the entries which Spybot-S&D has inserted in your system startup.

E.g.:

new data: "command /c del C:\WINNT\system32\atsetupc.dll_old""

This command is telling Windows to delete the file
"atsetupc.dll_old" in the folder "C:\WINNT\system32\"

Blindly allowing or denying changes is not recommended. Please ask Team Spybot directly if you are not sure which entries you should deny or allow.

http://www.spybot.info/en/contact/software.html

[chi-va]

By the way, prompts with "value "SpybotDeleting..."" should indicate that Spybot-S&D has set these entries. If you trust that these entries are really from Spybot-S&D you can simply allow them so that Spybot-S&D can do its job.

It would be nice if the Teatimer could automatically allow these entries if it knows that they are from Spybot-S&D. This would make it easier for normal users to manage the decisions. I'm not sure if it is already implemented in the newest version.

[chi-va]

Found it. Already implemented.

http://forums.spybot.info/project.php?issueid=68