WinDetect
We keep Windows PCs clean

The result of free antivirus

Created by anti-spyware software WinDetect:

  • Version: 2.10.0

Possible suspicious files:


%user_profile%\datos de programa\12.exe

  • The file does not contain company name.
  • File checksum is F6AC9CD27007897F1BC773F0AB1F17AA.
    • more info ...

%user_profile%\datos de programa\1e.exe

  • The file does not contain company name.
  • File checksum is F6AC9CD27007897F1BC773F0AB1F17AA.
  • Started by %user_profile%\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe.
    • more info ...

%user_profile%\datos de programa\11.exe

  • The file does not contain company name.
  • File checksum is F6AC9CD27007897F1BC773F0AB1F17AA.
  • Started by %win_dir%\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe.
    • more info ...

%user_profile%\bluebirds\bluebirds.exe

  • Company is LG Electronics(1, 0, 17, 9).
  • File checksum is EEC17187C9CE2FF35CC8294DC3CB39AC.
  • Windows Explorer starts it automatically.
  • Registered as bluebirds.
  • May download files from the Internet.
  • May connect to site http://www.lge.com.
  • May connect to site http://supermulti.lge.com.
    • more info ...

%program_files%\ivt corporation\bluesoleil\bluesoleilcs.exe

  • The file does not contain company name.
  • File checksum is DB516838D1B95574F886C622D661E285.
  • The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
  • May bypass Windows Firewall.
  • Registered as BlueSoleilCS.
    • more info ...

c:\recycler\s-1-5-21-0243556031-888888379-781863308-14699\brenasa.exe

  • Company is Changeici(Changeici).
  • File checksum is F61CF6E71D94B7D3423F8C58E630363D.
  • Spoofs the system process.
  • The file may be invisible in Windows Explorer.
  • Detected as W32/Injector.fam!tr by Fortinet AntiVirus.
  • Detected as DDoS.MP.2 by DrWeb AntiVirus.
    • more info ...

%win_dir%\system32\bs2res.dll

  • The file does not contain company name.
  • File checksum is 9EBCF338C04A7F5BC262B1C9AE7640D9.
    • more info ...

%win_dir%\system32\bslangindepres.dll

  • The file does not contain company name.
  • File checksum is 581C7F828CA6569D88477AC70B2DD9EC.
    • more info ...

%win_dir%\system32\bsmobilesdk.dll

  • The file does not contain company name.
  • File checksum is F02B4E5F912087B625C3EAB82DDE6B34.
    • more info ...

%win_dir%\system32\bsshell.dll

  • The file does not contain company name.
  • File checksum is 788E5DD64D8747F4DAF6854448B2BF05.
    • more info ...

d:\recycler\ec308663.exe

  • The file does not contain company name.
  • File checksum is 41B220079BDA2BF2871F7C2255E80339.
  • The file may be invisible in Windows Explorer.
  • Started by %user_profile%\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe.
  • Detected as W32/Bublik.ITT!tr by Fortinet AntiVirus.
  • Detected as BackDoor.IRC.NgrBot.42 by DrWeb AntiVirus.
    • more info ...

%user_profile%\datos de programa\crvuvw.scr


%user_profile%\datos de programa\hsvuvb.scr

  • Company is Changeici(Changeici).
  • File checksum is 78D81F6DB8C5F99DA8571096EC7E0F2B.
  • The file may be invisible in Windows Explorer.
    • more info ...

%program_files%\internet explorer\iexplore.exe

  • Company is Microsoft Corporation(7.00.6000.16640 (vista_gdr.080213-1606)).
  • File checksum is 2D0E5592AB5A46C27DAF7CCAFF4F5B59.
  • May get commands from the Internet on port 1475.
  • Established the Internet connection with 9e.53.78ae.static.theplanet.com on port World Wide Web HTTP(80).
    • more info ...

%user_profile%\usrsdmlo.exe

  • Company is vkced xijrb gpsx fdf(0.0.0.0).
  • File checksum is 0EDA69A0D355ABD5BDD217759F0B0867.
  • Windows Explorer starts it automatically.
  • Registered as 1.
  • The file may be invisible in Windows Explorer.
  • Detected as W32/Mudrop.GJ!tr by Fortinet AntiVirus.
  • Detected as Trojan.Packed.23059 by DrWeb AntiVirus.
    • more info ...

%win_dir%\temp\nsj39.tmp\nsscm.dll

  • The file does not contain company name.
  • The file was created short time ago. Spywares very often re-creates new files after system login.
  • File checksum is 62EFA7B730EB0523A026EA4325403B77.
  • Loaded to %program_files%\HeavenWard\RemoveAny\updates\s2jc..tmp.
    • more info ...

%win_dir%\temp\nsy32.tmp\nsscm.dll

  • The file does not contain company name.
  • The file was created short time ago. Spywares very often re-creates new files after system login.
  • File checksum is 62EFA7B730EB0523A026EA4325403B77.
  • Loaded to %user_profile%\Escritorio\removeanysetup.exe.
    • more info ...

%win_dir%\system32\drivers\sptd.sys

  • The file does not contain company name.
  • The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
  • Starts at system boot.
  • Registered as sptd.
    • more info ...

%win_dir%\system32\drivers\tcpip.sys

  • Company is Microsoft Corporation(5.1.2600.5512 (xpsp.080413-0852)).
  • File checksum is C2BDEA3B5E025FADB79FD3DEB23B8F53.
  • Runs at start up.
  • Registered as Tcpip, Controlador de protocolo TCP/IP.
    • more info ...

%program_files%\unlocker\unlocker.exe

  • The file does not contain company name.
  • File checksum is AEB7861BF49F5D0B1834E3571BCA1803.
  • May connect to site http://ccollomb.free.fr.
  • May compromise other applications.
    • more info ...

c:\recycler\s-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe

  • Company is Changeici(Changeici).
  • File checksum is 8203482174320ED348AB9C5536D9A323.
  • The file may be invisible in Windows Explorer.
  • Detected as W32/Injector.fam!tr by Fortinet AntiVirus.
  • Detected as DDoS.MP.2 by DrWeb AntiVirus.
    • more info ...