Livin
2008-09-27, 17:56
This started with an update a few months ago.
I have ran spybot in safe mode twice and it does not resolve this problem...
9/3/2008 7:35:26 AM Allowed (based on user decision) value "SpybotDeletingA3989" (new data: "") deleted in System Startup global entry!
9/3/2008 7:35:27 AM Allowed (based on user decision) value "SpybotDeletingC9478" (new data: "") deleted in System Startup global entry!
9/5/2008 12:25:43 AM Allowed (based on user whitelist) value "PaperPort PTD" (new data: ""C:\Program Files\PaperPort\pptd40nt.exe"") added in System Startup global entry!
9/6/2008 8:45:14 AM Allowed (based on user decision) value "SpybotDeletingB617" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/6/2008 8:45:14 AM Allowed (based on user decision) value "SpybotDeletingD9260" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/6/2008 8:45:14 AM Allowed (based on user decision) value "SpybotDeletingA3554" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/6/2008 8:45:15 AM Allowed (based on user decision) value "SpybotDeletingC4989" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/6/2008 10:30:32 AM Allowed (based on user decision) value "SpybotDeletingB617" (new data: "") deleted in System Startup user entry!
9/6/2008 10:30:33 AM Allowed (based on user decision) value "SpybotDeletingD9260" (new data: "") deleted in System Startup user entry!
9/6/2008 10:30:33 AM Allowed (based on user decision) value "SpybotDeletingA3554" (new data: "") deleted in System Startup global entry!
9/6/2008 10:30:34 AM Allowed (based on user decision) value "SpybotDeletingC4989" (new data: "") deleted in System Startup global entry!
9/9/2008 7:43:10 AM Allowed (based on user decision) value "SpybotDeletingB8548" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/9/2008 7:43:10 AM Allowed (based on user decision) value "SpybotDeletingD9779" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/9/2008 7:43:11 AM Allowed (based on user decision) value "SpybotDeletingA6047" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/9/2008 7:43:11 AM Allowed (based on user decision) value "SpybotDeletingC8568" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/9/2008 9:46:03 PM Allowed (based on user decision) value "SpybotDeletingB8548" (new data: "") deleted in System Startup user entry!
9/9/2008 9:46:05 PM Allowed (based on user decision) value "SpybotDeletingD9779" (new data: "") deleted in System Startup user entry!
9/9/2008 9:46:06 PM Allowed (based on user decision) value "SpybotDeletingA6047" (new data: "") deleted in System Startup global entry!
9/9/2008 9:46:12 PM Allowed (based on user decision) value "SpybotDeletingC8568" (new data: "") deleted in System Startup global entry!
9/11/2008 8:06:13 AM Allowed (based on user decision) value "SpybotDeletingB8900" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/11/2008 8:06:14 AM Allowed (based on user decision) value "SpybotDeletingD3419" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/11/2008 8:06:14 AM Allowed (based on user decision) value "SpybotDeletingA7331" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/11/2008 8:06:14 AM Allowed (based on user decision) value "SpybotDeletingC5872" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/11/2008 8:26:44 AM Allowed (based on user decision) value "{A2A71ABA-3939-43B2-BD8F-8C1767EF9020}" (new data: "") deleted in Browser Helper Object!
9/11/2008 8:26:48 AM Allowed (based on user decision) value "{A2A71ABA-3939-43B2-BD8F-8C1767EF9020}" (new data: "") added in Browser Helper Object!
9/12/2008 7:42:17 AM Allowed (based on user decision) value "SpybotDeletingB8900" (new data: "") deleted in System Startup user entry!
9/12/2008 7:42:17 AM Allowed (based on user decision) value "SpybotDeletingD3419" (new data: "") deleted in System Startup user entry!
9/12/2008 7:42:17 AM Allowed (based on user decision) value "SpybotDeletingA7331" (new data: "") deleted in System Startup global entry!
9/12/2008 7:42:18 AM Allowed (based on user decision) value "SpybotDeletingC5872" (new data: "") deleted in System Startup global entry!
9/14/2008 8:33:34 AM Allowed (based on user decision) value "SpybotDeletingB5068" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/14/2008 8:33:34 AM Allowed (based on user decision) value "SpybotDeletingD8370" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/14/2008 8:33:34 AM Allowed (based on user decision) value "SpybotDeletingA988" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/14/2008 8:33:35 AM Allowed (based on user decision) value "SpybotDeletingC9903" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/14/2008 9:18:44 PM Allowed (based on user decision) value "Add to Google Photos Screensa&ver" (new data: "") added in Browser menu extension!
9/15/2008 7:38:08 AM Allowed (based on user decision) value "SpybotDeletingB9389" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/15/2008 7:38:09 AM Allowed (based on user decision) value "SpybotDeletingD8819" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/15/2008 7:38:09 AM Allowed (based on user decision) value "SpybotDeletingA5984" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/15/2008 7:38:09 AM Allowed (based on user decision) value "SpybotDeletingC1903" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/16/2008 7:23:21 AM Allowed (based on user decision) value "SpybotDeletingB5068" (new data: "") deleted in System Startup user entry!
9/16/2008 7:23:21 AM Allowed (based on user decision) value "SpybotDeletingD8370" (new data: "") deleted in System Startup user entry!
9/16/2008 7:23:21 AM Allowed (based on user decision) value "SpybotDeletingB9389" (new data: "") deleted in System Startup user entry!
9/16/2008 7:23:21 AM Allowed (based on user decision) value "SpybotDeletingD8819" (new data: "") deleted in System Startup user entry!
9/16/2008 7:23:22 AM Allowed (based on user decision) value "SpybotDeletingA988" (new data: "") deleted in System Startup global entry!
9/16/2008 7:23:22 AM Allowed (based on user decision) value "SpybotDeletingC9903" (new data: "") deleted in System Startup global entry!
9/16/2008 7:23:22 AM Allowed (based on user decision) value "SpybotDeletingA5984" (new data: "") deleted in System Startup global entry!
9/16/2008 7:23:22 AM Allowed (based on user decision) value "SpybotDeletingC1903" (new data: "") deleted in System Startup global entry!
9/16/2008 3:18:56 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/16/2008 7:28:24 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Aaron") changed in Winlogon!
9/17/2008 12:27:40 AM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/17/2008 7:52:51 AM Allowed (based on user decision) value "SpybotDeletingB9327" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/17/2008 7:52:51 AM Allowed (based on user decision) value "SpybotDeletingD2223" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/17/2008 7:52:51 AM Allowed (based on user decision) value "SpybotDeletingA9168" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/17/2008 7:52:51 AM Allowed (based on user decision) value "SpybotDeletingC8624" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/18/2008 7:08:19 AM Allowed (based on user decision) value "SpybotDeletingB7900" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/18/2008 7:08:21 AM Allowed (based on user decision) value "SpybotDeletingD5735" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/18/2008 7:08:22 AM Allowed (based on user decision) value "SpybotDeletingA5010" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/18/2008 7:08:22 AM Allowed (based on user decision) value "SpybotDeletingC7042" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/18/2008 7:31:00 AM Allowed (based on user decision) value "SpybotDeletingA5010" (new data: "") deleted in System Startup global entry!
9/18/2008 7:31:04 AM Allowed (based on user decision) value "SpybotDeletingB9327" (new data: "") deleted in System Startup user entry!
9/18/2008 7:31:05 AM Allowed (based on user decision) value "SpybotDeletingD2223" (new data: "") deleted in System Startup user entry!
9/18/2008 7:31:05 AM Allowed (based on user decision) value "SpybotDeletingB7900" (new data: "") deleted in System Startup user entry!
9/18/2008 7:31:06 AM Allowed (based on user decision) value "SpybotDeletingD5735" (new data: "") deleted in System Startup user entry!
9/18/2008 7:31:06 AM Allowed (based on user decision) value "SpybotDeletingA9168" (new data: "") deleted in System Startup global entry!
9/18/2008 7:31:08 AM Allowed (based on user decision) value "SpybotDeletingC8624" (new data: "") deleted in System Startup global entry!
9/18/2008 7:31:09 AM Allowed (based on user decision) value "SpybotDeletingC7042" (new data: "") deleted in System Startup global entry!
9/19/2008 8:01:14 AM Allowed (based on user decision) value "SpybotDeletingB1066" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/19/2008 8:01:14 AM Allowed (based on user decision) value "SpybotDeletingD8840" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/19/2008 8:01:14 AM Allowed (based on user decision) value "SpybotDeletingA7574" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/19/2008 8:01:14 AM Allowed (based on user decision) value "SpybotDeletingC1701" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/20/2008 9:14:15 AM Allowed (based on user decision) value "SpybotDeletingB5736" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/20/2008 9:14:16 AM Allowed (based on user decision) value "SpybotDeletingD4481" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/20/2008 9:14:16 AM Allowed (based on user decision) value "SpybotDeletingA5372" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/20/2008 9:14:16 AM Allowed (based on user decision) value "SpybotDeletingC6448" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/20/2008 2:32:49 PM Allowed (based on user decision) value "SpybotDeletingB1066" (new data: "") deleted in System Startup user entry!
9/20/2008 2:32:51 PM Allowed (based on user decision) value "SpybotDeletingD8840" (new data: "") deleted in System Startup user entry!
9/20/2008 2:32:51 PM Allowed (based on user decision) value "SpybotDeletingB5736" (new data: "") deleted in System Startup user entry!
9/20/2008 2:32:51 PM Allowed (based on user decision) value "SpybotDeletingD4481" (new data: "") deleted in System Startup user entry!
9/20/2008 2:32:51 PM Allowed (based on user decision) value "SpybotDeletingA7574" (new data: "") deleted in System Startup global entry!
9/20/2008 2:32:52 PM Allowed (based on user decision) value "SpybotDeletingC1701" (new data: "") deleted in System Startup global entry!
9/20/2008 2:32:52 PM Allowed (based on user decision) value "SpybotDeletingA5372" (new data: "") deleted in System Startup global entry!
9/20/2008 2:32:53 PM Allowed (based on user decision) value "SpybotDeletingC6448" (new data: "") deleted in System Startup global entry!
9/21/2008 9:05:35 AM Allowed (based on user decision) value "SpybotDeletingB7916" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/21/2008 9:05:35 AM Allowed (based on user decision) value "SpybotDeletingD4265" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/21/2008 9:05:35 AM Allowed (based on user decision) value "SpybotDeletingA5537" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/21/2008 9:05:35 AM Allowed (based on user decision) value "SpybotDeletingC8630" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/21/2008 11:53:49 AM Allowed (based on user decision) value "SpybotDeletingB7916" (new data: "") deleted in System Startup user entry!
9/21/2008 11:53:50 AM Allowed (based on user decision) value "SpybotDeletingD4265" (new data: "") deleted in System Startup user entry!
9/21/2008 11:53:50 AM Allowed (based on user decision) value "SpybotDeletingA5537" (new data: "") deleted in System Startup global entry!
9/21/2008 11:53:51 AM Allowed (based on user decision) value "SpybotDeletingC8630" (new data: "") deleted in System Startup global entry!
9/22/2008 7:22:02 AM Allowed (based on user decision) value "SpybotDeletingB4789" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/22/2008 7:22:02 AM Allowed (based on user decision) value "SpybotDeletingD364" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/22/2008 7:22:03 AM Allowed (based on user decision) value "SpybotDeletingA794" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/22/2008 7:22:03 AM Allowed (based on user decision) value "SpybotDeletingC3594" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/22/2008 7:41:24 AM Allowed (based on lassh blacklist) value "PeerGuardian" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:24 AM Allowed (based on lassh blacklist) value "H/PC Connection Agent" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:27 AM Allowed (based on user decision) value "ctfmon.exe" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:27 AM Allowed (based on user decision) value "gSyncit" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:28 AM Allowed (based on user decision) value "msnmsgr" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:28 AM Allowed (based on user decision) value "SpybotSD TeaTimer" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:28 AM Allowed (based on user decision) value "Memeo" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:28 AM Allowed (based on lassh blacklist) value "itype" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:28 AM Allowed (based on lassh blacklist) value "IntelliPoint" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:31 AM Allowed (based on user decision) value "IAAnotif" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:32 AM Allowed (based on user decision) value "VolumeTouch" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:33 AM Allowed (based on user decision) value "NvCplDaemon" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:33 AM Allowed (based on user decision) value "NvMediaCenter" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:33 AM Allowed (based on lassh blacklist) value "BluetoothAuthenticationAgent" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:33 AM Allowed (based on user decision) value "PaperPort PTD" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:39 AM Allowed (based on lassh blacklist) value "MSConfig" (new data: "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto") added in System Startup global entry!
9/22/2008 7:55:02 AM Allowed (based on authenticode whitelist) value "SpybotSD TeaTimer" (new data: "C:\Program Files\Spybot S&D\TeaTimer.exe") added in System Startup user entry!
9/22/2008 7:55:06 AM Allowed (based on user whitelist) value "PeerGuardian" (new data: "C:\Program Files\PeerGuardian2\pg2.exe") added in System Startup user entry!
9/22/2008 7:55:12 AM Allowed (based on user decision) value "msnmsgr" (new data: ""C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background") added in System Startup user entry!
9/22/2008 7:55:14 AM Allowed (based on user whitelist) value "H/PC Connection Agent" (new data: ""C:\Program Files\Microsoft ActiveSync\wcescomm.exe"") added in System Startup user entry!
9/22/2008 7:55:17 AM Allowed (based on user decision) value "gSyncit" (new data: "C:\Program Files\gSyncit\gSyncit.exe") added in System Startup user entry!
9/22/2008 7:55:20 AM Allowed (based on user decision) value "ctfmon.exe" (new data: "C:\WINDOWS\system32\ctfmon.exe") added in System Startup user entry!
9/22/2008 7:55:21 AM Allowed (based on user decision) value "SpybotDeletingB4789" (new data: "") deleted in System Startup user entry!
9/22/2008 7:55:21 AM Allowed (based on user decision) value "SpybotDeletingD364" (new data: "") deleted in System Startup user entry!
9/22/2008 7:55:25 AM Allowed (based on user decision) value "VolumeTouch" (new data: ""C:\Program Files\VolumeTouch\VolumeTouch.exe"") added in System Startup global entry!
9/22/2008 7:55:27 AM Allowed (based on user whitelist) value "PaperPort PTD" (new data: ""C:\Program Files\PaperPort\pptd40nt.exe"") added in System Startup global entry!
9/22/2008 7:55:30 AM Allowed (based on user decision) value "NvMediaCenter" (new data: "RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit") added in System Startup global entry!
9/22/2008 7:55:32 AM Allowed (based on user whitelist) value "NvCplDaemon" (new data: "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup") added in System Startup global entry!
9/22/2008 7:55:34 AM Allowed (based on user whitelist) value "Memeo" (new data: "C:\Program Files\Memeo\AutoBackup\MemeoLauncher.exe") added in System Startup global entry!
9/22/2008 7:55:36 AM Allowed (based on user whitelist) value "itype" (new data: ""C:\Program Files\Microsoft IntelliType Pro\itype.exe"") added in System Startup global entry!
9/22/2008 7:55:37 AM Allowed (based on user whitelist) value "IntelliPoint" (new data: ""C:\Program Files\Microsoft IntelliPoint\ipoint.exe"") added in System Startup global entry!
9/22/2008 7:55:51 AM Allowed (based on user decision) value "IAAnotif" (new data: "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe") added in System Startup global entry!
9/22/2008 7:55:53 AM Allowed (based on lassh blacklist) value "BluetoothAuthenticationAgent" (new data: "rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent") added in System Startup global entry!
9/22/2008 7:55:53 AM Allowed (based on lassh blacklist) value "MSConfig" (new data: "") deleted in System Startup global entry!
9/22/2008 7:55:56 AM Allowed (based on user decision) value "SpybotDeletingA794" (new data: "") deleted in System Startup global entry!
9/22/2008 7:55:57 AM Allowed (based on user decision) value "SpybotDeletingC3594" (new data: "") deleted in System Startup global entry!
