WinDetect
We keep Windows PCs clean

The result of free antivirus

Created by anti-spyware software WinDetect:

  • Version: 2.10.2

Possible suspicious files:


%program_files%\alcohol soft\alcohol 120\alcohol.exe

  • The file does not contain company name.
  • File checksum is 3DD27B4FEEE9B0C14046121E357FCA19.
  • The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
    • more info ...

%allusers_profile%\application data\datacardservice\dcservice.exe

  • The file does not contain company name.
  • File checksum is 3B604417EBAE4E1E66E6ABD8CC55FD76.
  • Registered as DCService.exe.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\friendmeter\friendmeter.dll

  • The file does not contain company name.
  • File checksum is 4C9DDDF6A53C43DD96817F5E748682E2.
  • Loaded to C:\PROGRA~1\Ticno\Multibar\multibar_main.exe.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\games\games.dll

  • The file does not contain company name.
  • File checksum is AAF3C6F972E4F84636EF6D880DF17A8C.
  • Loaded to C:\PROGRA~1\Ticno\Multibar\multibar_main.exe.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\inet_search\inet_search.dll

  • The file does not contain company name.
  • File checksum is 03FE63B134569A96CEA847E47266C870.
  • Loaded to C:\PROGRA~1\Ticno\Multibar\multibar_main.exe.
    • more info ...

%program_files%\jetaudio\jetflext.rus

  • Company is JetAudio(6, 0, 0, 9810).
  • File checksum is 37DED18ED9CBA5038F26CD6C4AAC128B.
  • The file may be invisible in Windows Explorer.
  • Loaded to %win_dir%\Explorer.EXE.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\weather\lang.ru.dll

  • The file does not contain company name.
  • File checksum is 3781D154A29C047E976D49DF0F4EA80E.
  • Loaded to %application_data%\Ticno\Multibar\plugins\weather\TicnoWeather.exe.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\local_search\local_search.dll

  • The file does not contain company name.
  • File checksum is FB003C4666F2031363D69AB80FE88349.
  • Loaded to C:\PROGRA~1\Ticno\Multibar\multibar_main.exe.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\weather\main.dll

  • The file does not contain company name.
  • File checksum is 04787BE838D9BE449C68FE8D28D13062.
  • Loaded to C:\PROGRA~1\Ticno\Multibar\multibar_main.exe.
    • more info ...

%program_files%\ticno\multibar\multibar.exe

  • The file has digital signature but it is not valid: Media Labs Limited.
  • The file does not contain company name.
  • File checksum is 98F172A5A7ADF96D4F1C7F23D50CD214.
  • Windows Explorer starts it automatically.
  • Registered as multibar.exe.
  • May download files from the Internet.
  • May connect to site http://install.ticno.com.
  • May connect to site http://install.ticno.com:8090.
  • May connect to site http://www.ticno.com.
    • more info ...

%program_files%\ticno\multibar\multibar_main.exe

  • The file has digital signature but it is not valid: Media Labs Limited.
  • The file does not contain company name.
  • File checksum is 2F553C4FCBA96931E0CD32288F29928D.
  • May download files from the Internet.
  • May connect to site http://chatvi.com.
  • May connect to site http://ticno.com.
  • May connect to site http://www.vkontakte.ru.
  • May connect to site http://www.facebook.com.
  • May connect to site http://www.yandex.ru.
  • May connect to site http://data.ticno.com.
  • May connect to site http://mail.google.com.
  • May connect to site http://www.google.com.
  • May connect to site http://habrahabr.ru.
  • May connect to site http://release.pivim.com.
  • Started by %program_files%\Ticno\Multibar\multibar.exe.
    • more info ...

%win_dir%\temp\nsg8.tmp\nsscm.dll

  • The file does not contain company name.
  • The file was created short time ago. Spywares very often re-creates new files after system login.
  • File checksum is 62EFA7B730EB0523A026EA4325403B77.
  • Loaded to %user_profile%\Мои документы\Downloads\removeanysetup (1).exe.
    • more info ...

%win_dir%\temp\nsa498.tmp\nsscm.dll

  • The file does not contain company name.
  • The file was created short time ago. Spywares very often re-creates new files after system login.
  • File checksum is 62EFA7B730EB0523A026EA4325403B77.
  • Loaded to %win_dir%\system32\verclsid.exe.
    • more info ...

%program_files%\yandex\punto switcher\punto.exe

  • Company is ООО Яндекс(3, 1, 1, 72).
  • File checksum is CF0CAAD499DF0C39CC8CD763BBD67E6F.
  • May download files from the Internet.
  • May connect to site http://download.yandex.ru.
  • May connect to site http://soft.export.yandex.ru.
    • more info ...

%win_dir%\system32\drivers\sptd.sys

  • The file does not contain company name.
  • The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
  • Starts at system boot.
  • Registered as sptd.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\weather\ticnoweather.exe

  • The file has digital signature but it is not valid: Media Labs Limited.
  • The file does not contain company name.
  • File checksum is A4AB5517EB5C169EDBE0F5F4C0E41C60.
  • Started by C:\PROGRA~1\Ticno\Multibar\multibar_main.exe.
    • more info ...

%allusers_profile%\application data\vksaver\vksaver3.dll

  • Company is AudioVkontakte.ru(3.1.0.3).
  • File checksum is 9DA3879B793ECB8B5B2B6FA1CDCA6F6D.
  • Loads to all processes.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\webmoney\webmoney.dll

  • The file does not contain company name.
  • File checksum is DF216973B650DFF8A66D683B7B80D823.
  • Loaded to C:\PROGRA~1\Ticno\Multibar\multibar_main.exe.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\wiki_search\wiki_search.dll

  • The file does not contain company name.
  • File checksum is 6FFC4ADDA4D6EC2AD3D8ADFD2FAE3C21.
  • Loaded to C:\PROGRA~1\Ticno\Multibar\multibar_main.exe.
    • more info ...

%user_profile%\application data\ticno\multibar\plugins\youtube_search\youtube_search.dll

  • The file does not contain company name.
  • File checksum is 9B0B76A53F4E340F63A816487C16B8B0.
  • Loaded to C:\PROGRA~1\Ticno\Multibar\multibar_main.exe.
    • more info ...