WinDetect
We keep Windows PCs clean
The result of free antivirus
Created by anti-spyware software WinDetect:
- Version: 2.10.0
Possible suspicious files:
- %user_profile%
\application data \21.tmp - %win_dir%
\aadrive32.exe - %win_dir%
\system32 \ati2sgag.exe - %user_profile%
\application data \hhsqsx.exe - c:
\recycler \s-1-5-21-0243556031-888888379-781863308-1830 \zaberg.exe \recycler \s-1-5-21-0243556031-888888379-781863308-1830 \zaberg.exe
%user_profile%\application data\21.tmp
- The file does not contain company name.
- File checksum is A8B4AF1A279E8D8B4E98F5975D4B37AD.
- May bypass Windows Firewall.
- May download files from the Internet.
- May connect to site http://pppppppppppp.p.r7m.us.
- May connect to site http://pppppppppppp.r7m.us.
- May connect to site http://1p.r7m.us.
- May connect to site http://obsoletegpppp.r7m.us.
- May connect to site http://ppp16ptok2pcomphomepaqupp.r7m.us.
- May connect to site http://pppppppppppppppppppp.r7m.us.
- May connect to site http://mobip.r7m.us.
- May connect to site http://ppppnipponp.r7m.us. more info ...
- The file does not contain company name.
- File checksum is A8B4AF1A279E8D8B4E98F5975D4B37AD.
- Established the Internet connection with 83.0.0.9 on port Microsoft-DS(445).
- Established the Internet connection with 60.191.205.130 on port 6943.
- Established the Internet connection with 83.0.0.10 on port Microsoft-DS(445).
- Established the Internet connection with 83.139.0.23 on port Microsoft-DS(445).
- Established the Internet connection with 83.139.0.21 on port Microsoft-DS(445).
- Established the Internet connection with 83.0.0.8 on port Microsoft-DS(445).
- Established the Internet connection with 83.139.0.22 on port Microsoft-DS(445).
- Windows Explorer starts it automatically.
- Registered as Microsoft Driver Setup.
- May download files from the Internet.
- May connect to site http://pppppppppppp.p.r7m.us.
- May connect to site http://pppppppppppp.r7m.us.
- May connect to site http://1p.r7m.us.
- May connect to site http://obsoletegpppp.r7m.us.
- May connect to site http://ppp16ptok2pcomphomepaqupp.r7m.us.
- May connect to site http://pppppppppppppppppppp.r7m.us.
- May connect to site http://mobip.r7m.us.
- May connect to site http://ppppnipponp.r7m.us. more info ...
%win_dir%\system32\ati2sgag.exe
- The file does not contain company name.
- File checksum is 98620EC4B86D651871C9DCC4AE0043CC.
- Registered as ATI Smart. more info ...
%user_profile%\application data\hhsqsx.exe
- The file does not contain company name.
- File checksum is 2A2C7B98AD62887BEFEE07533F5E4C6B.
- Windows Explorer starts it automatically.
- Registered as Hhsqsx. more info ...
c:\recycler\s-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe
- The file does not contain company name.
- File checksum is 8249ECCF5409549CA0EEFDED9991DD99.
- Spoofs the system process.
- Windows Explorer starts it automatically.
- Registered as zaber0.
- The file may be invisible in Windows Explorer.
- May compromise other applications.
- Was not detected by anti-viruses. more info ...
\recycler\s-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe
- The file does not contain company name.
- File checksum is 8249ECCF5409549CA0EEFDED9991DD99.
- The file may be invisible in Windows Explorer.
- May compromise other applications. more info ...
