WinDetect
We keep Windows PCs clean

The result of free antivirus

Created by anti-spyware software WinDetect:

  • Version: 4.2.0

Possible suspicious files:


%win_dir%\system32\ati2evxx.dll

  • Company is ATI Technologies Inc.(6.14.10.4178).
  • File checksum is 4EBC9AF70E5DDEDFDB8D9DDB530D7929.
  • Loaded to Windows Security Process.
  • Registered as AtiExtEvent.
    • more info ...

%win_dir%\system32\autoit3.exe

  • The file does not contain company name.
  • File checksum is 408D8EE73411CCF6D739FC80B08EF211.
  • The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
    • more info ...

%program_files%\bonjoiur host controller\bhctrl32.exe

  • The file does not contain company name.
  • The file was created short time ago. Spywares very often re-creates new files after system login.
  • File checksum is EB85EC0869A8753A6DBDACBA7BF86B39.
  • Established the Internet connection with 93.188.161.17 on port World Wide Web HTTP(80).
    • more info ...

%win_dir%\system32\navlogon.dll

  • The file does not contain company name.
  • File checksum is B33F5A94275A88B2BBD988549B699017.
  • Loaded to Windows Security Process.
  • Registered as NavLogon.
  • Loaded to %win_dir%\system32\winlogon.exe.
    • more info ...

%win_dir%\system32\drivers\sptd.sys

  • The file does not contain company name.
  • The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
  • Starts at system boot.
  • Registered as sptd.
    • more info ...

%win_dir%\system32\drivers\tcpip.sys

  • Company is Microsoft Corporation(5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)).
  • File checksum is DF70435F3D17C40D5CB15E6DC918342E.
  • Runs at start up.
  • Registered as Tcpip, Драйвер протокола TCP/IP.
    • more info ...

%program_files%\vistadrive\vsdrv.exe

  • The file does not contain company name.
  • File checksum is 52C3485C4B181163C13FCC4BD6A4505B.
  • The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
  • Windows Explorer starts it automatically.
  • Registered as Vistadrv.
  • May download files from the Internet.
  • Detected as W32/Dx.GMQ!tr by Fortinet AntiVirus.
    • more info ...