Help with MightyMax, RegTool, etc.

Question

HeidiGiller 0 Junior Poster in Training

14 Years Ago

A friend's computer. He downloaded a bunch of crap in an attempt at antivirus protection. Clicking on malware popups. He paid money to RegTool. Can someone please assist this aspiring PC/Security nerd in cleaning his dirty logs? :) It would be greatly appreciated. I am currently running Microsoft Malicious Software Removal Tool. I am following the steps in the "Read Me First" cleaning thread. Have downloaded all the tools and going step by step. Also downloaded Comodo Internet Security for afterwards. I just wanted to get this thread started. Please advise me of what logs to post. Don't want to clog up this thread with unnecessary logs.
Here is HiJackThis log for starters. Thanks in advance, and have a great weekend!!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:47:45 PM, on 6/18/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\vsnp2uvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Research in Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
C:\Infinite Mind\eyeQ\ARLaunch.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\ehome\ehmsas.exe
C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE
C:\Program Files\Common Files\AOL\1179984262\ee\aolsoftware.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Users\Robert reed\Downloads\windows-kb890830-v3.8.exe
c:\a1d1ee4d55055cf04958\mrtstub.exe
C:\Windows\system32\MRT.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.vcstar.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AOLMAILTBSearch Class - {98572e47-b5fe-43de-9aea-492a1d3064cd} - C:\Program Files\AOL Email Toolbar\aolmailtb.dll
R3 - URLSearchHook: IAOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL Toolbar\aoltb.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: AOL Toolbar Loader - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL Toolbar\aoltb.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: AOL Email Toolbar Loader - {fbea8524-8c72-4208-9d12-7fb73e9926eb} - C:\Program Files\AOL Email Toolbar\aolmailtb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL Toolbar\aoltb.dll
O3 - Toolbar: eWoss Toolbar - {2fbf9890-6c46-4a4a-a910-c05bceea7fd4} - mscoree.dll (file missing)
O3 - Toolbar: AOL Email Toolbar - {a3704fa3-dbf6-46b5-b95e-0677dfd39577} - C:\Program Files\AOL Email Toolbar\aolmailtb.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [Cingular Communication Manager] "C:\Program Files\Cingular\Communication Manager\CingularCCM.exe" -a
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ITPIPSetup] "E:\setupstb.exe"
O4 - HKLM\..\Run: [snp2uvc] C:\Windows\vsnp2uvc.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0\AOL.EXE" -b
O4 - HKCU\..\Run: [Pareto_Update] C:\Program Files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [RIMDeviceManager] "C:\Program Files\Common Files\Research in Motion\RIMDeviceManager\RIMDeviceManager.exe" -RunServer
O4 - HKCU\..\Run: [LDM] C:\Users\Robert reed\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Desktop Manager.lnk = C:\Program Files\Research In Motion\BlackBerry\DesktopMgr.exe
O4 - Global Startup: HP Connections.lnk = C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Users\Robert reed\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: MiniEYE-MiniREAD Launch .lnk = C:\Infinite Mind\eyeQ\ARLaunch.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: &AOL Email Toolbar Search - C:\ProgramData\AOL Email Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &AOL Toolbar Search - C:\ProgramData\AOL\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O16 - DPF: {0BCADE60-1E93-11D8-ABDA-0004759647B3} (FastBid1 Class) - http://www.bxwa.com/fastbid/fastbidx1.cab
O16 - DPF: {26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} (AOL Pictures Uploader Class) - http://o.aolcdn.com/pictures/ap/Resources/v2.13/cab/aolpPlugins.10.6.0.8.cab
O16 - DPF: {32322460-3E7D-11D7-ABD8-0001029A9BA6} (FastBid Class) - http://www.bxwa.com/fastbid/fastbidx_plugin.cab
O16 - DPF: {6E704581-CCAE-46D2-9C64-20D724B3624E} (UnagiAx Class) - http://radaol-prod-web-rr.streamops.aol.com/mediaplugin/3.0.84.2/win32/unagi3.0.84.2.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.mswalkerincprojects.com/Projectmates/JUpload/XUpload.ocx
O18 - Protocol: bw+0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: eWoss Toolbar Updater (eWossUpdaterService) - Unknown owner - C:\Program Files\eWoss Toolbar\eWossToolbarUpdaterService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: OneTouch 4.0 Monitor - Visioneer Inc. - C:\Program Files\Visioneer\OneTouch 4.0\OtService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\supportsoft\bin\ssrc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 26012 bytes

