Threat Summary. agent.exe, iptvplayer.exe, lame_enc.dll, mdnsresponder.exe, unlocker.exe

The result of free antivirus

Created by anti-spyware software WinDetect:

Version: 2.10.0

Possible suspicious files:

%program_files%\common files\installshield\updateservice\agent.exe
%program_files%\ip-tv player\iptvplayer.exe
n:\games\garena plus\lame_enc.dll
%program_files%\bonjour\mdnsresponder.exe
%program_files%\unlocker\unlocker.exe
%win_dir%\system32\drivers\vax347b.sys
%win_dir%\system32\drivers\vax347s.sys
%win_dir%\system32\vksaver.dll

%program_files%\common files\installshield\updateservice\agent.exe

Company is InstallShield Software Corporation(3, 00, 100, 1165).
File checksum is 184ADE410B293AC65A71D601914F4800.
May download files from the Internet.
May connect to site http://www.installshield.com.

%program_files%\ip-tv player\iptvplayer.exe

The file does not contain company name.
File checksum is C63689A09356064255CE2BB3D7FBFDB4.
The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
May bypass Windows Firewall.

n:\games\garena plus\lame_enc.dll

The file does not contain company name.
File checksum is 3C0AC9F753DD0C4AD3D46F5F6AA36AA9.
The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.

%program_files%\bonjour\mdnsresponder.exe

Company is Apple Computer, Inc.(1,0,3,1).
File checksum is 73686FE0B2E0469F89FD2075BE724704.
May get commands from the Internet on port 1026.
May bypass Windows Firewall.
Registered as Bonjour Service, ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##.

%program_files%\unlocker\unlocker.exe

The file does not contain company name.
File checksum is AEB7861BF49F5D0B1834E3571BCA1803.
May connect to site http://ccollomb.free.fr.
May compromise other applications.

%win_dir%\system32\drivers\vax347b.sys

Company is (3.47.0.0 built by: WinDDK).
File checksum is CB3400D696BEE266C38CAE330C2B4337.
Starts at system boot.
Registered as Vax347b.

%win_dir%\system32\drivers\vax347s.sys

Company is (3.47.0.0 built by: WinDDK).
File checksum is 113E4B318BBAA7483CA4E582A4D63F49.
Starts at system boot.
Registered as Vax347s.

%win_dir%\system32\vksaver.dll

Company is AudioVkontakte.Ru(2.2.1.0).
File checksum is 680DE0B451C7E25A928CE004EB2A0657.
Loads to all processes.