WinDetect
We keep Windows PCs clean

The result of free antivirus

Created by anti-spyware software WinDetect:

  • Version: 2.10.2

Possible suspicious files:


%win_dir%\system32\drivers\afpansi.sys

  • Company is Alfa Corporation(2003).
  • File checksum is 6725ED93135E6477E80EF3F72B79CEA9.
  • Starts at system boot.
  • Registered as AFPAnsi, Alfa File Protector Ansi.
    • more info ...

%user_profile%\local settings\application data\chromium\application\16.0.912.77\avcodec-53.dll

  • The file does not contain company name.
  • File checksum is 3EC01D65E760DFD02CF1F54B4C1B4DC3.
    • more info ...

%user_profile%\local settings\application data\chromium\application\16.0.912.77\avformat-53.dll

  • The file does not contain company name.
  • File checksum is 68DCA45C5B5FB9D41C21FBE55D2FECC1.
    • more info ...

%user_profile%\local settings\application data\chromium\application\16.0.912.77\avutil-51.dll

  • The file does not contain company name.
  • File checksum is 61BFCAC591A2094EF27D9C6EE425F22F.
    • more info ...

e:\games\crossfire\cross fire\crossfire.exe

  • The file does not contain company name.
  • File checksum is 08BFE4E50EEA5CF1CDA6E45D6F7EBDD2.
  • The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
  • Started by E:\GAMES\CrossFire\Cross Fire\HGWC.exe.
    • more info ...

e:\games\crossfire\cross fire\cshell.dll

  • The file does not contain company name.
  • File checksum is 8F55358A56A5534E15C39280F081F4FC.
  • The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
  • Loaded to E:\GAMES\CrossFire\Cross Fire\crossfire.exe.
    • more info ...

%user_profile%\application data\mozilla\firefox\profiles\bwyays0h.default\flashgot.exe

  • The file has digital signature but it is not valid: InformAction.
  • The file does not contain company name.
  • File checksum is A230820E7311BCE229A172B1740AA604.
  • Started by %program_files%\Cacheman\CachemanServ.exe.
    • more info ...

%program_files%\jetaudio\jetflext.rus

  • Company is JetAudio(6, 0, 0, 9810).
  • File checksum is 09D1F6AEEDCDA043BBA7BA9CB68F12F5.
  • The file may be invisible in Windows Explorer.
  • Loaded to %win_dir%\Explorer.EXE.
    • more info ...

%user_profile%\local settings\application data\mail.ru\gamecenter\libeay32.dll

  • The file does not contain company name.
  • File checksum is 7B7D08E1BFB98A121951700B1072EBB8.
    • more info ...

%user_profile%\local settings\application data\mail.ru\gamecenter\libssl32.dll

  • The file does not contain company name.
  • File checksum is C5130904C688FCCB8907FAB80FA5AFAC.
    • more info ...

%win_dir%\system32\drivers\nv_agp.sys

  • Company is NVIDIA Corporation(4.12.01.0278).
  • File checksum is DB36442C20793C53B4128EB85F9A3D32.
  • Starts at system boot.
  • Registered as nv_agp, NVIDIA nForce AGP Bus Filter.
    • more info ...

%win_dir%\system32\drivers\nvidesm.sys

  • Company is NVIDIA Corporation(5.10.2600.0307 built by: WinDDK).
  • File checksum is 857ACF58D21D6A7F2EAB84FB54B4EDA4.
  • Starts at system boot.
  • Registered as nvidesm.
    • more info ...

%user_profile%\local settings\application data\chromium\application\16.0.912.77\ppgooglenaclpluginchrome.dll

  • The file does not contain company name.
  • File checksum is 9FB3C7F07431C0FA35C3ABF475DC86A4.
    • more info ...

%user_profile%\local settings\application data\mail.ru\gamecenter\pxd.dll

  • The file does not contain company name.
  • File checksum is D8B46864D99DB7525FD1883EBB396504.
    • more info ...

%program_files%\shareman\shareman.exe

  • The file does not contain company name.
  • File checksum is 280630E5A61349E9C7A05BAAAC405CC8.
  • The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
  • May bypass Windows Firewall.
    • more info ...

%win_dir%\system32\drivers\sp_rsdrv2.sys

  • Company is Crawler.com(1.1.4.151).
  • File checksum is 7B426B8E809EDF081D771EF429345528.
  • Runs at start up.
  • Registered as sp_rsdrv2, Spyware Terminator 2012 Realtime Shield Driver.
    • more info ...

%user_profile%\local settings\temp\uninstall.exe

  • The file does not contain company name.
  • The file was created short time ago. Spywares very often re-creates new files after system login.
  • File checksum is 586BE0703A3A861CA20F81E1FE7C9F42.
  • Started by %program_files%\RusTV Player\Uninstall.exe.
    • more info ...

%program_files%\unlocker\unlocker.exe

  • The file does not contain company name.
  • File checksum is 51DFAF518ABE1B24AA409CEF12D7D0AB.
  • May connect to site http://ccollomb.free.fr.
  • May compromise other applications.
    • more info ...