Created by anti-spyware software WinDetect:

• Version: 2.10.0

Possible suspicious files:

• %win_dir%\system32\drivers\atkacpi.sys
• %win_dir%\atk0100\atkosd.exe
• %win_dir%\atk0100\cmssc.dll
• %program_files%\kristanix\right click image converter\extrcic.dll
• %win_dir%\system32\drivers\sfhlp01.sys
• %program_files%\faststone image viewer\fsviewer.exe
• %win_dir%\atk0100\hcontrol.exe
• %win_dir%\apppatch\irqcxsc.exe
• %win_dir%\system32\drivers\prohlp02.sys
• %win_dir%\system32\drivers\sptd.sys
• %user_profile%\local settings\application data\yandex\toolbar\packages\{55cdd8c1-d309-4fd5-ada4-ba6c83fa6e74}\srs.dll
• %win_dir%\system32\srvany.exe

%win_dir%\system32\drivers\atkacpi.sys

• The file does not contain company name.
• File checksum is 1C0F480B7C6136DDB5FB909995AF014A.
• Registered as MTsensor, ATK0100 ACPI UTILITY.
more info ...

%win_dir%\atk0100\atkosd.exe

• The file does not contain company name.
• File checksum is C465C2B623BFD4C8B34E067BE121359E.
• Started by %win_dir%\ATK0100\HControl.exe.
more info ...

%win_dir%\atk0100\cmssc.dll

• The file does not contain company name.
• File checksum is E3E8DC9033D9C2AD2F30F23ADA3C4BE4.
• Loaded to %win_dir%\ATK0100\HControl.exe.
more info ...

%program_files%\kristanix\right click image converter\extrcic.dll

• The file does not contain company name.
• File checksum is DDEE94EF729102D435DCCC29116DC9DF.
• The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
• Shortcut menu.
• Loaded to %win_dir%\Explorer.exe.
more info ...

%win_dir%\system32\drivers\sfhlp01.sys

• The file does not contain company name.
• File checksum is 9F0FD096ED234FE9C4039D21FE4FE7B4.
• Starts at system boot.
• Registered as sfhlp01, StarForce Protection Helper Driver.
more info ...

%program_files%\faststone image viewer\fsviewer.exe

• The file does not contain company name.
• File checksum is 5C3D4F332356E25EA3C4EF5D6E969514.
• The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
more info ...

%win_dir%\atk0100\hcontrol.exe

• The file does not contain company name.
• File checksum is AB36F327753D9879E5D0E89DA76F29B3.
• Windows Explorer starts it automatically.
• Registered as HControl.
more info ...

%win_dir%\apppatch\irqcxsc.exe

• Company is Xtreeme(9.8.3.5).
• File checksum is D8B4FEB7C899DCFA6DDB343EAD6A9184.
• Spoofs the system process.
• Windows Explorer starts it automatically.
• Registered as userinit.
• May compromise other applications.
• Was not detected by anti-viruses.
more info ...

%win_dir%\system32\drivers\prohlp02.sys

• The file does not contain company name.
• File checksum is 2A9696F759B17AA66B1832D90335EC04.
• Starts at system boot.
• Registered as prohlp02, StarForce Protection Helper Driver v2.
more info ...

%win_dir%\system32\drivers\sptd.sys

• The file does not contain company name.
• The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
• Starts at system boot.
• Registered as sptd.
more info ...

%user_profile%\local settings\application data\yandex\toolbar\packages\{55cdd8c1-d309-4fd5-ada4-ba6c83fa6e74}\srs.dll

• The file does not contain company name.
• File checksum is 06CA45250A23035E95090D6345D3ECF6.
more info ...

%win_dir%\system32\srvany.exe

• The file does not contain company name.
• File checksum is 4635935FC972C582632BF45C26BFCB0E.
• Registered as KMService.
more info ...