Part of the 'Manual Removal of Win32.Agent.bb' page reads...
SB:S&D flags HKEY_CLASSES_ROOT\.qc as a trojan without regard to what the entry points to.
Some game programmers, specifically 3D modellers deal with .qc files for compiling their models. So they will often associate .qc with some form of text-file editor for convenience.
In my case, the Reg key points to... qc_auto_file
Which in turn leads to... HKEY_CLASSES_ROOT\qc_auto_file\shell\open\command
where the 'command' is "%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE" "%1"
In the overall picture, probably a rare false positive, and the only ill effect of letting S&D remove it, would be the disassociation of the file type.
Just thought someone should know.
SB:S&D flags HKEY_CLASSES_ROOT\.qc as a trojan without regard to what the entry points to.
Some game programmers, specifically 3D modellers deal with .qc files for compiling their models. So they will often associate .qc with some form of text-file editor for convenience.
In my case, the Reg key points to... qc_auto_file
Which in turn leads to... HKEY_CLASSES_ROOT\qc_auto_file\shell\open\command
where the 'command' is "%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE" "%1"
In the overall picture, probably a rare false positive, and the only ill effect of letting S&D remove it, would be the disassociation of the file type.
Just thought someone should know.
Last edited: