Created by anti-spyware software WinDetect:

• Version: 2.10.0

Possible suspicious files:

• %program_files%\yandex\punto switcher\punto.exe
• %win_dir%\system32\drivers\sptd.sys
• %win_dir%\system32\drivers\tcpip.sys
• %win_dir%\system32\drivers\uti3ndu1.sys
• %allusers_profile%\application data\vksaver\vksaver.exe
• %allusers_profile%\application data\vksaver\vksaver3.dll

%program_files%\yandex\punto switcher\punto.exe

• Company is ООО Яндекс(3, 1, 0, 59).
• File checksum is 0E86C2E5724F4221E8F2BEC6B5FE2B8D.
• May download files from the Internet.
• May connect to site http://download.yandex.ru.
• May connect to site http://soft.export.yandex.ru.
more info ...

%win_dir%\system32\drivers\sptd.sys

• The file does not contain company name.
• The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
• Starts at system boot.
• Registered as sptd.
more info ...

%win_dir%\system32\drivers\tcpip.sys

• Company is Microsoft Corporation(5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)).
• File checksum is 6A104BA98D99D53AB0C91825CE659FC6.
• Runs at start up.
• Registered as Tcpip, Драйвер протокола TCP/IP.
more info ...

%win_dir%\system32\drivers\uti3ndu1.sys

• The file does not contain company name.
• File checksum is 524D8D450622DB4A7875B111C299A76B.
• Registered as uti3ndu1, AVZ Kernel Driver.
• May manipulate kernel objects.
• Detected as W32/Bagle.ZNG!worm by Fortinet AntiVirus.
• Detected as Trojan.Agent-66914 by Clam AntiVirus.
more info ...

%allusers_profile%\application data\vksaver\vksaver.exe

• Company is AudioVkontakte.ru(3.1.110425.1262).
• File checksum is 5544D3A4B0498ABADE8719F621C8BF2D.
• Established the Internet connection with domain7.ru on port World Wide Web HTTP(80).
• Windows Explorer starts it automatically.
• Registered as VKSaver.
more info ...

%allusers_profile%\application data\vksaver\vksaver3.dll

• Company is AudioVkontakte.ru(3.1.0.3).
• File checksum is 9DA3879B793ECB8B5B2B6FA1CDCA6F6D.
• Loads to all processes.
more info ...