<https://forums.malwarebytes.com/topic/64228-rootkit-or-am-i-paranoid/#comment-324031>
<http://schema.org/text>
"Here is that file:  2010-10-06 15:42:53 . 2010-10-06 15:42:53                0 ----a-w-  C:\\Qoobox\\Quarantine\\catchme.txt 2010-10-06 14:44:50 . 2010-10-06 14:44:50            3,050 ----a-w-  C:\\Qoobox\\Quarantine\\Registry_backups\\AddRemove-FreeGin_is1.reg.dat 2010-10-06 14:44:50 . 2010-10-06 14:44:50            1,722 ----a-w-  C:\\Qoobox\\Quarantine\\Registry_backups\\AddRemove-Adobe Illustrator 9.0.reg.dat 2010-10-06 14:44:50 . 2010-10-06 14:44:50            1,224 ----a-w-  C:\\Qoobox\\Quarantine\\Registry_backups\\AddRemove-100% Free Gin Toolbar.reg.dat 2010-10-06 14:44:05 . 2010-10-06 14:44:05              169 ----a-w-  C:\\Qoobox\\Quarantine\\Registry_backups\\HKLM-Run-WindowsTelemetry.reg.dat 2010-10-06 14:44:01 . 2010-10-06 14:44:01              169 ----a-w-  C:\\Qoobox\\Quarantine\\Registry_backups\\HKCU-Run-Search Protection.reg.dat 2010-10-06 14:44:00 . 2010-10-06 14:44:01              175 ----a-w-  C:\\Qoobox\\Quarantine\\Registry_backups\\HKCU-Run-updateMgr.reg.dat 2010-10-06 14:34:27 . 2004-09-13 18:15:24               53 ----a-w-  C:\\Qoobox\\Quarantine\\D\\Autorun.inf.vir 2010-10-06 14:34:04 . 2004-02-11 21:58:16           24,613 ----a-w-  C:\\Qoobox\\Quarantine\\C\\DOCUME~1\\Owner\\LOCALS~1\\Temp\\IadHide5.dll.vir 2010-10-06 14:18:57 . 2010-10-06 15:55:06           14,135 ----a-w-  C:\\Qoobox\\Quarantine\\Registry_backups\\tcpip.reg 2010-10-06 13:59:05 . 2010-10-06 15:38:35              153 ----a-w-  C:\\Qoobox\\Quarantine\\catchme.log 2010-09-28 21:28:01 . 2010-09-28 21:47:52            2,094 ----a-w-  C:\\Qoobox\\Quarantine\\C\\Documents and Settings\\All Users\\Application Data\\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\\x86\\DIFxInstallLog.txt.vir 2010-09-16 23:02:49 . 2010-09-16 23:02:49              898 ----a-w-  C:\\Qoobox\\Quarantine\\C\\Documents and Settings\\All Users\\Start Menu\\HP Image Zone .lnk.vir 2010-03-29 21:30:12 . 2010-04-06 23:07:13           19,968 ----a-w-  C:\\Qoobox\\Quarantine\\C\\WINDOWS\\system32\\Thumbs.db.vir 2009-06-03 14:32:24 . 2009-06-03 14:32:24            7,994 ----a-w-  C:\\Qoobox\\Quarantine\\C\\Documents and Settings\\All Users\\Application Data\\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\\x86\\gearaspiwdmx86.cat.vir 2009-05-18 18:48:52 . 2009-05-18 18:48:52            2,763 ----a-w-  C:\\Qoobox\\Quarantine\\C\\Documents and Settings\\All Users\\Application Data\\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\\x86\\GEARAspiWDM.inf.vir 2009-05-18 18:17:00 . 2009-05-18 18:17:00           26,600 ----a-w-  C:\\Qoobox\\Quarantine\\C\\Documents and Settings\\All Users\\Application Data\\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\\x86\\x86\\GEARAspiWDM.sys.vir 2009-02-04 18:56:14 . 2009-02-04 18:56:14           75,112 ----a-w-  C:\\Qoobox\\Quarantine\\C\\Documents and Settings\\All Users\\Application Data\\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\\x86\\DifXInstall32.exe.vir 2008-04-17 17:12:54 . 2008-04-17 17:12:54          107,368 ----a-w-  C:\\Qoobox\\Quarantine\\C\\Documents and Settings\\All Users\\Application Data\\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\\x86\\x86\\GEARAspi.dll.vir 2006-11-02 11:21:54 . 2006-11-02 11:21:54          319,456 ----a-w-  C:\\Qoobox\\Quarantine\\C\\Documents and Settings\\All Users\\Application Data\\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\\x86\\DIFxAPI.dll.vir 2005-10-30 21:29:40 . 2005-10-30 21:29:40          225,346 ----a-w-  C:\\Qoobox\\Quarantine\\C\\WINDOWS\\100%_Free_Gin_Toolbar_Uninstaller_8484.exe.vir 2005-03-23 16:52:22 . 2004-08-04 19:00:00          111,104 ----a-w-  C:\\Qoobox\\Quarantine\\C\\WINDOWS\\system32\\_000008_.tmp.dll.vir  "
<https://forums.malwarebytes.com/topic/64228-rootkit-or-am-i-paranoid/>