Shoebox?

While I was scaning a friend's computer with NOD32 version 1.852 (20040828 ), I noticed the following line repeating over and over again (with the last number changing).

C:\\Program Files\Common Files\Microsoft Shared\Shoebox\Standard.SBT › CHM › 12728

This repeated up to number 22187.

Windows explorer showed that the following files were listed within the sub-folder Shoebox:
Blank.sbc - 448KB
Merged.sbc - 8,536KB
Shoebox.cmd - 1KB
Standard.SBS - spyware supplement file - 101,356KB
STVU.ddl - 5.01.3330 - STV Module
WKSCOR.SBS - spyware supplement file - 1,447KB
WKSSICD.ico - 16x16 - Icon
Default.ico - 16x16 - Icon
REMOVAL.ico - 16x16 - Icon
Shoebox.dll - 5.01.3300
Standard.SBT - 19,487KB (This is the file that held all those numbers)
Thumbs.db - 10KB
WKSCOR.SBT - 300KB

After each number, NOD32 indicated that the "archive damaged, the file could not be extracted.

I am concerned because there was 9,459 lines of this stuff and because of the notation "spyware supplement file". I can not help but wonder if this is something bad.

Hi-zee13

 

These are Microsoft files, other than this, will have to wait for a Eset Mod to come along to advise further...

Hope this helps...

Cheers

 

Blackspear is right and to be more precise, shoebox is Microsoft Picture it! help files,

http://www.kbalertz.com/kb_870630.aspx

I had the same problem as your friend, as u can see here,

https://www.wilderssecurity.com/showthread.php?t=39218

Since i had long ago uninstalled Picture it! i just deleted that huge file.



snowbound

 

Sorry about not picking up on the previous thread. I ran a search on "Shoebox", but, I'm new and wasn't sure how to search. I probably should close this thread but will leave it open for a couble days and see if anyone else has something to contribute.

Thanks Snowbound and Blackspear

Hi-zee13

 

You know, I still do not understand why two of those files have the notation "spyware supplement file"? Why would MS put that notation on these two files?

Hi-zee13

 

No idea, however here is a link:

http://www.kephyr.com/filedb/index.php?viewtopic=Blank.sbc

and here (though not in English)

http://support.microsoft.com/?scid=kb;PT;279221&product=picINT

Cheers

 

Thanks Blackspear

When I went on Google and searched "STANDARD.SBS file", one of the results was the following link:

http://www.mcse.ms/message64588.html

which stated "The [MS] Works clipart is held in one great big file called .\common\MS shared\shoebox\standard.sbs"

So, it appears that these files in the sub-folder "Shoebox" are probable MS and maybe related to MS Works and/or Picture It. But, I still do not understand why the notation "Spyware supplement file"?

Hi-zee13

 

Nor do I

May have to ask in a Microsoft Forum

Cheers