I came across this issue today, and after doing some research I've found that the key must come from MS Money 2004. Anti-Malware found this same registry key (549b5ca7-4a86-11d7-a4df-000874180bb3), and I found (through a fair amount of digging) a couple references on the internet describing how other users came to find that it was from MS Money 2004. I have MS Money 2004 installed, so it made sense that this could be the case. To confirm, I went to another computer that did not have MS Money 2004 installed, and did the following steps: 1) Disconnected it from the network. 2) Ran HijackThis and confirmed the key did not exist on this system. 3) Installed MS Money 2004. 4) Ran HijackThis and confirmed that the key did now in fact exist. 5) Uninstalled MS Money 2004. 6) Ran HijackThis yet again and confirmed that the key was removed. Since it took a few hours to sort all this out, I'm hoping to spread the word. Also, does this mean that it is a false positive? Or is MS installing malware on our machines through MS Money? Thanks, and hope this helps!
