Qoologic.bj problem

Here is the result from the check.bat, copied from the logfile
$NtServicePackUninstall$
addins
AppPatch
assembly
Config
Connection Wizard
Cursors
Debug
Downloaded Installations
Downloaded Program Files
Driver Cache
EHome
Fonts
Help
Hewlett-Packard
ime
InCD
inf
Installer
java
kqof
Media
Microsoft.NET
msagent
msapps
mui
nview
Offline Web Pages
PCHealth
peernet
Prefetch
provisioning
RegisteredPackages
Registration
repair
Resources
security
ServicePackFiles
ShellNew
SoftwareDistribution
srchasst
system
system32
s?mbols
Tasks
Temp
twain_32
U2l6emxl
Web
WinSxS
?icrosoft
..
Adobe
Ahead
Blizzard Entertainment
Designer
Hewlett-Packard
HP
InstallShield
kqof
L&H
Microsoft Shared
MSSoap
Nova Development
ODBC
Services
SpeechEngines
System
Wise Installation Wizard
 
what do the c:\windows\s?mbols and c:\windows\?icrosoft folders look like ?
the question mark's will probably be some odd looking characters

The kqof folders can safely be deleted
c:\windows\kqof
C:\Program Files\Common Files\kqof
 
those folders look like:

Microsoft

and

Symbols

:)

If I try to zip them, though, it says it cannot be compressed because the Microsoft folder contains a character that cannot be read by compression programs (something like that) and it indicates: M

Same with Symbols, it indicates: y
 
Rightclick on those folders and choose rename, does its show the same names when you do that ?
exit dont rename them
what are the contents of each ?

Its not a new spyware im just investigating

Im asking others about this, it may take a few days or a week.
 
Stays the same. The Microsoft named folder contains the ICROSO~1 folder containing the ctxad files I uploaded to the other website.

The system folder contains
AVICAP.DLL
COMMDLG.DLL
LZEXPAND.DLL
MCISEQ
mmsystem.dll
MOUSE
OLECLI.DLL
setup
SOUND
SYSTEM
TIMER
VGA
winspool
AVIFILE.DLL
KEYBOARD
MCIWAVE
MMTASK.TSK
MSVIDEO.DLL
OLESVR.DLL
SHELL.DLL
stdole
TAPI.DLL
VER.DLL
WFWNET
 
As the problem appears to be resolved this topic will be archived.
If you need it re-opened please send me a pm and provide a link to the thread.

Glad we could help, thank you Lonny.
 
You must log in or register to reply here.
Back
Top