WinDetect
We keep Windows PCs clean

The result of free antivirus

Created by anti-spyware software WinDetect:

  • Version: 4.2.0

Possible suspicious files:


%win_dir%\system32\drivers\acpi.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2111)).
  • File checksum is E28AFA761D7ECAA705A00B4A86F68DA9.
  • Starts at system boot.
  • Registered as ACPI, Драйвер Microsoft ACPI.
    • more info ...

%win_dir%\system32\drivers\amfilter.sys

  • Company is A4Tech Co.,Ltd.(6.00.6000.2).
  • File checksum is 868AE6FA93C29C8A105539F3E6D5A77F.
  • Runs at start up.
  • Registered as Amfilter, A4Tech Mouse Filter Driver.
    • more info ...

%win_dir%\system32\drivers\asacpi.sys

  • The file does not contain company name.
  • File checksum is D48659BB24C48345D926ECB45C1EBDF5.
  • Registered as MTsensor, ATK0110 ACPI UTILITY.
    • more info ...

%win_dir%\system32\drivers\cdrom.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is 1F4260CC5B42272D71F79E570A27A4FE.
  • Runs at start up.
  • Registered as Cdrom, Драйвер CD-ROM дисковода.
    • more info ...

%win_dir%\system32\drivers\cxcir.sys

  • Company is Conexant Systems, Inc.(6.1.7600.16385 built by: WinDDK).
  • File checksum is C0137F09F5808D17ABBA7713DA6E68C3.
  • Runs at start up.
  • Registered as CXIR, Conexant Polaris IR Transceiver.
    • more info ...

%win_dir%\system32\dimsntfy.dll

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2113)).
  • File checksum is 5FE3B303F0FF27F7BB4D147AB9A942B9.
  • Loaded to Windows Security Process.
  • Registered as dimsntfy.
  • Loaded to %win_dir%\system32\winlogon.exe.
    • more info ...

%win_dir%\system32\drivers\disk.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is 044452051F3E02E7963599FC8F4F3E25.
  • Starts at system boot.
  • Registered as Disk, Драйвер диска.
    • more info ...

%win_dir%\system32\drivers\dmio.sys

  • Company is Корпорация Microsoft и VERITAS Software(2600.5512.503.0).
  • File checksum is 5F25DE6F05C986DCC36ADAF532C3CE0D.
  • Starts at system boot.
  • Registered as dmio, Драйвер диспетчера логических дисков.
    • more info ...

%win_dir%\system32\drivers\dmload.sys

  • Company is Microsoft Corp., Veritas Software.(2600.0.503.0).
  • File checksum is E9317282A63CA4D188C0DF5E09C6AC5F.
  • Starts at system boot.
  • Registered as dmload.
    • more info ...

%win_dir%\system32\drivers\eusk2par.sys

  • Company is EUTRON(11.1.25.0).
  • File checksum is F7955F5273F7CA5DA13EBEEF4F736C44.
  • Runs at start up.
  • Registered as eusk2par, EUTRON SmartKey Parallel Driver.
    • more info ...

%win_dir%\system32\drivers\fltmgr.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
  • File checksum is B2CF4B0786F8212CB92ED2B50C6DB6B0.
  • Starts at system boot.
  • Registered as FltMgr.
    • more info ...

%program_files%\faststone image viewer\fsviewer.exe

  • The file does not contain company name.
  • File checksum is 543050F2515D724257D07566558633D7.
  • The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
  • Started by %program_files%\Google\Chrome\Application\chrome.exe.
    • more info ...

%win_dir%\system32\drivers\ftdisk.sys

  • Company is Корпорация Майкрософт(5.1.2600.0 (XPClient.010817-1148)).
  • File checksum is FDD9E4CF0C558F64A58115CB2FC197AC.
  • Starts at system boot.
  • Registered as Ftdisk, Драйвер диспетчера томов.
    • more info ...

%win_dir%\system32\drivers\gia_guardant.sys

  • Company is Windows (R) 2000 DDK provider(5.1.2600.0 built by: WinDDK).
  • File checksum is DBD776EE887E1CA4652CC61CF17263FF.
  • Runs at start up.
  • Registered as GiA_Guardant, GiA Guardant Emulator (v2.6).
    • more info ...

%win_dir%\system32\drivers\i8042prt.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is F9850BDD47DFFD2797E984FE60C8B3B6.
  • Runs at start up.
  • Registered as i8042prt, Драйвер i8042-клавиатуры и мыши для порта PS/2.
    • more info ...

%win_dir%\system32\drivers\imapi.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is 083A052659F5310DD8B6A6CB05EDCF8E.
  • Runs at start up.
  • Registered as Imapi, Драйвер фильтра записи компакт-дисков.
    • more info ...

%win_dir%\system32\drivers\intelppm.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
  • File checksum is 5151DFF0FAA3CCCC38A9DE9B4001D09B.
  • Runs at start up.
  • Registered as intelppm, Драйвер Intel процессора.
    • more info ...

%win_dir%\system32\drivers\ipsec.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
  • File checksum is 23C74D75E36E7158768DD63D92789A91.
  • Runs at start up.
  • Registered as IPSec, Драйвер IPSEC.
    • more info ...

%win_dir%\system32\drivers\isapnp.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2111)).
  • File checksum is 1C93959977CAD7168B4C816E8B29FE9B.
  • Starts at system boot.
  • Registered as isapnp, Драйвер PnP ISA/EISA шины.
    • more info ...

%win_dir%\system32\drivers\kbdclass.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is 2B0018DE01BFB628D0A49A301F34B46F.
  • Runs at start up.
  • Registered as Kbdclass, Драйвер класса клавиатуры.
    • more info ...