windows-virus

4 Contributors
9 Replies
101 Views
4 Days Discussion Span
Latest Post 14 Years Ago Latest Post by PhilliePhan

jholland1964 650 Posting Expert

14 Years Ago

Oh my goodness!!! I don't believe I have EVER seen a MBA-M log like that! BUT...you didn't have it remove anything. Update and run another full scan, this time have it remove everything it finds, Reboot and then do the following:
Please Run the ESET Online Scanner and attach the ScanLog with your post for assistance.

* You will need to use Internet Explorer to to complete this scan.
* You will need to temporarily Disable your current Anti-virus program.
* Be sure the option to Remove found threats is checked and the option to Scan unwanted applications is Checked.
* When you have completed that scan, a scanlog ought to have been created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please post that log for us as directed below.

Reboot the computer again. Run another HiJackThis scan and post back with all three of those logs.

jholland1964 650 Posting Expert

14 Years Ago

Ok. Somebody else will be helping you then as I will be away for a week.

Biker920 0 Posting Whiz in Training

14 Years Ago

If he can't hold on long enough for volunteer help to get to his problem then I would run mbam up dated full scan with removal of malware enabled. down load Avast or Avira anti virus free version. Install one or the other not both up date and run scan with the choice, then let him figure out what to do with the rest of his problems and remember you can't help the impatient or unwilling. You tried. Later---

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

HeidiGiller 0 Junior Poster in Training · Answer 1 · 2010-06-19T03:07:52+00:00

Here is also the MBA-M log (I had ran that one first):

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4213

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18928

6/18/2010 12:52:29 PM
mbam-log-2010-06-18 (12-52-29).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 319138
Time elapsed: 1 hour(s), 31 minute(s), 38 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 21
Files Infected: 1027

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\RegTool (Rogue.RegTool) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\RegTool (Rogue.RegTool) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Users\*edited\AppData\Roaming\RegTool (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-07 18-41-260 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-07 18-41-260 (Rogue.RegTool) -> Files: 356 -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-11 14-37-040 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-13 14-47-590 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-09-29 17-09-420 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-10-19 16-11-430 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-10-21 20-14-320 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-11-16 17-41-380 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-11-21 15-59-460 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-12-11 15-00-270 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2010-01-06 13-14-500 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2010-01-15 16-19-540 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2010-01-18 08-47-580 (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Results (Rogue.RegTool) -> No action taken.
C:\Program Files\Registry Mighty (Rogue.RegistryMighty) -> No action taken.
C:\Program Files\Registry Mighty\RepairBackup (Rogue.RegistryMighty) -> No action taken.

