What I would do is look at the actual payload characteristics and compare them to what Spybot is hitting on. If they are different, then you know that Spybot is generating false positives.

This...