Shoebox?

Discussion in 'NOD32 version 2 Forum' started by Hi-zee13, Aug 28, 2004.

Thread Status:
Not open for further replies.
  1. Hi-zee13

    Hi-zee13 Registered Member

    Joined:
    Aug 27, 2004
    Posts:
    7
    Location:
    West Virginia, USA
    While I was scaning a friend's computer with NOD32 version 1.852 (20040828 ), I noticed the following line repeating over and over again (with the last number changing).

    C:\\Program Files\Common Files\Microsoft Shared\Shoebox\Standard.SBT › CHM › 12728

    This repeated up to number 22187.

    Windows explorer showed that the following files were listed within the sub-folder Shoebox:
    Blank.sbc - 448KB
    Merged.sbc - 8,536KB
    Shoebox.cmd - 1KB
    Standard.SBS - spyware supplement file - 101,356KB
    STVU.ddl - 5.01.3330 - STV Module
    WKSCOR.SBS - spyware supplement file - 1,447KB
    WKSSICD.ico - 16x16 - Icon
    Default.ico - 16x16 - Icon
    REMOVAL.ico - 16x16 - Icon
    Shoebox.dll - 5.01.3300
    Standard.SBT - 19,487KB (This is the file that held all those numbers)
    Thumbs.db - 10KB
    WKSCOR.SBT - 300KB

    After each number, NOD32 indicated that the "archive damaged, the file could not be extracted.

    I am concerned because there was 9,459 lines of this stuff and because of the notation "spyware supplement file". I can not help but wonder if this is something bad.

    Hi-zee13
     
  2. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    These are Microsoft files, other than this, will have to wait for a Eset Mod to come along to advise further...

    Hope this helps...

    Cheers :D
     
  3. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
  4. Hi-zee13

    Hi-zee13 Registered Member

    Joined:
    Aug 27, 2004
    Posts:
    7
    Location:
    West Virginia, USA
    Sorry about not picking up on the previous thread. :oops: I ran a search on "Shoebox", but, I'm new and wasn't sure how to search. I probably should close this thread but will leave it open for a couble days and see if anyone else has something to contribute.

    Thanks Snowbound and Blackspear :)

    Hi-zee13
     
  5. Hi-zee13

    Hi-zee13 Registered Member

    Joined:
    Aug 27, 2004
    Posts:
    7
    Location:
    West Virginia, USA
    You know, I still do not understand why two of those files have the notation "spyware supplement file"? :doubt: Why would MS put that notation on these two files? o_O

    Hi-zee13
     
  6. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
  7. Hi-zee13

    Hi-zee13 Registered Member

    Joined:
    Aug 27, 2004
    Posts:
    7
    Location:
    West Virginia, USA
    Thanks Blackspear :)

    When I went on Google and searched "STANDARD.SBS file", one of the results was the following link:

    http://www.mcse.ms/message64588.html

    which stated "The [MS] Works clipart is held in one great big file called .\common\MS shared\shoebox\standard.sbs"

    So, it appears that these files in the sub-folder "Shoebox" are probable MS and maybe related to MS Works and/or Picture It. But, I still do not understand why the notation "Spyware supplement file"? o_O

    Hi-zee13
     
  8. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Nor do I ;)

    May have to ask in a Microsoft Forum :D

    Cheers :D
     
Thread Status:
Not open for further replies.