Files Infected:
C:\Users\*edited\Downloads\regtool.exe (Rogue.Installer) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-02 21-21-120.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-03 22-48-530.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-04 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-04 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-07 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-07 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-08 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-08 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-08 21-55-070.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-09 16-31-040.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-10 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-10 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-11 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-11 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-12 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-12 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-13 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-13 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-14 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-14 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-15 09-39-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-15 10-36-100.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-15 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-15 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-16 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-16 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-17 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-17 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-18 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-18 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-19 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-19 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-20 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-20 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-21 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-21 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-22 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-22 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-27 19-25-020.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-28 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-28 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-04-30 14-17-190.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-01 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-01 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-02 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-02 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-03 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-03 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-04 13-52-290.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-05 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-05 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-06 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-06 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-07 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-07 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-08 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-08 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-09 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-09 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-10 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-10 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-11 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-11 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-13 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-13 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-14 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-14 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-15 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-15 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-16 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-16 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-16 14-59-480.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-17 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-17 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-18 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-18 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-19 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-19 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-20 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-20 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-21 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-21 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-22 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-22 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-26 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-26 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-27 15-22-490.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-28 15-22-560.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-29 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-29 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-30 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-30 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-31 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-05-31 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-01 13-26-560.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-02 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-02 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-03 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-03 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-04 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-04 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-05 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-05 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-06 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-06 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-07 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-07 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-08 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-08 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-09 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-09 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-10 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-10 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-11 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-11 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-14 17-56-260.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-15 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-15 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-16 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-16 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-17 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-17 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-18 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-18 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-23 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-23 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-24 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-24 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-25 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-25 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-26 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-26 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-27 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-27 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-28 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-28 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-29 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-29 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-30 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-06-30 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-01 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-01 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-07 20-00-550.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-08 06-35-180.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-08 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-08 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-09 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-09 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-10 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-10 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-11 12-00-060.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-11 12-00-070.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-12 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-12 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-14 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-14 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-15 06-41-120.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-15 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-15 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-27 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-27 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-28 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-28 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-07-29 22-17-060.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-03 07-05-020.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-03 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-03 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-10 18-17-230.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-13 19-54-160.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-14 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-14 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-15 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-15 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-16 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-16 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-17 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-17 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-18 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-18 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-19 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-19 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-20 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-20 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-21 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-21 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-22 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-22 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-23 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-23 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-24 20-20-080.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-08-26 18-47-470.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-01 19-51-550.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-05 15-05-070.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-13 12-32-430.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-20 09-38-520.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-20 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-20 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-23 08-14-220.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-29 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-29 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-30 08-17-510.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-30 15-15-030.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-09-30 15-15-040.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-02 23-45-030.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-03 18-00-430.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-04 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-04 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-07 21-32-470.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-08 19-27-040.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-14 07-17-570.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-14 19-16-040.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-17 15-32-080.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-17 15-58-050.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-17 20-12-240.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-18 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-18 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-19 08-06-320.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-19 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-19 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-19 16-10-510.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-21 10-31-200.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-21 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-21 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-26 13-00-370.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-27 11-25-410.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-27 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-27 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-10-28 18-37-490.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-03 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-03 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-04 14-28-270.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-08 18-43-280.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-09 18-28-420.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-11 16-33-180.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-12 12-47-510.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-14 07-01-400.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-16 16-13-490.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-16 16-13-550.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-17 06-01-130.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-18 11-32-260.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-18 17-25-220.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-20 14-26-550.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-21 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-21 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-23 21-15-530.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-24 13-19-130.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-25 08-26-480.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-11-30 17-51-580.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-04 18-18-400.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-04 18-18-401.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-09 18-05-050.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-11 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-11 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-12 17-37-330.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-12 17-37-331.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-14 15-45-140.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-18 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-18 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-18 14-31-050.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-19 08-27-500.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-20 13-23-340.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-21 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-21 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-22 15-50-340.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-22 15-50-350.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-24 12-50-550.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-24 12-50-551.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-26 09-44-520.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-26 19-11-210.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-26 19-11-211.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-27 12-52-220.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-28 13-34-560.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-29 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2009-12-29 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-03 13-24-100.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-04 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-04 12-00-011.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-05 12-40-220.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-06 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-06 12-00-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-07 15-10-150.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-09 16-28-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-09 16-28-030.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-10 00-14-240.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-10 11-05-280.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-10 11-10-300.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-10 12-00-000.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-10 12-00-001.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-10 13-14-500.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-10 17-11-310.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-11 21-43-070.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-12 14-10-460.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-12 17-13-590.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-13 07-54-080.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-13 17-13-390.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-14 16-34-020.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-14 16-34-030.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-14 17-21-520.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-15 06-42-440.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-15 14-50-010.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-15 14-50-030.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-16 10-31-300.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-16 12-00-070.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\Logs\2010-01-16 12-00-100.log (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file0.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file1.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file10.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file11.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file12.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file13.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file14.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file15.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file16.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file17.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file18.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file19.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file2.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file20.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file21.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file22.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file23.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file24.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file25.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file26.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file27.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file28.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file29.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file3.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file30.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file31.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file32.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file33.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file34.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file35.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file36.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file37.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file38.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file39.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file4.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file40.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file41.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file42.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file43.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file44.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file45.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file46.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file47.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file48.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file49.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file5.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file50.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file6.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file7.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file8.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\file9.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\filelist.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-0.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-1.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-10.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-11.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-12.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-13.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-14.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-15.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-16.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-17.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-18.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-19.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-2.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-20.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-21.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-22.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-23.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-24.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-25.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-26.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-27.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-28.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-29.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-3.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-30.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-31.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-32.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-33.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-34.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-35.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-36.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-37.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-38.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-39.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-4.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-40.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-5.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-6.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-7.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-8.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 13-42-060\regb-9.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\filelist.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-0.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-1.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-10.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-100.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-101.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-102.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-103.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-104.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-105.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-106.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-107.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-108.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-109.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-11.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-110.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-111.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-112.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-113.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-114.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-115.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-116.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-117.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-118.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-119.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-12.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-120.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-121.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-122.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-123.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-124.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-125.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-126.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-127.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-128.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-129.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-13.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-130.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-131.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-132.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-133.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-134.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-135.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-136.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-137.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-138.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-139.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-14.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-140.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-141.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-142.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-143.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-144.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-145.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-146.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\regb-147.db (Rogue.RegTool) -> No action taken.
C:\Users\*edited\AppData\Roaming\RegTool\QuarantineW\2009-04-08 19-41-010\

