Created by anti-spyware software WinDetect:

• Version: 2.10.2

Possible suspicious files:

• %win_dir%\system32\drivers\acpi.sys
• %win_dir%\system32\drivers\cdrom.sys
• %win_dir%\system32\drivers\devx.sys
• %win_dir%\system32\dimsntfy.dll
• %win_dir%\system32\drivers\disk.sys
• %program_files%\divx\divx plus player\divx plus player.exe
• %win_dir%\system32\drivers\fltmgr.sys
• %win_dir%\system32\drivers\ftdisk.sys
• %win_dir%\system32\drivers\i8042prt.sys
• %win_dir%\system32\drivers\imapi.sys
• %win_dir%\system32\drivers\intelppm.sys
• %win_dir%\system32\drivers\ipsec.sys
• %win_dir%\system32\drivers\irda.sys
• %win_dir%\system32\drivers\isapnp.sys
• %win_dir%\system32\drivers\ithsgt.sys
• %win_dir%\system32\drivers\kbdclass.sys
• %win_dir%\system32\drivers\kbdhid.sys
• %win_dir%\system32\kerberos.dll
• %win_dir%\system32\drivers\lilsgt.sys
• %win_dir%\system32\drivers\mouclass.sys
• %win_dir%\system32\msv1_0.dll
• %win_dir%\system32\drivers\netbios.sys
• %win_dir%\system32\drivers\netbt.sys
• %win_dir%\system32\drivers\pci.sys
• %win_dir%\system32\drivers\rasacd.sys
• %win_dir%\system32\drivers\rdpcdd.sys
• %win_dir%\system32\rdpclip.exe
• %win_dir%\system32\drivers\redbook.sys
• %win_dir%\system32\scecli.dll
• %win_dir%\system32\drivers\secdrv.sys
• %win_dir%\system32\drivers\serial.sys
• %win_dir%\system32\drivers\sr.sys
• %program_files%\symantec\symevent.sys
• %win_dir%\system32\drivers\tcpip.sys
• %win_dir%\system32\drivers\termdd.sys
• %win_dir%\system32\drivers\uagp35.sys
• f:\unlocker\unlocker.exe
• %win_dir%\system32\drivers\viaide.sys
• %win_dir%\system32\drivers\viamraid.sys
• %win_dir%\system32\drivers\vtpr.sys
• %win_dir%\system32\wdigest.dll
• %win_dir%\system32\drivers\wudfpf.sys

%win_dir%\system32\drivers\acpi.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
• File checksum is AC407F1A62C3A300B4F2B5A9F1D55B2C.
• Starts at system boot.
• Registered as ACPI, Microsoft ACPI-Treiber.
more info ...

%win_dir%\system32\drivers\cdrom.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is 1F4260CC5B42272D71F79E570A27A4FE.
• Runs at start up.
• Registered as Cdrom, CD-ROM-Laufwerktreiber.
more info ...

%win_dir%\system32\drivers\devx.sys

• The file does not contain company name.
• File checksum is 50B5FEE3D6035FCD9A5E0E40029B9DF4.
• Registered as Devx.
more info ...

%win_dir%\system32\dimsntfy.dll

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2113)).
• File checksum is 2449D2A51EA2083FA05058F7CEF44714.
• Loaded to Windows Security Process.
• Registered as dimsntfy.
• Loaded to %win_dir%\system32\winlogon.exe.
more info ...

%win_dir%\system32\drivers\disk.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is 044452051F3E02E7963599FC8F4F3E25.
• Starts at system boot.
• Registered as Disk, Laufwerktreiber.
more info ...

%program_files%\divx\divx plus player\divx plus player.exe

• The file does not contain company name.
• File checksum is CCD89E3915471EEA9AD3CDFAC672845F.
• The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
more info ...

%win_dir%\system32\drivers\fltmgr.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
• File checksum is B2CF4B0786F8212CB92ED2B50C6DB6B0.
• Starts at system boot.
• Registered as FltMgr.
more info ...

