Created by anti-spyware software WinDetect:

• Version: 2.10.2

Possible suspicious files:

• %user_profile%\local settings\temp\~nsu.tmp\au_.exe
• %user_profile%\application data\installer\mailrusputnik.exe
• %win_dir%\system32\mszwitpc.exe
• %allusers_profile%\application data\mpk\sqlite3.dll
• %win_dir%\system32\drivers\utm0nza2.sys
• %win_dir%\system32\winscard.dll
• %win_dir%\system32\xtgina.dll

%user_profile%\local settings\temp\~nsu.tmp\au_.exe

• The file does not contain company name.
• The file was created short time ago. Spywares very often re-creates new files after system login.
• File checksum is 6686B5227E8BF87EC43AC03F22450432.
• May connect to site http://nsis.sf.net.
more info ...

%user_profile%\application data\installer\mailrusputnik.exe

• The file has digital signature but it is not valid: Media Labs Limited.
• The file does not contain company name.
• File checksum is 2EFA4FA8276EEDCFC148BA4C3DB6DF79.
• May connect to site http://nsis.sf.net.
more info ...

%win_dir%\system32\mszwitpc.exe

• The file does not contain company name.
• File checksum is 9541E99A1FFEE4E803E26ABA7661BB23.
• Registered as Network Adapter Events.
more info ...

%allusers_profile%\application data\mpk\sqlite3.dll

• The file does not contain company name.
• File checksum is 190B9DA85B3FA1085496504842B24D4B.
more info ...

%win_dir%\system32\drivers\utm0nza2.sys

• The file does not contain company name.
• File checksum is 524D8D450622DB4A7875B111C299A76B.
• Registered as utm0nza2, AVZ Kernel Driver.
• May manipulate kernel objects.
• Detected as W32/Bagle.ZNG!worm by Fortinet AntiVirus.
• Detected as Trojan.Agent-66914 by Clam AntiVirus.
more info ...

%win_dir%\system32\winscard.dll

• The file does not contain company name.
• File checksum is 7297E36E64CC13775FCE374D1F2BFE97.
more info ...

%win_dir%\system32\xtgina.dll

• The file does not contain company name.
• File checksum is 9D6C25EB8A0A4E1D90B2F3D0FC27CC56.
• Windows Logon loads it automatically.
more info ...