Threat Summary. ati2sgag.exe, gedct160.dll, lhsapi30.dll, mousephone.dll, msinfo.dll

The result of free antivirus

Created by anti-spyware software WinDetect:

Version: 2.10.0

Possible suspicious files:

%win_dir%\system32\ati2sgag.exe
%win_dir%\lhsp\language\gedct160.dll
%win_dir%\lhsp\system\lhsapi30.dll
%user_profile%\application data\mail.ru\agent\mra\dll\mousephone.dll
%win_dir%\pchealth\helpctr\binaries\msinfo.dll
%win_dir%\lhsp\language\rurct160.dll
%win_dir%\russia_clock.scr
%win_dir%\lhsp\language\spect160.dll
%allusers_profile%\application data\avg secure search\9.0.0.18\components\ff4\toolbarhomewmp.dll
%win_dir%\lhsp\system\ttsmgr32.dll
%win_dir%\lhsp\tv\tv_enua.dll
%user_profile%\application data\mail.ru\agent\mra\dll\ylusbtel.dll

%win_dir%\system32\ati2sgag.exe

The file does not contain company name.
File checksum is 72810C6A63076A480ABCE0E0BA0BC981.
Registered as ATI Smart.

%win_dir%\lhsp\language\gedct160.dll

Company is Lernout & Hauspie Speech Products(6.10.00).
File checksum is E0E846F6BCAC776A0E97FA539722F2FE.
The file may be invisible in Windows Explorer.
Loaded to %program_files%\BX_memo\bx_memo.exe.

%win_dir%\lhsp\system\lhsapi30.dll

Company is Lernout & Hauspie Speech Products(4.20.03).
File checksum is 539356D609A7D591CC189970D25B334A.
The file may be invisible in Windows Explorer.
Loaded to %program_files%\BX_memo\bx_memo.exe.

%user_profile%\application data\mail.ru\agent\mra\dll\mousephone.dll

Company is (1, 0, 0, 0).
File checksum is 7D4CC905FADBBA818CBE52846AE66410.
Loaded to %application_data%\Mail.Ru\Agent\MAgent.exe.

%win_dir%\pchealth\helpctr\binaries\msinfo.dll

The file does not contain company name.
File checksum is 4F32AF9D96D7D1417E3808358D842851.
The file may be invisible in Windows Explorer.
Loaded to %win_dir%\system32\wbem\wmiprvse.exe.

%win_dir%\lhsp\language\rurct160.dll

Company is Lernout & Hauspie Speech Products(6.03.03).
File checksum is FB1CB099C888F7BBD85CBBA0E531A52D.
The file may be invisible in Windows Explorer.
Loaded to %program_files%\BX_memo\bx_memo.exe.

%win_dir%\russia_clock.scr

The file does not contain company name.
File checksum is 230B86F702668F082532619DBD2BF700.
Screen saver.
The file may be invisible in Windows Explorer.

%win_dir%\lhsp\language\spect160.dll

Company is Lernout & Hauspie Speech Products(6.10.00).
File checksum is C2C477075B2C153941E0217A5EDA0431.
The file may be invisible in Windows Explorer.
Loaded to %program_files%\BX_memo\bx_memo.exe.

%allusers_profile%\application data\avg secure search\9.0.0.18\components\ff4\toolbarhomewmp.dll

The file does not contain company name.
File checksum is F01ED0938E0F1EBAE672FE81C8DA8F1D.
Loaded to %program_files%\Mozilla Firefox\firefox.exe.

%win_dir%\lhsp\system\ttsmgr32.dll

Company is Lernout & Hauspie Speech Products(6.01.01).
File checksum is 83FAB705A4347C181A0151BF115070BB.
The file may be invisible in Windows Explorer.
Loaded to %program_files%\BX_memo\bx_memo.exe.

%win_dir%\lhsp\tv\tv_enua.dll

Company is Lernout & Hauspie Speech Products N.V.(6.0.0.10).
File checksum is ED98E67FA8CC190AAD0757CD620E6B77.
The file may be invisible in Windows Explorer.
Loaded to %program_files%\BX_memo\bx_memo.exe.

%user_profile%\application data\mail.ru\agent\mra\dll\ylusbtel.dll

The file does not contain company name.
File checksum is 618390ACFC31CB6EF091160D39314D96.
Loaded to %application_data%\Mail.Ru\Agent\MAgent.exe.