Hi:

Sysinternals Rootkit Revealer has identified the following file that I
cannot find otherwise to delete. If I can't find it how can I ever delete
it?

I have settings to show Hidden Files and Folders and also unticked Hide
Protected Operating System Files. Also have gone into Safe Mode to try and
find the file.

The file is shown as located as follows by referenced application:

C:\Documents and Settings\name\Local Settings\Temporary Internet
Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little Rock,
AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from Windows API.

Again is there any way that I can delete this file?

Thanks

You can delete almost any file in SAFE MODE. To go into SAFE MODE, you will
need to reboot the system and at the same time at certain point in the process
you will need to press F8 function key.

I suggest do a search on SAFE BOOT and try it. This process does not change
anything in your system.

hth


ColTom2 wrote:

> Hi:
>
> Sysinternals Rootkit Revealer has identified the following file that I
> cannot find otherwise to delete. If I can't find it how can I ever delete
> it?
>
> I have settings to show Hidden Files and Folders and also unticked Hide
> Protected Operating System Files. Also have gone into Safe Mode to try and
> find the file.
>
> The file is shown as located as follows by referenced application:
>
> C:\Documents and Settings\name\Local Settings\Temporary Internet
> Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little Rock,
> AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from Windows API.
>
> Again is there any way that I can delete this file?
>
> Thanks

ColTom2 wrote:
> Sysinternals Rootkit Revealer has identified the following file
> that I cannot find otherwise to delete. If I can't find it how can
> I ever delete it?
>
> I have settings to show Hidden Files and Folders and also unticked
> Hide Protected Operating System Files. Also have gone into Safe
> Mode to try and find the file.
>
> The file is shown as located as follows by referenced application:
>
> C:\Documents and Settings\name\Local Settings\Temporary Internet
> Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little
> Rock, AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from
> Windows API.
>
> Again is there any way that I can delete this file?

Safe Mode...
Google "Unlocker"...
Etc...

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

"ColTom2" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi:
>
> Sysinternals Rootkit Revealer has identified the following file that I
> cannot find otherwise to delete. If I can't find it how can I ever delete
> it?
>
> I have settings to show Hidden Files and Folders and also unticked Hide
> Protected Operating System Files. Also have gone into Safe Mode to try and
> find the file.
>
> The file is shown as located as follows by referenced application:
>
> C:\Documents and Settings\name\Local Settings\Temporary Internet
> Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little Rock,
> AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from Windows API.
>
> Again is there any way that I can delete this file?
>
> Thanks

First off, make sure you don't have Internet Explorer running.

The file you're trying to delete is in a folder that will not be easily located
when logged in with your user account. If you log in with a different account
that is a Computer Administrator, you should be able to locate the Content.IE5
folder for your account and delete its contents.

To delete the contents of your Content.IE5 folder while logged on with your user
account, do the following;

Open this folder in Windows Explorer, substituting the name of your user account
in the appropriate location.

C:\Documents and Settings\name\Local Settings\Temporary Internet Files

Click in the Address bar at the top of the window so the folder name is
highlighted.
Hit the right arrow key on your keyboard.
The blinking cursor should now be positioned after Files.
Enter the following,

\Content.IE5

Hit the Enter key.
The folder that opens should contain a number of folders with 8 character
alphanumeric names.
You can delete these folders. Hold down the Shift key while deleting so they are
not sent to the Recycle bin.

Run the Rootkit Revealer to see if the file in question has been deleted.

Here's a program that will clean up your Internet Explorer files including the
IE5 folder automatically.

CCleaner
http://www.ccleaner.com/

Good luck

Nepatsfan

I have done all that all of you have suggested and in Safemode. Nothing
appears in the Temporary Internet Files folder. Content IE5 etc does not
appear either in or out of Safemode.

However, both Rootkit Revealer and Disk View reveal this file in that
location. But again, other than these two applications I cannot find it.

I have had and used CCleaner for a long time.

Other suggestions?


"Nepatsfan" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
"ColTom2" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi:
>
> Sysinternals Rootkit Revealer has identified the following file that I
> cannot find otherwise to delete. If I can't find it how can I ever delete
> it?
>
> I have settings to show Hidden Files and Folders and also unticked Hide
> Protected Operating System Files. Also have gone into Safe Mode to try and
> find the file.
>
> The file is shown as located as follows by referenced application:
>
> C:\Documents and Settings\name\Local Settings\Temporary Internet
> Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little Rock,
> AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from Windows API.
>
> Again is there any way that I can delete this file?
>
> Thanks

First off, make sure you don't have Internet Explorer running.

The file you're trying to delete is in a folder that will not be easily
located
when logged in with your user account. If you log in with a different
account
that is a Computer Administrator, you should be able to locate the
Content.IE5
folder for your account and delete its contents.

To delete the contents of your Content.IE5 folder while logged on with your
user
account, do the following;

Open this folder in Windows Explorer, substituting the name of your user
account
in the appropriate location.

