While I was scaning a friend's computer with NOD32 version 1.852 (20040828 ), I noticed the following line repeating over and over again (with the last number changing). C:\\Program Files\Common Files\Microsoft Shared\Shoebox\Standard.SBT › CHM › 12728 This repeated up to number 22187. Windows explorer showed that the following files were listed within the sub-folder Shoebox: Blank.sbc - 448KB Merged.sbc - 8,536KB Shoebox.cmd - 1KB Standard.SBS - spyware supplement file - 101,356KB STVU.ddl - 5.01.3330 - STV Module WKSCOR.SBS - spyware supplement file - 1,447KB WKSSICD.ico - 16x16 - Icon Default.ico - 16x16 - Icon REMOVAL.ico - 16x16 - Icon Shoebox.dll - 5.01.3300 Standard.SBT - 19,487KB (This is the file that held all those numbers) Thumbs.db - 10KB WKSCOR.SBT - 300KB After each number, NOD32 indicated that the "archive damaged, the file could not be extracted. I am concerned because there was 9,459 lines of this stuff and because of the notation "spyware supplement file". I can not help but wonder if this is something bad. Hi-zee13
These are Microsoft files, other than this, will have to wait for a Eset Mod to come along to advise further... Hope this helps... Cheers
Blackspear is right and to be more precise, shoebox is Microsoft Picture it! help files, http://www.kbalertz.com/kb_870630.aspx I had the same problem as your friend, as u can see here, https://www.wilderssecurity.com/showthread.php?t=39218 Since i had long ago uninstalled Picture it! i just deleted that huge file. snowbound
Sorry about not picking up on the previous thread. I ran a search on "Shoebox", but, I'm new and wasn't sure how to search. I probably should close this thread but will leave it open for a couble days and see if anyone else has something to contribute. Thanks Snowbound and Blackspear Hi-zee13
You know, I still do not understand why two of those files have the notation "spyware supplement file"? Why would MS put that notation on these two files? Hi-zee13
No idea, however here is a link: http://www.kephyr.com/filedb/index.php?viewtopic=Blank.sbc and here (though not in English) http://support.microsoft.com/?scid=kb;PT;279221&product=picINT Cheers
Thanks Blackspear When I went on Google and searched "STANDARD.SBS file", one of the results was the following link: http://www.mcse.ms/message64588.html which stated "The [MS] Works clipart is held in one great big file called .\common\MS shared\shoebox\standard.sbs" So, it appears that these files in the sub-folder "Shoebox" are probable MS and maybe related to MS Works and/or Picture It. But, I still do not understand why the notation "Spyware supplement file"? Hi-zee13