HeidiGiller 0 Junior Poster in Training · Answer 2 · 2010-06-20T01:03:19+00:00

I posted MBA-M right before I had it remove everything. Wanted to get the ball rolling. Was mid-scan on another prog, when I had to leave. This person didn't want to leave the laptop with me to finish, so I'll have to continue on Monday. But thanks for the reply so far. Will get right on it as soon as I get back to the pc.

HeidiGiller 0 Junior Poster in Training · Answer 3 · 2010-06-22T06:00:57+00:00

Ok. So, I hadn't removed anything yet on MBA-M when I posted the previous log. I still had it open and I just had it remove the findings. Scan this morning came up with 0 infected files. And ESET online scanner came up with 0 results as well (which is very good!). So here is the MBA-M and HiJackThis logs. The ESET log looks kinda empty, so I'm not sure it saved the log properly. But like I said, the results were no infections found. Here are the logs. Thanks again so far!!

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4213

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18928

6/21/2010 10:30:59 AM
mbam-log-2010-06-21 (10-30-59).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 319921
Time elapsed: 1 hour(s), 31 minute(s), 20 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
esets_scanner_update returned -1 esets_gle=1
esets_scanner_update returned -1 esets_gle=53251

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:48:39 PM, on 6/21/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\vsnp2uvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Research in Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
C:\Infinite Mind\eyeQ\ARLaunch.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\AOL 9.0\waol.exe
C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\AOL\1179984262\ee\aolsoftware.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.vcstar.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AOLMAILTBSearch Class - {98572e47-b5fe-43de-9aea-492a1d3064cd} - C:\Program Files\AOL Email Toolbar\aolmailtb.dll
R3 - URLSearchHook: IAOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL Toolbar\aoltb.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: AOL Toolbar Loader - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL Toolbar\aoltb.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: AOL Email Toolbar Loader - {fbea8524-8c72-4208-9d12-7fb73e9926eb} - C:\Program Files\AOL Email Toolbar\aolmailtb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL Toolbar\aoltb.dll
O3 - Toolbar: eWoss Toolbar - {2fbf9890-6c46-4a4a-a910-c05bceea7fd4} - mscoree.dll (file missing)
O3 - Toolbar: AOL Email Toolbar - {a3704fa3-dbf6-46b5-b95e-0677dfd39577} - C:\Program Files\AOL Email Toolbar\aolmailtb.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [Cingular Communication Manager] "C:\Program Files\Cingular\Communication Manager\CingularCCM.exe" -a
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ITPIPSetup] "E:\setupstb.exe"
O4 - HKLM\..\Run: [snp2uvc] C:\Windows\vsnp2uvc.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0\AOL.EXE" -b
O4 - HKCU\..\Run: [Pareto_Update] C:\Program Files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [LDM] C:\Users\Robert reed\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Desktop Manager.lnk = C:\Program Files\Research In Motion\BlackBerry\DesktopMgr.exe
O4 - Global Startup: HP Connections.lnk = C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Users\Robert reed\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: MiniEYE-MiniREAD Launch .lnk = C:\Infinite Mind\eyeQ\ARLaunch.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: &AOL Email Toolbar Search - C:\ProgramData\AOL Email Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &AOL Toolbar Search - C:\ProgramData\AOL\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O16 - DPF: {0BCADE60-1E93-11D8-ABDA-0004759647B3} (FastBid1 Class) - http://www.bxwa.com/fastbid/fastbidx1.cab
O16 - DPF: {26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} (AOL Pictures Uploader Class) - http://o.aolcdn.com/pictures/ap/Resources/v2.13/cab/aolpPlugins.10.6.0.8.cab
O16 - DPF: {32322460-3E7D-11D7-ABD8-0001029A9BA6} (FastBid Class) - http://www.bxwa.com/fastbid/fastbidx_plugin.cab
O16 - DPF: {6E704581-CCAE-46D2-9C64-20D724B3624E} (UnagiAx Class) - http://radaol-prod-web-rr.streamops.aol.com/mediaplugin/3.0.84.2/win32/unagi3.0.84.2.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.mswalkerincprojects.com/Projectmates/JUpload/XUpload.ocx
O18 - Protocol: bw+0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: eWoss Toolbar Updater (eWossUpdaterService) - Unknown owner - C:\Program Files\eWoss Toolbar\eWossToolbarUpdaterService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: OneTouch 4.0 Monitor - Visioneer Inc. - C:\Program Files\Visioneer\OneTouch 4.0\OtService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\supportsoft\bin\ssrc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 25352 bytes

