Spybot Search and Destroy - Registry Change?

Question

I just downloaded spybot search and destroy today but it keeps popping up a message that says "spybot has detected an important registry entry that has been changed" every time i click on something, i keep denying but the thing keeps popping up over and over again
this is where the registry change is
cmd.exe /c del "C:/WINDOWS/system32/siguhafe.dll_old"

i don't want to allow it because for the past few days, i've been getting tons of trojans and tracking cookies. no matter how many times i scan and delete with avg, ccleaner, avast, or spybot, there are always more trojans and tracking cookies
and they are usually found in system32 so of course im afraid of allowing a change in that system since it will probably install more trojans and stuff

What should i do?

Answer 1

Best Answer - Chosen by Voters

That looks suspicious. Disallow it, but tell Teatimer (Spybot resident) to remember that decision, and it should not prompt any more.

You had better do a full scan and cleanup of your system. Here's another link to another site that has clean up steps, and if you register for free, people can analyze the logs for you.

http://www.techspot.com/vb/topic58138.ht…

Edit: Mind you , it looks like a command to delete a file that has been re-labeled as "_old". It may be worth deleting it, but do all the scans first

Answer 2

First off, don't take any technical advice from people here. There are professionals that can get this problem sorted for you.

http://www.bleepingcomputer.com/forums/t…
Start at that topic.

Then when you've got that installed, post a log here:

http://www.bleepingcomputer.com/forums/f…

They know what they're doing and they can help you, hopefully without doing damage.