"QualityCodec" undetected

You guessed what and where, and I did this one 85-90% deliberate, to see what happens.

But QualityCodec was not removed, not with Antivir, and not detected with Spybot S & D. Removal was pretty simple from Safe mode and cleaning from registry startup items.

Runalizer had "Delete" button locked and I had to do "Change" of startup item to an empty string. But it was not sufficient, for safer removal I had to go to Regedit and do a "search" for everything starting from C:\program Files\QualityCodec directory.

The reason I'm writing is to send these files so Spybot S & D could detect them.

I'm glad if I was able to contribute to the Cause. :laugh:

Greetz,
Marvin

P.S: Pls find the QualityCodec.zip in attachment. Happy DESTROYING!

Sorry, I did this the wrong way, but it is the 1st time.

I'm sending to detections(at)safer-networking.org

Regards,
Marvin

Me again, correction, I'll have to post here. Yahoo is blocking these and so is probably my organization's mail gateway.

Thank you for consideration.

Greetz,
Marvin

Hello Marvin Barley. :)

I saved and then removed the attachment, thank you. My anti-virus program immediately detected the infected file.

Please do not attach infected files here where a member could mistakenly click on it, even if your mail client is having difficulty in sending to detections.

By the way the address is: detections(AT)spybot.info Replace AT with @

Quote:

---

my organization's mail gateway

---

Is this a networked company computer?

Cheers.


Infected Files. How To Submit. Please do not attach them here.
http://forums.spybot.info/showthread.php?t=1699

Thank you for reply and instructions.

Both Yahoo and my Faculty server have AV checking.

I wonder if it is OK to crypt zip file with password and then send you .zip and the password?

I saw Avira has virus upload engine. I thought something like that would be simply and nice IMHO.

Please what to do in the future?

Antivir did not detect this QualityCodec.exe as a virus, and it has downloaded lots of spyware so I thought of you.

Thnx,
Marvin

Hi there.

If it is correct that you tried to send to:

Quote:

---

detections(at)safer-networking.org

---

Then you need to change that to .info :)

I did send the file to detections and thanks again.

Quote:

---

Originally Posted by tashi

Hi there.

If it is correct that you tried to send to:


Then you need to change that to .info :)

I did send the file to detections and thanks again.

---

OK, I've changed that.

Please forgive me one more question:

- here is too dangerous to post, as I understood
- mail gateways may stop .zip as malware

How then to send? Is it OK to encrypt and send .zip + pass?

Thank you.

Marvin

Quote:

---

How then to send? Is it OK to encrypt and send .zip + pass?

---

Yes, as long as you give them the password. :D: