ADW_TIMESINK

To delete the registry key this malware/grayware/spyware created:

1. Restart your computer in Safe Mode. For instructions on how to do this, you may refer to this page. If the preceding step requires you to restart in safe mode, you may proceed to #2.
2. Open Registry Editor. To do this, click Start>Run, type REGEDIT in the text box provided, then press Enter.
3. In the left panel of the Registry Editor window, double-click the following:
   HKEY_CLASSES_ROOT
4. Still in the left panel, locate and delete the key:
   .key
5. Again Still in the left panel, locate and delete the key:
   .WRG
6. Again Still in the left panel, locate and delete the key:
   ReGet.App
7. Again Still in the left panel, locate and delete the key:
   ReGet.App.1
8. Again Still in the left panel, locate and delete the key:
   ReGet.Command
9. Again Still in the left panel, locate and delete the key:
   ReGet.Command.1
10. Again Still in the left panel, locate and delete the key:
    ReGet.Document
11. Again Still in the left panel, locate and delete the key:
    ReGet.MSIEHelperInterface
12. Again Still in the left panel, locate and delete the key:
    ReGet.MSIEHelperInterface.1
13. Again Still in the left panel, locate and delete the key:
    ReGet.NetscapeInterface
14. Again Still in the left panel, locate and delete the key:
    ReGet.NetscapeInterface.1
15. Again Still in the left panel, locate and delete the key:
    ReGet.ReGetApi
16. Again Still in the left panel, locate and delete the key:
    ReGet.ReGetApi.1
17. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CLASSES_ROOT>AppID
18. Still in the left panel, locate and delete the key:
    {38AAF322-C5B4-11D1-B75E-000000000000}
19. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CLASSES_ROOT>CLSID
20. Still in the left panel, locate and delete the key:
    {38AAF321-C5B4-11D1-B75E-100000000000}
21. Again Still in the left panel, locate and delete the key:
    {38AAF321-C5B4-11D1-B75E-200000000000}
22. Again Still in the left panel, locate and delete the key:
    {38AAF321-C5B4-11D1-B75E-400000000000}
23. Again Still in the left panel, locate and delete the key:
    {38AAF321-C5B4-11D1-B75E-700000000000}
24. Again Still in the left panel, locate and delete the key:
    {38AAF321-C5B4-11D1-B75E-800000000000}
25. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CLASSES_ROOT>Component Categories
26. Still in the left panel, locate and delete the key:
    {38AAF313-C5B4-11D1-B75E-000000000000}
27. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CLASSES_ROOT>Interface
28. Still in the left panel, locate and delete the key:
    {38AAF320-C5B4-11D1-B75E-100000000000}
29. Again Still in the left panel, locate and delete the key:
    {38AAF320-C5B4-11D1-B75E-100000000002}
30. Again Still in the left panel, locate and delete the key:
    {38AAF320-C5B4-11D1-B75E-200000000000}
31. Again Still in the left panel, locate and delete the key:
    {38AAF320-C5B4-11D1-B75E-700000000000}
32. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CLASSES_ROOT>TypeLib
33. Still in the left panel, locate and delete the key:
    {38AAF313-C5B4-11D1-B75E-000000000000}
34. Again Still in the left panel, locate and delete the key:
    {38AAF313-C5B4-11D1-B75E-000000000001}
35. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>AppEvents>EventLabels
36. Still in the left panel, locate and delete the key:
    ReGetCompleted
37. Again Still in the left panel, locate and delete the key:
    ReGetDlClipAdd
38. Again Still in the left panel, locate and delete the key:
    ReGetDlEnd
39. Again Still in the left panel, locate and delete the key:
    ReGetDlError
40. Again Still in the left panel, locate and delete the key:
    ReGetDlFatalError
41. Again Still in the left panel, locate and delete the key:
    ReGetDlPause
42. Again Still in the left panel, locate and delete the key:
    ReGetDlStart
43. Again Still in the left panel, locate and delete the key:
    ReGetExit
44. Again Still in the left panel, locate and delete the key:
    ReGetStart
45. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>AppEvents>Schemes>Apps
46. Still in the left panel, locate and delete the key:
    ReGet
47. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>Software
48. Still in the left panel, locate and delete the key:
    ReGet Software
49. Again Still in the left panel, locate and delete the key:
    TimeSink, Inc.
50. Again Still in the left panel, locate and delete the key:
    Vladimir Romanov
51. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>Extensions
52. Still in the left panel, locate and delete the key:
    {38AAF320-C5B4-11D1-B75E-111111111111}
53. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>MenuExt
54. Still in the left panel, locate and delete the key:
    ReGet—p‚ɃŠƒ“ƒN‚ðˆê——(&L)
55. Again Still in the left panel, locate and delete the key:
    ReGet‚Ń_ƒEƒ“ƒ[ƒh(&D)
56. Again Still in the left panel, locate and delete the key:
    ReGet‚Å‘S‚Ä‚ðƒ_ƒEƒ“ƒ[ƒh(&G)
57. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE
58. Still in the left panel, locate and delete the key:
    TimeSink, Inc.
59. Again Still in the left panel, locate and delete the key:
    Vladimir Romanov
60. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall
61. Still in the left panel, locate and delete the key:
    ReGet
62. Close Registry Editor.

To delete malware/grayware/spyware folders:

1. Right-click Start then click Search... or Find..., depending on the version of Windows you are running.
2. In the Named input box, type:
   
    
   • %Program Files%\ReGet
   • %Program Files%\TimeSink
3. In the Look In drop-down list, select My Computer, then press Enter.
4. Once located, select the folder then press SHIFT+DELETE to permanently delete the folder.
5. Repeat steps 2 to 4 for the remaining folders:
    
   • %Program Files%\ReGet
   • %Program Files%\TimeSink

To delete malware/grayware files:

1. Search for the following files:
   
    
   • %Start Menu%\Programs\ReGet.lnk
   • %Windows%\tsad.dll
   
   Note: To do a search for the following files, right-click Start then click Search... or Find..., depending on the version of Windows you are running. For each file to be deleted, type its file name in the Named input box. In the Look In drop-down list, select My Computer, then press Enter.
2. Once located, select the file then press SHIFT+DELETE to permanently delete the file.
3. Repeat the said steps for all files listed.