%win_dir%\system32\drivers\kbdhid.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is 5BE693A08508C6FD29B24ECB71DCC727.
  • Runs at start up.
  • Registered as kbdhid, Драйвер клавиатуры HID.
    • more info ...

%win_dir%\system32\kerberos.dll

  • Company is Microsoft Corporation(5.1.2600.6059 (xpsp_sp3_gdr.101221-1626)).
  • File checksum is 078B5460A059F5F535E9EFA4DE4C1425.
  • Loaded to Windows Security Process.
    • more info ...

%win_dir%\system32\drivers\mouclass.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is CBB891FDA0C5EC9F557ABBA86CA5CB76.
  • Runs at start up.
  • Registered as Mouclass, Драйвер класса мыши.
    • more info ...

%win_dir%\system32\msv1_0.dll

  • Company is Microsoft Corporation(5.1.2600.5876 (xpsp_sp3_gdr.090909-1234)).
  • File checksum is 4F4C1BCFCE3DF1802B75B39B9D01A9AC.
  • Loaded to Windows Security Process.
    • more info ...

%win_dir%\system32\drivers\netbios.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
  • File checksum is 5D81CF9A2F1A3A756B66CF684911CDF0.
  • Runs at start up.
  • Registered as NetBIOS, Интерфейс NetBIOS.
    • more info ...

%win_dir%\system32\drivers\netbt.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
  • File checksum is 74B2B2F5BEA5E9A3DC021D685551BD3D.
  • Runs at start up.
  • Registered as NetBT, NetBios через TCP/IP.
    • more info ...

%win_dir%\system32\drivers\pci.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2111)).
  • File checksum is F9B93D158C4D9F54FBDF1A9C807A1A5A.
  • Starts at system boot.
  • Registered as PCI, Драйвер PCI шины.
    • more info ...

%win_dir%\system32\drivers\pciide.sys

  • Company is Корпорация Майкрософт(5.1.2600.0 (XPClient.010817-1148)).
  • File checksum is 0D5EA82E0B16FA4C162635FA78E2DDC3.
  • Starts at system boot.
  • Registered as PCIIde.
    • more info ...

%win_dir%\system32\drivers\rasacd.sys

  • Company is Microsoft Corporation(5.1.2600.0 (xpclient.010817-1148)).
  • File checksum is FE0D99D6F31E4FAD8159F690D68DED9C.
  • Runs at start up.
  • Registered as RasAcd, Драйвер авто-подключений удаленного доступа.
    • more info ...

%win_dir%\system32\drivers\rdpcdd.sys

  • Company is Microsoft Corporation(5.1.2600.0 (xpclient.010817-1148)).
  • File checksum is 4912D5B403614CE99C28420F75353332.
  • Runs at start up.
  • Registered as RDPCDD.
    • more info ...

%win_dir%\system32\rdpclip.exe

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
  • File checksum is A1A0F773CB6777CB6E058FCFCF5E8969.
  • Runs at start up.
    • more info ...

%win_dir%\system32\drivers\redbook.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is 868C8DE05325F3B250F806666DE18F0D.
  • Runs at start up.
  • Registered as redbook, Драйвер фильтра воспроизведения звука с цифровых компакт-дисков.
    • more info ...

%win_dir%\system32\drivers\rtndpt5x.sys

  • Company is Realtek Semiconductor Corporation (1.0.0.1 built by: WinDDK).
  • File checksum is 5FFD2AAF467B80FAB34929AFB7702060.
  • Runs at start up.
  • Registered as RtNdPt5x, Realtek NDIS Protocol Driver.
    • more info ...

%win_dir%\system32\scecli.dll

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2113)).
  • File checksum is 04423B01963ECF4BEEC4BD26A740D809.
  • Loaded to Windows Security Process.
  • Loaded to %win_dir%\system32\lsass.exe.
    • more info ...

%win_dir%\system32\drivers\serial.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is 27645AE9DCC60BE467F3C92DDABED1B0.
  • Runs at start up.
  • Registered as Serial, Драйвер последовательного порта.
    • more info ...

%win_dir%\system32\drivers\sr.sys

  • Company is Корпорация Майкрософт(5.1.2600.5512 (xpsp.080413-2108)).
  • File checksum is 4A7B3B22C87F0897A68821734AFE9528.
  • Starts at system boot.
  • Registered as sr, Драйвер фильтра восстановления системы.
    • more info ...

%win_dir%\system32\drivers\tcpip.sys

  • Company is Microsoft Corporation(5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)).
  • File checksum is 9AEFA14BD6B182D61E3119FA5F436D3D.
  • Runs at start up.
  • Registered as Tcpip, Драйвер протокола TCP/IP.
    • more info ...

%win_dir%\system32\drivers\termdd.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2111)).
  • File checksum is 88155247177638048422893737429D9E.
  • Runs at start up.
  • Registered as TermDD, Драйвер устройства терминала.
    • more info ...

\\?\c:\windows\system32\wbem\wbemcomn.dll

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
  • The file is hidden and it is not visible in Windows Explorer.
  • File checksum is A43D218C88DB5BA0F55768D2C77C2B8C.
  • Loaded to \\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE.
    • more info ...

%win_dir%\system32\wdigest.dll

  • Company is Microsoft Corporation(5.1.2600.5834 (xpsp_sp3_gdr.090624-1305)).
  • File checksum is 0970F243D61DDF3DCDFD91881EF504B7.
  • Loaded to Windows Security Process.
  • Loaded to %win_dir%\system32\lsass.exe.
    • more info ...

\\?\c:\windows\system32\wbem\wmiadap.exe

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-2108)).
  • The file is hidden and it is not visible in Windows Explorer.
  • File checksum is BC32319C627B597AC56641C897517148.
    • more info ...