Threat Summary. kmservice.exe, libgcc_s_dw2-1.dll, mingwm10.dll, nhsrvice.exe, querystrategy.dll

The result of free antivirus

Created by anti-spyware software WinDetect:

Version: 2.10.0

Possible suspicious files:

%win_dir%\kmsem\kmservice.exe
%allusers_profile%\application data\3g internet\onlineupdate\libgcc_s_dw2-1.dll
%allusers_profile%\application data\3g internet\onlineupdate\mingwm10.dll
%win_dir%\system32\nhsrvice.exe
%allusers_profile%\application data\3g internet\onlineupdate\querystrategy.dll
%win_dir%\kmsem\shadow.kms
%win_dir%\system32\srvany.exe
%win_dir%\system32\drivers\tcpip.sys
%program_files%\windjview\windjview.exe

%win_dir%\kmsem\kmservice.exe

The file does not contain company name.
File checksum is 6F0027752165A048F34C8F377B238B7D.
Started by %win_dir%\system32\srvany.exe.

%allusers_profile%\application data\3g internet\onlineupdate\libgcc_s_dw2-1.dll

The file does not contain company name.
File checksum is C4B4409F186DA70FCF2BCC60D5F05489.
Loaded to %allusers_profile%\Application Data\3G Internet\OnlineUpdate\ouc.exe.

%allusers_profile%\application data\3g internet\onlineupdate\mingwm10.dll

The file does not contain company name.
File checksum is DBDA60D92E774B4ACB3B1CD71F909426.
Loaded to %allusers_profile%\Application Data\3G Internet\OnlineUpdate\ouc.exe.

%win_dir%\system32\nhsrvice.exe

Company is Aladdin Knowledge Systems Ltd.(8.31).
File checksum is 6C65A4359780D1AC2507BB0DC1F18575.
May get commands from the Internet on port 475.
Registered as HASP Loader.

%allusers_profile%\application data\3g internet\onlineupdate\querystrategy.dll

The file does not contain company name.
File checksum is 755349E05627C8FA9CB76BE1FCD2F973.
Loaded to %allusers_profile%\Application Data\3G Internet\OnlineUpdate\ouc.exe.

%win_dir%\kmsem\shadow.kms

The file does not contain company name.
File checksum is 678C2CD653906AD65A886F4E1E97C560.
Loaded to %win_dir%\kmsem\KMService.exe.

%win_dir%\system32\srvany.exe

The file does not contain company name.
File checksum is 4635935FC972C582632BF45C26BFCB0E.
Registered as KMService.

%win_dir%\system32\drivers\tcpip.sys

Company is Microsoft Corporation(5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)).
File checksum is DF70435F3D17C40D5CB15E6DC918342E.
Runs at start up.
Registered as Tcpip, Драйвер протокола TCP/IP.

%program_files%\windjview\windjview.exe

Company is Andrew Zhezherun(1.0.3).
File checksum is 579877B02B7682FAA11E0FE811316A45.
May download files from the Internet.