WinDetect
We keep Windows PCs clean

The result of free antivirus

Created by anti-spyware software WinDetect:

  • Version: 2.10.2

Possible suspicious files:


%user_profile%\local settings\temp\6.tmp


%win_dir%\system32\drivers\pxhelp20.sys

  • Company is Sonic Solutions(2.03.28a).
  • File checksum is 183EF96BCC2EC3D5294CB2C2C0ECBCD1.
  • Starts at system boot.
  • Registered as PxHelp20.
    • more info ...

%win_dir%\system32\drivers\sandbox.sys

  • The file has digital signature but it is not valid: Agnitum Ltd..
  • Company is Agnitum Ltd.(2.0.1245.11926 for WXP x86 built by: WinDDK).
  • File checksum is 9F5CA7B63E3A16B03E8596E6B782F498.
  • Runs at start up.
  • Registered as SandBox.
    • more info ...

%win_dir%\system32\drivers\sptd.sys

  • The file does not contain company name.
  • The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
  • Starts at system boot.
  • Registered as sptd.
    • more info ...

%win_dir%\system32\startup.cpl

  • The file does not contain company name.
  • File checksum is AAB8F1F8FCD718C5AB21885B6D2D15E1.
  • Loaded to %win_dir%\system32\rundll32.exe.
    • more info ...

%win_dir%\system32\drivers\tcpip.sys

  • Company is Microsoft Corporation(5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)).
  • File checksum is CBEEBEB899E31EF52B962CB31FC8CA5C.
  • Runs at start up.
  • Registered as Tcpip, Драйвер протокола TCP/IP.
    • more info ...

%win_dir%\apppatch\yplvqoi.exe

  • Company is Pricket(8.7.8.9).
  • File checksum is 0C81528CFDA4648109D26685F2EBE8B3.
  • Spoofs the system process.
  • Windows Explorer starts it automatically.
  • May bypass Windows Firewall.
  • Registered as userinit.
  • May compromise other applications.
  • Was not detected by anti-viruses.
    • more info ...