Created by anti-spyware software WinDetect:

• Version: 2.10.0

Possible suspicious files:

• %win_dir%\aadrive32.exe
• %win_dir%\notepad.exe
• %win_dir%\system32\notepad.exe
• %program_files%\skymonk\skymonk.exe
• %win_dir%\system32\drivers\sptd.sys
• %win_dir%\system32\drivers\tcpip.sys
• %application_data%\vsnsnn.exe
• c:\recycler\s-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe

%win_dir%\aadrive32.exe

• The file does not contain company name.
• File checksum is 3306FF599D6D6A60D1CA225510DA9F11.
• Established the Internet connection with 192.168.5.26 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.0.171 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.0.141 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.3.69 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.1.81 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.23 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.3.13 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.33 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.1.250 on port Microsoft-DS(445).
• Established the Internet connection with 192.0.0.252 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.25 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.3.44 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.23 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.4.43 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.37 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.1.136 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.1.28 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.36 on port Microsoft-DS(445).
• Established the Internet connection with 192.0.1.0 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.33 on port Microsoft-DS(445).
• Established the Internet connection with 192.0.1.4 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.4 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.3.90 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.1.46 on port Microsoft-DS(445).
• Established the Internet connection with 192.0.0.253 on port Microsoft-DS(445).
• Established the Internet connection with 192.0.1.2 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.24 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.4.14 on port Microsoft-DS(445).
• Established the Internet connection with 192.0.1.3 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.1.239 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.28 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.0.56 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.0.161 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.0.40 on port Microsoft-DS(445).
• Established the Internet connection with 192.0.0.251 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.25 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.32 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.31 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.27 on port Microsoft-DS(445).
• Established the Internet connection with 192.0.0.254 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.20 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.8 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.29 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.30 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.19 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.35 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.3.14 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.24 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.31 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.1.20 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.4.130 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.0.5 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.27 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.29 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.4.215 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.26 on port Microsoft-DS(445).
• Established the Internet connection with 60.190.223.42 on port 6939.
• Established the Internet connection with 192.168.1.13 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.4.231 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.34 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.28 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.5.30 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.32 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.4.80 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.0.3 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.1.110 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.21 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.4.2 on port Microsoft-DS(445).
• Established the Internet connection with 192.0.1.1 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.2.22 on port Microsoft-DS(445).
• Established the Internet connection with 192.168.0.238 on port Microsoft-DS(445).
• Windows Explorer starts it automatically.
• Registered as Microsoft Driver Setup.
• The file may be invisible in Windows Explorer.
• May download files from the Internet.
• May connect to site http://pppppppppppp.p.r7m.us.
• May connect to site http://pppppppppppp.r7m.us.
• May connect to site http://1p.r7m.us.
• May connect to site http://obsoletegpppp.r7m.us.
• May connect to site http://ppp16ptok2pcomphomepaqupp.r7m.us.
• May connect to site http://pppppppppppppppppppp.r7m.us.
• May connect to site http://mobip.r7m.us.
• May connect to site http://ppppnipponp.r7m.us.
more info ...

%win_dir%\notepad.exe

• The file does not contain company name.
• File checksum is A4AA630B31F028E9034D8A5097FF2BC0.
more info ...

%win_dir%\system32\notepad.exe

• The file does not contain company name.
• File checksum is 6DA8A8F445F87927F32CE50E4DA24C40.
more info ...

%program_files%\skymonk\skymonk.exe

• The file does not contain company name.
• File checksum is 6867C9FF9B5E609B9511BD100AF08694.
• The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
more info ...

%win_dir%\system32\drivers\sptd.sys

• The file does not contain company name.
• The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
• Starts at system boot.
• Registered as sptd.
more info ...

%win_dir%\system32\drivers\tcpip.sys

• Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
• File checksum is EAEC6EA32BDABD7622371C10B8D68A17.
• Runs at start up.
• Registered as Tcpip, Драйвер протокола TCP/IP.
more info ...

%application_data%\vsnsnn.exe

• The file does not contain company name.
• File checksum is 652464F7BB210EBD35EDCBDAAD011B62.
more info ...

c:\recycler\s-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe

• The file does not contain company name.
• The file was created short time ago. Spywares very often re-creates new files after system login.
• File checksum is E07B3E4EFF04C1F5062B9A352D04352F.
• Spoofs the system process.
• Windows Explorer starts it automatically.
• Registered as zaber0.
• The file may be invisible in Windows Explorer.
• May compromise other applications.
• Detected as W32/Injector.LSH!tr by Fortinet AntiVirus.
• Detected as Trojan.Inject.57955 by DrWeb AntiVirus.
more info ...