Created by anti-spyware software WinDetect:

• Version: 2.10.0

Possible suspicious files:

• %win_dir%\temp\~nsu.tmp\au_.exe
• %win_dir%\system32\drivers\bthidmgr.sys
• \\?\c:\program files\soundspectrum\g-force\g-force.dll
• %win_dir%\temp\nsnacb5.tmp\nsscm.dll
• %program_files%\repatcher\repatcher.exe
• %win_dir%\system32\drivers\sptd.sys
• %win_dir%\temp\uninstal.exe
• %win_dir%\system32\drivers\vbtenum.sys

%win_dir%\temp\~nsu.tmp\au_.exe

• The file does not contain company name.
• The file was created short time ago. Spywares very often re-creates new files after system login.
• File checksum is F1B9BA7C7FB14F9D21E09BA91181B0D5.
• May connect to site http://nsis.sf.net.
• Started by %program_files%\CommFort\uninst.exe.
more info ...

%win_dir%\system32\drivers\bthidmgr.sys

• Company is IVT Corporation(1.2.2.0).
• File checksum is A9164C2A39BD917B9F42AE087560AC3D.
• Starts at system boot.
• Registered as BTHidMgr, Bluetooth HID Manager Service.
more info ...

\\?\c:\program files\soundspectrum\g-force\g-force.dll

• The file does not contain company name.
• The file is hidden and it is not visible in Windows Explorer.
• File checksum is 7FFD1A4F09015377EA40D915F7033A42.
• Loaded to %program_files%\Windows Media Player\wmplayer.exe.
more info ...

%win_dir%\temp\nsnacb5.tmp\nsscm.dll

• The file does not contain company name.
• The file was created short time ago. Spywares very often re-creates new files after system login.
• File checksum is 62EFA7B730EB0523A026EA4325403B77.
• Loaded to %program_files%\HeavenWard\RemoveAny\updates\s2js..tmp.
more info ...

%program_files%\repatcher\repatcher.exe

• The file does not contain company name.
• File checksum is 06676F88812C9CCB9AB95045E3879B19.
• May download files from the Internet.
• May connect to site http://portal.setitagila.ru.
• May connect to site http://repatcher.sytes.net.
more info ...

%win_dir%\system32\drivers\sptd.sys

• The file does not contain company name.
• The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
• Starts at system boot.
• Registered as sptd.
more info ...

%win_dir%\temp\uninstal.exe

• The file does not contain company name.
• The file was created short time ago. Spywares very often re-creates new files after system login.
• File checksum is B3E36BE4F01B415EDC4CA7B4A2E1DA95.
• Started by %program_files%\Transistor\Uninstal.exe.
more info ...

%win_dir%\system32\drivers\vbtenum.sys

• The file does not contain company name.
• File checksum is 161969D2DD1D39CD2F1EDBC60C61FA99.
• Registered as BTHidEnum, Bluetooth HID Enumerator.
more info ...