9/23/2008 7:30:10 AM Allowed (based on user decision) value "SpybotDeletingB7155" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/23/2008 7:30:10 AM Allowed (based on user decision) value "SpybotDeletingD6632" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/23/2008 7:30:10 AM Allowed (based on user decision) value "SpybotDeletingA7331" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/23/2008 7:30:11 AM Allowed (based on user decision) value "SpybotDeletingC8026" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/23/2008 3:58:15 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/23/2008 8:26:38 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Aaron") changed in Winlogon!
9/23/2008 10:57:04 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/24/2008 7:41:05 AM Allowed (based on user decision) value "SpybotDeletingB7298" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/24/2008 7:41:05 AM Allowed (based on user decision) value "SpybotDeletingD8054" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/24/2008 7:41:05 AM Allowed (based on user decision) value "SpybotDeletingA7788" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/24/2008 7:41:05 AM Allowed (based on user decision) value "SpybotDeletingC365" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/24/2008 1:27:55 PM Allowed (based on user decision) value "SpybotDeletingB7155" (new data: "") deleted in System Startup user entry!
9/24/2008 1:27:56 PM Allowed (based on user decision) value "SpybotDeletingD6632" (new data: "") deleted in System Startup user entry!
9/24/2008 1:27:56 PM Allowed (based on user decision) value "SpybotDeletingB7298" (new data: "") deleted in System Startup user entry!
9/24/2008 1:27:56 PM Allowed (based on user decision) value "SpybotDeletingD8054" (new data: "") deleted in System Startup user entry!
9/24/2008 1:27:57 PM Allowed (based on user decision) value "SpybotDeletingA7331" (new data: "") deleted in System Startup global entry!
9/24/2008 1:27:57 PM Allowed (based on user decision) value "SpybotDeletingC8026" (new data: "") deleted in System Startup global entry!
9/24/2008 1:27:58 PM Allowed (based on user decision) value "SpybotDeletingA7788" (new data: "") deleted in System Startup global entry!
9/24/2008 1:27:59 PM Allowed (based on user decision) value "SpybotDeletingC365" (new data: "") deleted in System Startup global entry!
9/24/2008 1:27:59 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/24/2008 4:23:53 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Aaron") changed in Winlogon!
9/24/2008 8:46:19 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/25/2008 7:49:31 AM Allowed (based on user decision) value "SpybotDeletingB4299" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/25/2008 7:49:31 AM Allowed (based on user decision) value "SpybotDeletingD1075" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/25/2008 7:49:31 AM Allowed (based on user decision) value "SpybotDeletingA5812" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/25/2008 7:49:31 AM Allowed (based on user decision) value "SpybotDeletingC6702" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/25/2008 5:53:29 PM Allowed (based on user decision) value "SpybotDeletingB4299" (new data: "") deleted in System Startup user entry!
9/25/2008 5:53:33 PM Allowed (based on user decision) value "SpybotDeletingD1075" (new data: "") deleted in System Startup user entry!
9/25/2008 5:53:34 PM Allowed (based on user decision) value "SpybotDeletingA5812" (new data: "") deleted in System Startup global entry!
9/25/2008 5:53:36 PM Allowed (based on user decision) value "SpybotDeletingC6702" (new data: "") deleted in System Startup global entry!
9/25/2008 6:26:14 PM Allowed (based on user decision) value "Brother MFC-8820D LAN" (new data: "C:\Program Files\Brother\Brmflp03\BrWiEvRg.exe /R /M="Brother MFC-8820D LAN" /A="SmartUI"") added in System Startup global entry!
9/25/2008 6:26:23 PM Allowed (based on user decision) value "SetDefPrt" (new data: "C:\Program Files\Brother\Brmflp03\BrStDvPt.exe") added in System Startup global entry!
9/25/2008 6:41:51 PM Allowed (based on user decision) value "SetDefPrt" (new data: "") deleted in System Startup global entry!
9/25/2008 6:41:54 PM Allowed (based on user decision) value "Brother MFC-8820D LAN" (new data: "") deleted in System Startup global entry!
9/26/2008 6:58:06 AM Allowed (based on user decision) value "SpybotDeletingB3854" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/26/2008 6:58:06 AM Allowed (based on user decision) value "SpybotDeletingD3618" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/26/2008 6:58:06 AM Allowed (based on user decision) value "SpybotDeletingA8586" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/26/2008 6:58:07 AM Allowed (based on user decision) value "SpybotDeletingC4531" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/26/2008 7:40:11 PM Allowed (based on user decision) value "SpybotDeletingA8586" (new data: "") deleted in System Startup global entry!
9/26/2008 7:40:14 PM Allowed (based on user decision) value "SpybotDeletingC4531" (new data: "") deleted in System Startup global entry!
9/26/2008 7:45:56 PM Allowed (based on user decision) value "SpybotDeletingB3854" (new data: "") deleted in System Startup user entry!
9/26/2008 7:45:57 PM Allowed (based on user decision) value "SpybotDeletingD3618" (new data: "") deleted in System Startup user entry!
9/27/2008 7:51:24 AM Allowed (based on user decision) value "SpybotDeletingB9307" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/27/2008 7:51:24 AM Allowed (based on user decision) value "SpybotDeletingD7481" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/27/2008 7:51:24 AM Allowed (based on user decision) value "SpybotDeletingA4480" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/27/2008 7:51:25 AM Allowed (based on user decision) value "SpybotDeletingC4932" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
I have ran spybot in safe mode twice and it does not resolve this problem...
9/3/2008 7:35:26 AM Allowed (based on user decision) value "SpybotDeletingA3989" (new data: "") deleted in System Startup global entry!
