I have no idea where to post FP's to Dr.Web or submit files, so I'll post it here. I'm performing a routine cureit scan, it has found 2 FP: EQSysSecure.xml EQSysSecure.xml.bak This are files of EQSecure HIPS.
He's using XP, so it must be C:\Documents and settings\All users and/or <user>\Application data\DoctorWeb\CureIt.log. or something like that? Be sure to have "Show hidden files and folders" on to do so. Cheers
vms@drweb.com zip it up and add the password 'virus' to the zip file. attach it with a little comment, to the above address.