Created by anti-spyware software WinDetect:

• Version: 4.2.0

Possible suspicious files:

• %program_files%\common files\avest\avest csp\avsspc.dll
• %win_dir%\system32\fdclient.dll
• %win_dir%\system32\ihctrl32.dll
• d:\cryptoserviceasb\cbwebcrypt\logclientsocket.dll
• %win_dir%\system32\drivers\pxhelp20.sys
• %win_dir%\system32\drivers\sptd.sys
• %win_dir%\system32\ssbezier.scr
• d:\cryptoserviceasb\cbwebcrypt\ssf_lib2.dll
• %win_dir%\system32\drivers\tcpip.sys
• %win_dir%\system32\wsaudio.dll

%program_files%\common files\avest\avest csp\avsspc.dll

• Company is Avest(0.0.1.1356).
• File checksum is F2B6562276CB2753EF908F56FA77E4AF.
• Loads to all processes.
more info ...

%win_dir%\system32\fdclient.dll

• The file does not contain company name.
• File checksum is 5004056A36F7DB803BF09766A070E1FA.
• Loaded to %win_dir%\System32\svchost.exe.
more info ...

%win_dir%\system32\ihctrl32.dll

• The file does not contain company name.
• File checksum is 39BE557A620A9F7C9796ABC4FE14827F.
• Loaded to %win_dir%\System32\svchost.exe.
more info ...

d:\cryptoserviceasb\cbwebcrypt\logclientsocket.dll

• The file does not contain company name.
• File checksum is 7BCA8E7CE33E9F7CB6A93D270FD67651.
• The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
• Loaded to D:\CryptoServiceASB\CbWEBCrypt\ssf_server.exe.
more info ...

%win_dir%\system32\drivers\pxhelp20.sys

• Company is Sonic Solutions(2.02.62a).
• File checksum is B572ED0C3E6165643FA116AF20425A54.
• Starts at system boot.
• Registered as PxHelp20.
more info ...

%win_dir%\system32\drivers\sptd.sys

• The file does not contain company name.
• The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
• Starts at system boot.
• Registered as sptd.
more info ...

%win_dir%\system32\ssbezier.scr

• The file does not contain company name.
• File checksum is 1AE89FEADBF469ED18A7442EFD1262CE.
• Screen saver.
more info ...

d:\cryptoserviceasb\cbwebcrypt\ssf_lib2.dll

• The file does not contain company name.
• File checksum is 1BD595F986CEF6373190615C3141978B.
• The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
• Loaded to D:\CryptoServiceASB\CbWEBCrypt\ssf_server.exe.
more info ...

%win_dir%\system32\drivers\tcpip.sys

• Company is Microsoft Corporation(5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)).
• File checksum is 6A104BA98D99D53AB0C91825CE659FC6.
• Runs at start up.
• Registered as Tcpip, Драйвер протокола TCP/IP.
more info ...

%win_dir%\system32\wsaudio.dll

• The file does not contain company name.
• File checksum is 07C90AD23DA0DE34D9416C82CB980B25.
• Loaded to %win_dir%\System32\svchost.exe.
more info ...