9/3/2008 7:35:27 AM Allowed (based on user decision) value "SpybotDeletingC9478" (new data: "") deleted in System Startup global entry!
9/5/2008 12:25:43 AM Allowed (based on user whitelist) value "PaperPort PTD" (new data: ""C:\Program Files\PaperPort\pptd40nt.exe"") added in System Startup global entry!
9/6/2008 8:45:14 AM Allowed (based on user decision) value "SpybotDeletingB617" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/6/2008 8:45:14 AM Allowed (based on user decision) value "SpybotDeletingD9260" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/6/2008 8:45:14 AM Allowed (based on user decision) value "SpybotDeletingA3554" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/6/2008 8:45:15 AM Allowed (based on user decision) value "SpybotDeletingC4989" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/6/2008 10:30:32 AM Allowed (based on user decision) value "SpybotDeletingB617" (new data: "") deleted in System Startup user entry!
9/6/2008 10:30:33 AM Allowed (based on user decision) value "SpybotDeletingD9260" (new data: "") deleted in System Startup user entry!
9/6/2008 10:30:33 AM Allowed (based on user decision) value "SpybotDeletingA3554" (new data: "") deleted in System Startup global entry!
9/6/2008 10:30:34 AM Allowed (based on user decision) value "SpybotDeletingC4989" (new data: "") deleted in System Startup global entry!
9/9/2008 7:43:10 AM Allowed (based on user decision) value "SpybotDeletingB8548" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/9/2008 7:43:10 AM Allowed (based on user decision) value "SpybotDeletingD9779" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/9/2008 7:43:11 AM Allowed (based on user decision) value "SpybotDeletingA6047" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/9/2008 7:43:11 AM Allowed (based on user decision) value "SpybotDeletingC8568" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/9/2008 9:46:03 PM Allowed (based on user decision) value "SpybotDeletingB8548" (new data: "") deleted in System Startup user entry!
9/9/2008 9:46:05 PM Allowed (based on user decision) value "SpybotDeletingD9779" (new data: "") deleted in System Startup user entry!
9/9/2008 9:46:06 PM Allowed (based on user decision) value "SpybotDeletingA6047" (new data: "") deleted in System Startup global entry!
9/9/2008 9:46:12 PM Allowed (based on user decision) value "SpybotDeletingC8568" (new data: "") deleted in System Startup global entry!
9/11/2008 8:06:13 AM Allowed (based on user decision) value "SpybotDeletingB8900" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/11/2008 8:06:14 AM Allowed (based on user decision) value "SpybotDeletingD3419" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/11/2008 8:06:14 AM Allowed (based on user decision) value "SpybotDeletingA7331" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/11/2008 8:06:14 AM Allowed (based on user decision) value "SpybotDeletingC5872" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/11/2008 8:26:44 AM Allowed (based on user decision) value "{A2A71ABA-3939-43B2-BD8F-8C1767EF9020}" (new data: "") deleted in Browser Helper Object!
9/11/2008 8:26:48 AM Allowed (based on user decision) value "{A2A71ABA-3939-43B2-BD8F-8C1767EF9020}" (new data: "") added in Browser Helper Object!
9/12/2008 7:42:17 AM Allowed (based on user decision) value "SpybotDeletingB8900" (new data: "") deleted in System Startup user entry!
9/12/2008 7:42:17 AM Allowed (based on user decision) value "SpybotDeletingD3419" (new data: "") deleted in System Startup user entry!
9/12/2008 7:42:17 AM Allowed (based on user decision) value "SpybotDeletingA7331" (new data: "") deleted in System Startup global entry!
9/12/2008 7:42:18 AM Allowed (based on user decision) value "SpybotDeletingC5872" (new data: "") deleted in System Startup global entry!
9/14/2008 8:33:34 AM Allowed (based on user decision) value "SpybotDeletingB5068" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/14/2008 8:33:34 AM Allowed (based on user decision) value "SpybotDeletingD8370" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/14/2008 8:33:34 AM Allowed (based on user decision) value "SpybotDeletingA988" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/14/2008 8:33:35 AM Allowed (based on user decision) value "SpybotDeletingC9903" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/14/2008 9:18:44 PM Allowed (based on user decision) value "Add to Google Photos Screensa&ver" (new data: "") added in Browser menu extension!
9/15/2008 7:38:08 AM Allowed (based on user decision) value "SpybotDeletingB9389" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/15/2008 7:38:09 AM Allowed (based on user decision) value "SpybotDeletingD8819" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/15/2008 7:38:09 AM Allowed (based on user decision) value "SpybotDeletingA5984" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/15/2008 7:38:09 AM Allowed (based on user decision) value "SpybotDeletingC1903" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/16/2008 7:23:21 AM Allowed (based on user decision) value "SpybotDeletingB5068" (new data: "") deleted in System Startup user entry!
9/16/2008 7:23:21 AM Allowed (based on user decision) value "SpybotDeletingD8370" (new data: "") deleted in System Startup user entry!
9/16/2008 7:23:21 AM Allowed (based on user decision) value "SpybotDeletingB9389" (new data: "") deleted in System Startup user entry!
9/16/2008 7:23:21 AM Allowed (based on user decision) value "SpybotDeletingD8819" (new data: "") deleted in System Startup user entry!
9/16/2008 7:23:22 AM Allowed (based on user decision) value "SpybotDeletingA988" (new data: "") deleted in System Startup global entry!