%win_dir%\system32\drivers\ftdisk.sys

• Company is Microsoft Corporation(5.1.2600.0 (XPClient.010817-1148)).
• File checksum is 8F1955CE42E1484714B542F341647778.
• Starts at system boot.
• Registered as Ftdisk, Treiber für Volume-Manager.
more info ...

%win_dir%\system32\drivers\i8042prt.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is E283B97CFBEB86C1D86BAED5F7846A92.
• Runs at start up.
• Registered as i8042prt, i8042-Tastatur- und PS/2-Mausanschluss-Treiber.
more info ...

%win_dir%\system32\drivers\imapi.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is 083A052659F5310DD8B6A6CB05EDCF8E.
• Runs at start up.
• Registered as Imapi, Filtertreiber für CD-Brennen.
more info ...

%win_dir%\system32\drivers\intelppm.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
• File checksum is 4C7D2750158ED6E7AD642D97BFFAE351.
• Runs at start up.
• Registered as intelppm, Intel-Prozessortreiber.
more info ...

%win_dir%\system32\drivers\ipsec.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
• File checksum is 23C74D75E36E7158768DD63D92789A91.
• Runs at start up.
• Registered as IPSec, IPSEC-Treiber.
more info ...

%win_dir%\system32\drivers\irda.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
• File checksum is ACA5E7B54409F9CB5EED97ED0C81120E.
• Runs at start up.
• Registered as irda, IrDA-Protokoll.
more info ...

%win_dir%\system32\drivers\isapnp.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
• File checksum is 6DFB88F64135C525433E87648BDA30DE.
• Starts at system boot.
• Registered as isapnp, PnP-ISA/EISA-Bus-Treiber.
more info ...

%win_dir%\system32\drivers\ithsgt.sys

• The file does not contain company name.
• File checksum is B7A5FADF67136FDA7E8F25303565B674.
• Runs at start up.
• Registered as ithsgt.
more info ...

%win_dir%\system32\drivers\kbdclass.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is 1704D8C4C8807B889E43C649B478A452.
• Runs at start up.
• Registered as Kbdclass, Tastaturklassentreiber.
more info ...

%win_dir%\system32\drivers\kbdhid.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is B6D6C117D771C98130497265F26D1882.
• Runs at start up.
• Registered as kbdhid, Tastatur-HID-Treiber.
more info ...

%win_dir%\system32\kerberos.dll

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2113)).
• File checksum is 394CCD355E86092FFDCCA41F8797861E.
• Loaded to Windows Security Process.
more info ...

%win_dir%\system32\drivers\lilsgt.sys

• The file does not contain company name.
• File checksum is 16767EA492B5D140E1DE3679A65EAE74.
• Runs at start up.
• Registered as lilsgt.
more info ...

%win_dir%\system32\drivers\mouclass.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is B24CE8005DEAB254C0251E15CB71D802.
• Runs at start up.
• Registered as Mouclass, Mausklassentreiber.
more info ...

%win_dir%\system32\msv1_0.dll

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2113)).
• File checksum is 1579CF2100A10C85A4C0758DB66006EE.
• Loaded to Windows Security Process.
more info ...

%win_dir%\system32\drivers\netbios.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
• File checksum is 5D81CF9A2F1A3A756B66CF684911CDF0.
• Runs at start up.
• Registered as NetBIOS, NetBIOS-Schnittstelle.
more info ...

%win_dir%\system32\drivers\netbt.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
• File checksum is 74B2B2F5BEA5E9A3DC021D685551BD3D.
• Runs at start up.
• Registered as NetBT, NetBios über TCP/IP.
more info ...

%win_dir%\system32\drivers\pci.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
• File checksum is 387E8DEDC343AA2D1EFBC30580273ACD.
• Starts at system boot.
• Registered as PCI, PCI-Bus-Treiber.
more info ...

%win_dir%\system32\drivers\rasacd.sys

• Company is Microsoft Corporation(5.1.2600.0 (xpclient.010817-1148)).
• File checksum is FE0D99D6F31E4FAD8159F690D68DED9C.
• Runs at start up.
• Registered as RasAcd, Treiber für automatische RAS-Verbindung.
more info ...