HeidiGiller 0 Junior Poster in Training · Answer 4 · 2010-06-23T01:17:44+00:00

Can someone please reply soon. This is the last day he wants me here. He thinks it's taking too long. I'm still worried about RegTool. Thanks so much!!!

HeidiGiller 0 Junior Poster in Training · Answer 5 · 2010-06-23T09:47:06+00:00

@Biker920: Thanks. I did run mbam again. It found nothing. Installed Comodo Internet Security, which I think is the best option for this person, since it's an all in one. I use Comodo Firewall, so I'm familiar with the interface, etc. Did a full system scan with Comodo, it found 5 infected files. Out of the 5, 3 were not actual virus (Vonage related). 2 were trojan Java exploits, can't remember the file path offhand, but they were in a temp folder. I had Comodo disinfect them and hope all is ok I guess. I can go back if there are some file I need to delete manually. But I just hate to leave it "unfinished". That's just not me. Thanks again for all the help and I'll wait to either here from someone further, or post that all is actually well for this pc.

PhilliePhan 171 Central Scrutinizer Team Colleague · Answer 6 · 2010-06-23T10:18:05+00:00

Installed Comodo Internet Security, which I think is the best option for this person, since it's an all in one. I use Comodo Firewall, so I'm familiar with the interface, etc. Did a full system scan with Comodo, it found 5 infected files. Out of the 5, 3 were not actual virus (Vonage related). 2 were trojan Java exploits, can't remember the file path offhand, but they were in a temp folder. I had Comodo disinfect them and hope all is ok I guess. I can go back if there are some file I need to delete manually. But I just hate to leave it "unfinished". That's just not me. Thanks again for all the help and I'll wait to either here from someone further, or post that all is actually well for this pc.

Sorry for the wait - we have very few volunteers and it's a busy time of the year for most away from the compy.

Anyhoo, Comodo is solid. No worries there.

-- Make sure all older versions of Java have been uninstalled via Add / Remove Programs.
If you are not at Version 6 Update 20 , then you'll need to update.
Also, run ATF-Cleaner after updating. This will flush the Java cache, among other things.

-- The logs look OK. If you are not having any more issues, you're probably good to go. You can "fix" these entries with HJT, just to tidy things up a bit:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O16 - DPF: {0BCADE60-1E93-11D8-ABDA-0004759647B3} (FastBid1 Class) - http://www.bxwa.com/fastbid/fastbidx1.cab
O16 - DPF: {26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} (AOL Pictures Uploader Class) - http://o.aolcdn.com/pictures/ap/Reso...s.10.6.0.8.cab
O16 - DPF: {32322460-3E7D-11D7-ABD8-0001029A9BA6} (FastBid Class) - http://www.bxwa.com/fastbid/fastbidx_plugin.cab
O16 - DPF: {6E704581-CCAE-46D2-9C64-20D724B3624E} (UnagiAx Class) - http://radaol-prod-web-rr.streamops....gi3.0.84.2.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe...bat/nos/gp.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.mswalkerincprojects.com/P...ad/XUpload.ocx

O18 - Protocol: bw+0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {8B87F8E3-B8FB-4A37-AB98-AEDD53081488} - C:\Users\Robert reed\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

You might wish to dump Desktop Messenger altogether....

Cheers :)
PP