9/16/2008 7:23:22 AM Allowed (based on user decision) value "SpybotDeletingC9903" (new data: "") deleted in System Startup global entry!
9/16/2008 7:23:22 AM Allowed (based on user decision) value "SpybotDeletingA5984" (new data: "") deleted in System Startup global entry!
9/16/2008 7:23:22 AM Allowed (based on user decision) value "SpybotDeletingC1903" (new data: "") deleted in System Startup global entry!
9/16/2008 3:18:56 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/16/2008 7:28:24 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Aaron") changed in Winlogon!
9/17/2008 12:27:40 AM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/17/2008 7:52:51 AM Allowed (based on user decision) value "SpybotDeletingB9327" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/17/2008 7:52:51 AM Allowed (based on user decision) value "SpybotDeletingD2223" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/17/2008 7:52:51 AM Allowed (based on user decision) value "SpybotDeletingA9168" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/17/2008 7:52:51 AM Allowed (based on user decision) value "SpybotDeletingC8624" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/18/2008 7:08:19 AM Allowed (based on user decision) value "SpybotDeletingB7900" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/18/2008 7:08:21 AM Allowed (based on user decision) value "SpybotDeletingD5735" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/18/2008 7:08:22 AM Allowed (based on user decision) value "SpybotDeletingA5010" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/18/2008 7:08:22 AM Allowed (based on user decision) value "SpybotDeletingC7042" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/18/2008 7:31:00 AM Allowed (based on user decision) value "SpybotDeletingA5010" (new data: "") deleted in System Startup global entry!
9/18/2008 7:31:04 AM Allowed (based on user decision) value "SpybotDeletingB9327" (new data: "") deleted in System Startup user entry!
9/18/2008 7:31:05 AM Allowed (based on user decision) value "SpybotDeletingD2223" (new data: "") deleted in System Startup user entry!
9/18/2008 7:31:05 AM Allowed (based on user decision) value "SpybotDeletingB7900" (new data: "") deleted in System Startup user entry!
9/18/2008 7:31:06 AM Allowed (based on user decision) value "SpybotDeletingD5735" (new data: "") deleted in System Startup user entry!
9/18/2008 7:31:06 AM Allowed (based on user decision) value "SpybotDeletingA9168" (new data: "") deleted in System Startup global entry!
9/18/2008 7:31:08 AM Allowed (based on user decision) value "SpybotDeletingC8624" (new data: "") deleted in System Startup global entry!
9/18/2008 7:31:09 AM Allowed (based on user decision) value "SpybotDeletingC7042" (new data: "") deleted in System Startup global entry!
9/19/2008 8:01:14 AM Allowed (based on user decision) value "SpybotDeletingB1066" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/19/2008 8:01:14 AM Allowed (based on user decision) value "SpybotDeletingD8840" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/19/2008 8:01:14 AM Allowed (based on user decision) value "SpybotDeletingA7574" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/19/2008 8:01:14 AM Allowed (based on user decision) value "SpybotDeletingC1701" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/20/2008 9:14:15 AM Allowed (based on user decision) value "SpybotDeletingB5736" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/20/2008 9:14:16 AM Allowed (based on user decision) value "SpybotDeletingD4481" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/20/2008 9:14:16 AM Allowed (based on user decision) value "SpybotDeletingA5372" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/20/2008 9:14:16 AM Allowed (based on user decision) value "SpybotDeletingC6448" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/20/2008 2:32:49 PM Allowed (based on user decision) value "SpybotDeletingB1066" (new data: "") deleted in System Startup user entry!
9/20/2008 2:32:51 PM Allowed (based on user decision) value "SpybotDeletingD8840" (new data: "") deleted in System Startup user entry!
9/20/2008 2:32:51 PM Allowed (based on user decision) value "SpybotDeletingB5736" (new data: "") deleted in System Startup user entry!
9/20/2008 2:32:51 PM Allowed (based on user decision) value "SpybotDeletingD4481" (new data: "") deleted in System Startup user entry!
9/20/2008 2:32:51 PM Allowed (based on user decision) value "SpybotDeletingA7574" (new data: "") deleted in System Startup global entry!
9/20/2008 2:32:52 PM Allowed (based on user decision) value "SpybotDeletingC1701" (new data: "") deleted in System Startup global entry!
9/20/2008 2:32:52 PM Allowed (based on user decision) value "SpybotDeletingA5372" (new data: "") deleted in System Startup global entry!
9/20/2008 2:32:53 PM Allowed (based on user decision) value "SpybotDeletingC6448" (new data: "") deleted in System Startup global entry!
9/21/2008 9:05:35 AM Allowed (based on user decision) value "SpybotDeletingB7916" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/21/2008 9:05:35 AM Allowed (based on user decision) value "SpybotDeletingD4265" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/21/2008 9:05:35 AM Allowed (based on user decision) value "SpybotDeletingA5537" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/21/2008 9:05:35 AM Allowed (based on user decision) value "SpybotDeletingC8630" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/21/2008 11:53:49 AM Allowed (based on user decision) value "SpybotDeletingB7916" (new data: "") deleted in System Startup user entry!
9/21/2008 11:53:50 AM Allowed (based on user decision) value "SpybotDeletingD4265" (new data: "") deleted in System Startup user entry!
9/21/2008 11:53:50 AM Allowed (based on user decision) value "SpybotDeletingA5537" (new data: "") deleted in System Startup global entry!
9/21/2008 11:53:51 AM Allowed (based on user decision) value "SpybotDeletingC8630" (new data: "") deleted in System Startup global entry!