%win_dir%\system32\drivers\rdpcdd.sys

• Company is Microsoft Corporation(5.1.2600.0 (xpclient.010817-1148)).
• File checksum is 4912D5B403614CE99C28420F75353332.
• Runs at start up.
• Registered as RDPCDD.
more info ...

%win_dir%\system32\rdpclip.exe

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
• File checksum is BCC80A97F02F8AC7C202A044C3BF3FB2.
• Runs at start up.
more info ...

%win_dir%\system32\drivers\redbook.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is ED761D453856F795A7FE056E42C36365.
• Runs at start up.
• Registered as redbook, Filtertreiber für digitale CD-Audiowiedergabe.
more info ...

%win_dir%\system32\scecli.dll

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2113)).
• File checksum is 5132443DF6FC3771A17AB4AE55DCBC28.
• Loaded to Windows Security Process.
• Loaded to %win_dir%\system32\lsass.exe.
more info ...

%win_dir%\system32\drivers\secdrv.sys

• Company is Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.(4.03.086).
• File checksum is 90A3935D05B494A5A39D37E71F09A677.
• Runs at start up.
• Registered as Secdrv.
more info ...

%win_dir%\system32\drivers\serial.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is CF24EB4F0412C82BCD1F4F35A025E31D.
• Runs at start up.
• Registered as Serial, Treiber für seriellen Anschluss.
more info ...

%win_dir%\system32\drivers\sr.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
• File checksum is 50FA898F8C032796D3B1B9951BB5A90F.
• Starts at system boot.
• Registered as sr, Filtertreiber für Systemwiederherstellung.
more info ...

%program_files%\symantec\symevent.sys

• Company is Symantec Corporation(10.3.2.7).
• File checksum is A769203607D8AF4EFA01148AE86697D5.
• Registered as SymEvent.
• May manipulate kernel objects.
more info ...

%win_dir%\system32\drivers\tcpip.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
• File checksum is 93EA8D04EC73A85DB02EB8805988F733.
• Runs at start up.
• Registered as Tcpip, TCP/IP-Protokolltreiber.
more info ...

%win_dir%\system32\drivers\termdd.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
• File checksum is 88155247177638048422893737429D9E.
• Runs at start up.
• Registered as TermDD, Terminalgerätetreiber.
more info ...

%win_dir%\system32\drivers\uagp35.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
• File checksum is D85938F272D1BCF3DB3A31FC0A048928.
• Starts at system boot.
• Registered as uagp35, Microsoft AGPv3.5-Filter.
more info ...

f:\unlocker\unlocker.exe

• The file does not contain company name.
• File checksum is AEB7861BF49F5D0B1834E3571BCA1803.
• May connect to site http://ccollomb.free.fr.
• May compromise other applications.
more info ...

%win_dir%\system32\drivers\viaide.sys

• Company is Microsoft Corporation(1.00.01.01).
• File checksum is 3B3EFCDA263B8AC14FDF9CBDD0791B2E.
• Starts at system boot.
• Registered as ViaIde.
more info ...

%win_dir%\system32\drivers\viamraid.sys

• Company is VIA Technologies inc,.ltd(5.1.2600.430).
• File checksum is 0363E216E4EB5052969C96608934DBDE.
• Starts at system boot.
• Registered as viamraid.
more info ...

%win_dir%\system32\drivers\vtpr.sys

• The file does not contain company name.
• File checksum is 1DD33414DA0FB16EBA6D4086CB452E0F.
• Registered as VtPr.
more info ...

%win_dir%\system32\wdigest.dll

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2113)).
• File checksum is 22D7E027DD7B81EDAA0BCDCC02449B86.
• Loaded to Windows Security Process.
• Loaded to %win_dir%\system32\lsass.exe.
more info ...

%win_dir%\system32\drivers\wudfpf.sys

• Company is Microsoft Corporation(6.0.5716.32 (winmain(wmbla).060928-1756)).
• File checksum is F15FEAFFFBB3644CCC80C5DA584E6311.
• Starts at system boot.
• Registered as WudfPf, Windows Driver Foundation - User-mode Driver Framework Platform Driver.
more info ...