Threat Summary. 13517.dat, cxhie1700.dll, dgivecp.sys, ff_vfw.dll, iscflash.dll

The result of free antivirus

Created by anti-spyware software WinDetect:

Version: 2.10.0

Possible suspicious files:

%win_dir%\temp\hie1700\13517.dat
c:\cxrecord6\cxhie1700.dll
%win_dir%\system32\drivers\dgivecp.sys
%win_dir%\system32\ff_vfw.dll
%user_profile%\local settings\temp\7zs15b3.tmp\iscflash.dll
%program_files%\за семью морями\islands.exe
%program_files%\msmeraser\msmeraser.dll
%win_dir%\system32\ncfpsys.exe
c:\cxrecord6\setrecordsys.dll
%win_dir%\system32\spool\drivers\w32x86\3\ssp2mu.dll
%win_dir%\system32\spool\drivers\w32x86\3\sugs2u.dll
%win_dir%\system32\spool\drivers\w32x86\3\sugs2lf.dll
%win_dir%\system32\xvidcore.dll
%win_dir%\system32\xvidvfw.dll

%win_dir%\temp\hie1700\13517.dat

The file does not contain company name.
File checksum is D493DD9725F4D42C07744B426C7F3071.
Loaded to %program_files%\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe.

c:\cxrecord6\cxhie1700.dll

The file does not contain company name.
File checksum is 25E1E081B823514CAA38B4A350F7217B.
The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.

%win_dir%\system32\drivers\dgivecp.sys

Company is DeviceGuys, Inc.(1.1.1.30).
File checksum is A5034F77B278F07E224FE07CF98A8B76.
Runs at start up.
Registered as DgiVecp, Team MFP Comm Driver.

%win_dir%\system32\ff_vfw.dll

The file does not contain company name.
File checksum is 150ACE0CE32F3C189F1D8C014D13AA7A.
Loaded to %program_files%\Mozilla Firefox\firefox.exe.

%user_profile%\local settings\temp\7zs15b3.tmp\iscflash.dll

The file does not contain company name.
File checksum is BB5699D04CF46C10BC333CC9503A7B8C.
Loaded to %user_profile%\LOCALS~1\Temp\7zS15B3.tmp\InsydeFlash.exe.

%program_files%\за семью морями\islands.exe

The file does not contain company name.
File checksum is 9BAAC9B145C503A8FE1FE1F081B9BDC6.
The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.

%program_files%\msmeraser\msmeraser.dll

The file does not contain company name.
File checksum is 6E90DA81712262E21F6C40DA589ABC5F.
The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
Shortcut menu.

%win_dir%\system32\ncfpsys.exe

Company is Password Protect Software(3.6.1).
File checksum is F6E8D82BD3C8B1A68145E2EA0BD7ADA3.
The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
Windows Explorer starts it automatically.
Registered as Password Protect USB 3.6.1.
The file may be invisible in Windows Explorer.

c:\cxrecord6\setrecordsys.dll

The file does not contain company name.
File checksum is F0E046040BC85E70F84B497DCF0B67D0.
The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
Loaded to %program_files%\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe.

%win_dir%\system32\spool\drivers\w32x86\3\ssp2mu.dll

The file does not contain company name.
File checksum is 218A7170D874871CD736D8BA7FC6B8A1.

%win_dir%\system32\spool\drivers\w32x86\3\sugs2u.dll

The file does not contain company name.
File checksum is 90D0178777DFA26A3B859F6EA82150DB.

%win_dir%\system32\spool\drivers\w32x86\3\sugs2lf.dll

The file does not contain company name.
File checksum is 837DFB338797C75E15E84128D3661B67.

%win_dir%\system32\xvidcore.dll

The file does not contain company name.
File checksum is 8401842B1D4899C2FDE9A0317AC682D0.

%win_dir%\system32\xvidvfw.dll

The file does not contain company name.
File checksum is B458203DC7C174D541E7DBA74DA1B857.