9/22/2008 7:22:02 AM Allowed (based on user decision) value "SpybotDeletingB4789" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/22/2008 7:22:02 AM Allowed (based on user decision) value "SpybotDeletingD364" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/22/2008 7:22:03 AM Allowed (based on user decision) value "SpybotDeletingA794" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/22/2008 7:22:03 AM Allowed (based on user decision) value "SpybotDeletingC3594" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/22/2008 7:41:24 AM Allowed (based on lassh blacklist) value "PeerGuardian" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:24 AM Allowed (based on lassh blacklist) value "H/PC Connection Agent" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:27 AM Allowed (based on user decision) value "ctfmon.exe" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:27 AM Allowed (based on user decision) value "gSyncit" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:28 AM Allowed (based on user decision) value "msnmsgr" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:28 AM Allowed (based on user decision) value "SpybotSD TeaTimer" (new data: "") deleted in System Startup user entry!
9/22/2008 7:41:28 AM Allowed (based on user decision) value "Memeo" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:28 AM Allowed (based on lassh blacklist) value "itype" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:28 AM Allowed (based on lassh blacklist) value "IntelliPoint" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:31 AM Allowed (based on user decision) value "IAAnotif" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:32 AM Allowed (based on user decision) value "VolumeTouch" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:33 AM Allowed (based on user decision) value "NvCplDaemon" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:33 AM Allowed (based on user decision) value "NvMediaCenter" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:33 AM Allowed (based on lassh blacklist) value "BluetoothAuthenticationAgent" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:33 AM Allowed (based on user decision) value "PaperPort PTD" (new data: "") deleted in System Startup global entry!
9/22/2008 7:41:39 AM Allowed (based on lassh blacklist) value "MSConfig" (new data: "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto") added in System Startup global entry!
9/22/2008 7:55:02 AM Allowed (based on authenticode whitelist) value "SpybotSD TeaTimer" (new data: "C:\Program Files\Spybot S&D\TeaTimer.exe") added in System Startup user entry!
9/22/2008 7:55:06 AM Allowed (based on user whitelist) value "PeerGuardian" (new data: "C:\Program Files\PeerGuardian2\pg2.exe") added in System Startup user entry!
9/22/2008 7:55:12 AM Allowed (based on user decision) value "msnmsgr" (new data: ""C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background") added in System Startup user entry!
9/22/2008 7:55:14 AM Allowed (based on user whitelist) value "H/PC Connection Agent" (new data: ""C:\Program Files\Microsoft ActiveSync\wcescomm.exe"") added in System Startup user entry!
9/22/2008 7:55:17 AM Allowed (based on user decision) value "gSyncit" (new data: "C:\Program Files\gSyncit\gSyncit.exe") added in System Startup user entry!
9/22/2008 7:55:20 AM Allowed (based on user decision) value "ctfmon.exe" (new data: "C:\WINDOWS\system32\ctfmon.exe") added in System Startup user entry!
9/22/2008 7:55:21 AM Allowed (based on user decision) value "SpybotDeletingB4789" (new data: "") deleted in System Startup user entry!
9/22/2008 7:55:21 AM Allowed (based on user decision) value "SpybotDeletingD364" (new data: "") deleted in System Startup user entry!
9/22/2008 7:55:25 AM Allowed (based on user decision) value "VolumeTouch" (new data: ""C:\Program Files\VolumeTouch\VolumeTouch.exe"") added in System Startup global entry!
9/22/2008 7:55:27 AM Allowed (based on user whitelist) value "PaperPort PTD" (new data: ""C:\Program Files\PaperPort\pptd40nt.exe"") added in System Startup global entry!
9/22/2008 7:55:30 AM Allowed (based on user decision) value "NvMediaCenter" (new data: "RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit") added in System Startup global entry!
9/22/2008 7:55:32 AM Allowed (based on user whitelist) value "NvCplDaemon" (new data: "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup") added in System Startup global entry!
9/22/2008 7:55:34 AM Allowed (based on user whitelist) value "Memeo" (new data: "C:\Program Files\Memeo\AutoBackup\MemeoLauncher.exe") added in System Startup global entry!
9/22/2008 7:55:36 AM Allowed (based on user whitelist) value "itype" (new data: ""C:\Program Files\Microsoft IntelliType Pro\itype.exe"") added in System Startup global entry!
9/22/2008 7:55:37 AM Allowed (based on user whitelist) value "IntelliPoint" (new data: ""C:\Program Files\Microsoft IntelliPoint\ipoint.exe"") added in System Startup global entry!
9/22/2008 7:55:51 AM Allowed (based on user decision) value "IAAnotif" (new data: "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe") added in System Startup global entry!
9/22/2008 7:55:53 AM Allowed (based on lassh blacklist) value "BluetoothAuthenticationAgent" (new data: "rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent") added in System Startup global entry!
9/22/2008 7:55:53 AM Allowed (based on lassh blacklist) value "MSConfig" (new data: "") deleted in System Startup global entry!
9/22/2008 7:55:56 AM Allowed (based on user decision) value "SpybotDeletingA794" (new data: "") deleted in System Startup global entry!
9/22/2008 7:55:57 AM Allowed (based on user decision) value "SpybotDeletingC3594" (new data: "") deleted in System Startup global entry!
9/23/2008 7:30:10 AM Allowed (based on user decision) value "SpybotDeletingB7155" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/23/2008 7:30:10 AM Allowed (based on user decision) value "SpybotDeletingD6632" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/23/2008 7:30:10 AM Allowed (based on user decision) value "SpybotDeletingA7331" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/23/2008 7:30:11 AM Allowed (based on user decision) value "SpybotDeletingC8026" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/23/2008 3:58:15 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/23/2008 8:26:38 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Aaron") changed in Winlogon!
9/23/2008 10:57:04 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/24/2008 7:41:05 AM Allowed (based on user decision) value "SpybotDeletingB7298" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/24/2008 7:41:05 AM Allowed (based on user decision) value "SpybotDeletingD8054" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/24/2008 7:41:05 AM Allowed (based on user decision) value "SpybotDeletingA7788" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/24/2008 7:41:05 AM Allowed (based on user decision) value "SpybotDeletingC365" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/24/2008 1:27:55 PM Allowed (based on user decision) value "SpybotDeletingB7155" (new data: "") deleted in System Startup user entry!
9/24/2008 1:27:56 PM Allowed (based on user decision) value "SpybotDeletingD6632" (new data: "") deleted in System Startup user entry!
9/24/2008 1:27:56 PM Allowed (based on user decision) value "SpybotDeletingB7298" (new data: "") deleted in System Startup user entry!
9/24/2008 1:27:56 PM Allowed (based on user decision) value "SpybotDeletingD8054" (new data: "") deleted in System Startup user entry!
9/24/2008 1:27:57 PM Allowed (based on user decision) value "SpybotDeletingA7331" (new data: "") deleted in System Startup global entry!
9/24/2008 1:27:57 PM Allowed (based on user decision) value "SpybotDeletingC8026" (new data: "") deleted in System Startup global entry!
9/24/2008 1:27:58 PM Allowed (based on user decision) value "SpybotDeletingA7788" (new data: "") deleted in System Startup global entry!
9/24/2008 1:27:59 PM Allowed (based on user decision) value "SpybotDeletingC365" (new data: "") deleted in System Startup global entry!
9/24/2008 1:27:59 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/24/2008 4:23:53 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Aaron") changed in Winlogon!
9/24/2008 8:46:19 PM Allowed (based on user whitelist) value "DefaultUserName" (new data: "Robyn") changed in Winlogon!
9/25/2008 7:49:31 AM Allowed (based on user decision) value "SpybotDeletingB4299" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/25/2008 7:49:31 AM Allowed (based on user decision) value "SpybotDeletingD1075" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/25/2008 7:49:31 AM Allowed (based on user decision) value "SpybotDeletingA5812" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/25/2008 7:49:31 AM Allowed (based on user decision) value "SpybotDeletingC6702" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/25/2008 5:53:29 PM Allowed (based on user decision) value "SpybotDeletingB4299" (new data: "") deleted in System Startup user entry!
9/25/2008 5:53:33 PM Allowed (based on user decision) value "SpybotDeletingD1075" (new data: "") deleted in System Startup user entry!
9/25/2008 5:53:34 PM Allowed (based on user decision) value "SpybotDeletingA5812" (new data: "") deleted in System Startup global entry!
9/25/2008 5:53:36 PM Allowed (based on user decision) value "SpybotDeletingC6702" (new data: "") deleted in System Startup global entry!
9/25/2008 6:26:14 PM Allowed (based on user decision) value "Brother MFC-8820D LAN" (new data: "C:\Program Files\Brother\Brmflp03\BrWiEvRg.exe /R /M="Brother MFC-8820D LAN" /A="SmartUI"") added in System Startup global entry!
9/25/2008 6:26:23 PM Allowed (based on user decision) value "SetDefPrt" (new data: "C:\Program Files\Brother\Brmflp03\BrStDvPt.exe") added in System Startup global entry!
9/25/2008 6:41:51 PM Allowed (based on user decision) value "SetDefPrt" (new data: "") deleted in System Startup global entry!
9/25/2008 6:41:54 PM Allowed (based on user decision) value "Brother MFC-8820D LAN" (new data: "") deleted in System Startup global entry!
9/26/2008 6:58:06 AM Allowed (based on user decision) value "SpybotDeletingB3854" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/26/2008 6:58:06 AM Allowed (based on user decision) value "SpybotDeletingD3618" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/26/2008 6:58:06 AM Allowed (based on user decision) value "SpybotDeletingA8586" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/26/2008 6:58:07 AM Allowed (based on user decision) value "SpybotDeletingC4531" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/26/2008 7:40:11 PM Allowed (based on user decision) value "SpybotDeletingA8586" (new data: "") deleted in System Startup global entry!
9/26/2008 7:40:14 PM Allowed (based on user decision) value "SpybotDeletingC4531" (new data: "") deleted in System Startup global entry!
9/26/2008 7:45:56 PM Allowed (based on user decision) value "SpybotDeletingB3854" (new data: "") deleted in System Startup user entry!
9/26/2008 7:45:57 PM Allowed (based on user decision) value "SpybotDeletingD3618" (new data: "") deleted in System Startup user entry!
9/27/2008 7:51:24 AM Allowed (based on user decision) value "SpybotDeletingB9307" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/27/2008 7:51:24 AM Allowed (based on user decision) value "SpybotDeletingD7481" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup user entry!
9/27/2008 7:51:24 AM Allowed (based on user decision) value "SpybotDeletingA4480" (new data: "command /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!
9/27/2008 7:51:25 AM Allowed (based on user decision) value "SpybotDeletingC4932" (new data: "cmd /c del "C:\WINDOWS\SchedLgU.Txt"") added in System Startup global entry!