Created by anti-spyware software WinDetect:

• Version: 2.10.2

Possible suspicious files:

• %win_dir%\microsoft.net\framework\v2.0.50727\temporary asp.net files\root\93a10de6\c715adc6\app_global.asax.ze_4y4xe.dll
• %win_dir%\microsoft.net\framework\v2.0.50727\temporary asp.net files\root\93a10de6\c715adc6\app_web_irgktuia.dll
• %win_dir%\system32\drivers\d347bus.sys
• %win_dir%\system32\drivers\d347prt.sys
• %program_files%\download master\dmaster.exe
• %win_dir%\system32\giveio.sys
• %win_dir%\system32\drivers\lirsgt.sys
• %win_dir%\system32\drivers\prohlp02.sys
• %win_dir%\system32\drivers\prosync1.sys
• %win_dir%\system32\drivers\sfhlp01.sys
• %win_dir%\system32\speedfan.sys
• %win_dir%\system32\drivers\sptd.sys

%win_dir%\microsoft.net\framework\v2.0.50727\temporary asp.net files\root\93a10de6\c715adc6\app_global.asax.ze_4y4xe.dll

• The file does not contain company name.
• File checksum is BD9013AAB04AE4021433B62E8DF3ED4B.
• Loaded to %program_files%\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe.
more info ...

%win_dir%\microsoft.net\framework\v2.0.50727\temporary asp.net files\root\93a10de6\c715adc6\app_web_irgktuia.dll

• The file does not contain company name.
• File checksum is 11E1547495DE2392FEA09B94F8B82833.
• Loaded to %program_files%\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe.
more info ...

%win_dir%\system32\drivers\d347bus.sys

• Company is (3.47.0.0 built by: WinDDK).
• File checksum is 5776322F93CDB91086111F5FFBFDA2A0.
• Starts at system boot.
• Registered as d347bus.
more info ...

%win_dir%\system32\drivers\d347prt.sys

• Company is (3.47.0.0 built by: WinDDK).
• File checksum is B49F79ACE459763F4E0380071BE9CB45.
• Starts at system boot.
• Registered as d347prt.
more info ...

%program_files%\download master\dmaster.exe

• Company is WestByte(5.5.9.1157).
• File checksum is 60E97F6194FFE5A72B63A02589678112.
• Established the Internet connection with 95.172.148.230 on port World Wide Web HTTP(80).
• Internet Explorer may start it.
• Registered as &Download Master, {8DAE90AD-4583-4977-9DD4-4360F7A45C74}.
more info ...

%win_dir%\system32\giveio.sys

• The file does not contain company name.
• File checksum is 77EBF3E9386DAA51551AF429052D88D0.
• Starts at system boot.
• Registered as giveio.
more info ...

%win_dir%\system32\drivers\lirsgt.sys

• The file does not contain company name.
• File checksum is 975B6CF65F44E95883F3855BAE8CECAF.
• Runs at start up.
• Registered as lirsgt.
more info ...

%win_dir%\system32\drivers\prohlp02.sys

• Company is Protection Technology(2.50).
• File checksum is 97184F49AA0733F6EEA28ADA265BA8DA.
• Starts at system boot.
• Registered as prohlp02, StarForce Protection Helper Driver v2.
more info ...

%win_dir%\system32\drivers\prosync1.sys

• Company is Protection Technology(1.6).
• File checksum is 960BCE3ED38761B446AABAC06C76BADF.
• Starts at system boot.
• Registered as prosync1, StarForce Protection Synchronization Driver v1.
more info ...

%win_dir%\system32\drivers\sfhlp01.sys

• Company is Protection Technology(1.5).
• File checksum is 462AEE0EA0481EA8BD45CAC876A4CCC4.
• Starts at system boot.
• Registered as sfhlp01, StarForce Protection Helper Driver.
more info ...

%win_dir%\system32\speedfan.sys

• Company is Windows (R) 2000 DDK provider(5.00.2195.5438).
• File checksum is 5D6401DB90EC81B71F8E2C5C8F0FEF23.
• Starts at system boot.
• Registered as speedfan.
more info ...

%win_dir%\system32\drivers\sptd.sys

• The file does not contain company name.
• The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
• Starts at system boot.
• Registered as sptd.
more info ...