8 Ghostly registry deletes every time I boot my Portable

infinisa

Hello All

I have Spybot - Search & Destroy 1.4 installed on my Portable computer (running MS Windows XP SP2), whose resident component detects and seeks authorization for registry modifications.

What is happening is that every time I boot the portable, Spybot alerts me to eight registry delete attempts, all of which are trying to delete registry entries that no longer exist!

This is very irritating. Can anyone figure how to kill these registry deletes, so that I don't have to deactivate Spybot?

Thanks for your help.

P.S.: The non-existent registry entries being "deleted" (and 4 being changed) are as follows:

Registry Entry 1:

category: System Startup user Entry
Change: Value deleted
Entry: McAfee.InistantUpdate.Monitor
Old data: "C:\Program Files\McAfee\McAfee Shared ...
Note: This is from McAfee VirusScan which I uninstalled some time ago

Registry Entry 2:

category: System Startup global entry
Change: Value deleted
Entry: (Blank)
Old data: (Blank)
Note: This one is a real mystery

Registry Entry 3:

category: System Startup global entry
Change: Value deleted
Entry: GSICONEXE
Old data: GSICON.EXE
Note: Entries 3 to 5 are from a SpeedTouch USB Modem driver which I uninstalled some time ago

Registry Entry 4:

category: System Startup global entry
Change: Value deleted
Entry: DSLAGENTEXE
Old data: dslagent.exe USB
Note: See 3

Registry Entry 5:

category: System Startup global entry
Change: Value deleted
Entry: SpeedTouch USB Diagnostics
Old data: "C:\Program Files\ThomsonSpeedTouch USB...
Note: See 3

Registry Entry 6:

category: System Startup global entry
Change: Value deleted
Entry: HP Component Manager
Old data: "C:\Program Files\HP\hpcoretech\hpcmpmg...
Note: This is from an HP multifunction driver which I uninstalled some time ago

Registry Entry 7:

category: System Startup global entry
Change: Value deleted
Entry: Zone Labs Client
Old data: "C:\Program Files\Zone Labs\ZoneAlarm\zl...
Note: This appears to refer to the ZonaAlarm client, zlclient.exe, which is weird as this program is currently installed

Registry Entry 8:

category: System Startup global entry
Change: Value deleted
Entry: MSConfig
Old data: "C:\WINDOWS\PCHealth\HelpCtr\Binaries\...
Note: This refers to good old Windows MSConfig - probably from the option not to display the program when MSConfig is used to modify the system startup

Registry Entry 9:

category: Browser Page
Change: Value changed
Entry: Search Page
Old data: http://www.microsoft.com/isapi/redir.dll?...
New data: http://go.microsoft.com/fwlink/?LinkId=548...
Note: Entries 9 to 12 are typical Microsoft messing around

Registry Entry 10:

category: Browser Page
Change: Value changed
Entry: Search Page
Old data: http://www.microsoft.com/isapi/redir.dll?...
New data: http://go.microsoft.com/fwlink/?LinkId=691...
Note: See 9

Registry Entry 11:

category: Browser Page
Change: Value changed
Entry: Default_Page_URL
Old data: http://www.microsoft.com/isapi/redir.dll?...
New data: http://go.microsoft.com/fwlink/?LinkId=691...
Note: See 9

Registry Entry 12:

category: Browser Page
Change: Value changed
Entry: Default_Page_URL
Old data: http://www.microsoft.com/isapi/redir.dll?...
New data: http://go.microsoft.com/fwlink/?LinkId=548...
Note: See 9

badai

uninstall spybot
re-install, this time don't select teatime. you don't really need it anyway.

mystzero

Alternatively, you could also open regedit and navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run or HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run and delete the value data which corresponds to the resident teatimer tool.

infinisa

Hello All

Thanks for these suggestions. I agree that if all else fails, I'm better off uninstalling the teatimer component of Spybot S&D.

Bones

Have you looked in the registry to verify that those keys actually don't exist? When you uninstall something sometimes the reg keys will not be deleted untill the restart after install.

What it sounds like is that those reg keys were flagged for deletion on the next reboot after the software was uninstalled but tea timer is not allowing it. I'm just guessing here as I don't know much about tea timer as I never enable that feature of spybot.