Created by anti-spyware software WinDetect:

• Version: 2.10.0

Possible suspicious files:

• %win_dir%\system32\ati2sgag.exe
• %win_dir%\system32\drivers\elbycdio.sys
• %win_dir%\system32\drivers\imagedrv.sys
• %win_dir%\system32\drivers\imagesrv.sys
• %program_files%\shareman\shareman.exe
• %win_dir%\system32\drivers\sisidex.sys
• %win_dir%\system32\drivers\sisperf.sys
• %win_dir%\system32\drivers\sptd.sys
• %win_dir%\system32\vp6dec_settings.cpl

%win_dir%\system32\ati2sgag.exe

• The file does not contain company name.
• File checksum is 018DBF2D013343AB9C5D841C2B1D055D.
• Registered as ATI Smart.
more info ...

%win_dir%\system32\drivers\elbycdio.sys

• Company is Elaborate Bytes AG(6, 0, 0, 0).
• File checksum is FA13264EEA448B2E1B3A844AE4F75C7A.
• Runs at start up.
• Registered as ElbyCDIO, ElbyCDIO Driver.
more info ...

%win_dir%\system32\drivers\imagedrv.sys

• Company is Ahead Software AG(2.29.0.0 built by: WinDDK).
• File checksum is 25EDD75E23C5EF6B33D0FBCCE125A601.
• Starts at system boot.
• Registered as imagedrv.
more info ...

%win_dir%\system32\drivers\imagesrv.sys

• Company is Ahead Software AG(2.29.0.0 built by: WinDDK).
• File checksum is 9C4BBACF4E9B9543C3CE23F1FE556941.
• Starts at system boot.
• Registered as imagesrv.
more info ...

%program_files%\shareman\shareman.exe

• The file does not contain company name.
• File checksum is 280630E5A61349E9C7A05BAAAC405CC8.
• The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
• May bypass Windows Firewall.
more info ...

%win_dir%\system32\drivers\sisidex.sys

• Company is Windows (R) 2000 DDK provider(5.1.2600.0 built by: WinDDK).
• File checksum is 6225224B8E846AC230F8D9B343635910.
• Starts at system boot.
• Registered as sisidex.
more info ...

%win_dir%\system32\drivers\sisperf.sys

• Company is Silicon Integrated Systems Corp.(2.02.03.00 built by: WinDDK).
• File checksum is 596D4A7052002D2BD344D8937DA6F66D.
• Starts at system boot.
• Registered as sisperf, Add Performance Filter Driver.
more info ...

%win_dir%\system32\drivers\sptd.sys

• The file does not contain company name.
• The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
• Starts at system boot.
• Registered as sptd.
more info ...

%win_dir%\system32\vp6dec_settings.cpl

• The file does not contain company name.
• File checksum is 704D6C6CA91162E2FA425D41F1AE5075.
• Loaded to %win_dir%\Explorer.EXE.
more info ...