C:\Documents and Settings\name\Local Settings\Temporary Internet Files

Click in the Address bar at the top of the window so the folder name is
highlighted.
Hit the right arrow key on your keyboard.
The blinking cursor should now be positioned after Files.
Enter the following,

\Content.IE5

Hit the Enter key.
The folder that opens should contain a number of folders with 8 character
alphanumeric names.
You can delete these folders. Hold down the Shift key while deleting so they
are
not sent to the Recycle bin.

Run the Rootkit Revealer to see if the file in question has been deleted.

Here's a program that will clean up your Internet Explorer files including
the
IE5 folder automatically.

CCleaner
http://www.ccleaner.com/

Good luck

Nepatsfan

"ColTom2" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I have done all that all of you have suggested and in Safemode. Nothing
> appears in the Temporary Internet Files folder. Content IE5 etc does not
> appear either in or out of Safemode.
>
> However, both Rootkit Revealer and Disk View reveal this file in that
> location. But again, other than these two applications I cannot find it.
>
> I have had and used CCleaner for a long time.
>
> Other suggestions?
>
>
> "Nepatsfan" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> "ColTom2" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
>> Hi:
>>
>> Sysinternals Rootkit Revealer has identified the following file that I
>> cannot find otherwise to delete. If I can't find it how can I ever delete
>> it?
>>
>> I have settings to show Hidden Files and Folders and also unticked Hide
>> Protected Operating System Files. Also have gone into Safe Mode to try
>> and
>> find the file.
>>
>> The file is shown as located as follows by referenced application:
>>
>> C:\Documents and Settings\name\Local Settings\Temporary Internet
>> Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little Rock,
>> AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from Windows API.
>>
>> Again is there any way that I can delete this file?
>>
>> Thanks
>
> First off, make sure you don't have Internet Explorer running.
>
> The file you're trying to delete is in a folder that will not be easily
> located
> when logged in with your user account. If you log in with a different
> account
> that is a Computer Administrator, you should be able to locate the
> Content.IE5
> folder for your account and delete its contents.
>
> To delete the contents of your Content.IE5 folder while logged on with
> your
> user
> account, do the following;
>
> Open this folder in Windows Explorer, substituting the name of your user
> account
> in the appropriate location.
>
> C:\Documents and Settings\name\Local Settings\Temporary Internet Files
>
> Click in the Address bar at the top of the window so the folder name is
> highlighted.
> Hit the right arrow key on your keyboard.
> The blinking cursor should now be positioned after Files.
> Enter the following,
>
> \Content.IE5
>
> Hit the Enter key.
> The folder that opens should contain a number of folders with 8 character
> alphanumeric names.
> You can delete these folders. Hold down the Shift key while deleting so
> they
> are
> not sent to the Recycle bin.
>
> Run the Rootkit Revealer to see if the file in question has been deleted.
>
> Here's a program that will clean up your Internet Explorer files
> including
> the
> IE5 folder automatically.
>
> CCleaner
> http://www.ccleaner.com/
>
> Good luck
>
> Nepatsfan
>
>
>
>
Perhaps it is super hidden (i. e. both a hidden file and a system file).
You may need to examine the permissions on the folder which is alleged to
hold this file.
If, for example, the only NTAuthority\System has access to the folder, you
must first give yourself permission to read the folder.
Then, you would need to give yourself permission to delete the file.
Jim

I finally found the file, but could not delete it as it was in Protected
Operating Systems Temporary Internet Files\Content.IE5 folder. So I dragged
it to the desktop and now have it there, but have found NO way now to delete
it from there. Tried SafeMode and that does not work in deleting it either.

Anyone know how I now can remove this file from my desktop?


"ColTom2" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
Hi:

Sysinternals Rootkit Revealer has identified the following file that I
cannot find otherwise to delete. If I can't find it how can I ever delete
it?

I have settings to show Hidden Files and Folders and also unticked Hide
Protected Operating System Files. Also have gone into Safe Mode to try and
find the file.

The file is shown as located as follows by referenced application:

C:\Documents and Settings\name\Local Settings\Temporary Internet
Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little Rock,
AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from Windows API.

Again is there any way that I can delete this file?

Thanks

How about trying to drag it into the recycle bin?

"ColTom2" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>
> I finally found the file, but could not delete it as it was in Protected
> Operating Systems Temporary Internet Files\Content.IE5 folder. So I
> dragged
> it to the desktop and now have it there, but have found NO way now to
> delete
> it from there. Tried SafeMode and that does not work in deleting it
> either.
>
> Anyone know how I now can remove this file from my desktop?
>
>
> "ColTom2" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
> Hi:
>
> Sysinternals Rootkit Revealer has identified the following file that I
> cannot find otherwise to delete. If I can't find it how can I ever delete
> it?
>
> I have settings to show Hidden Files and Folders and also unticked Hide
> Protected Operating System Files. Also have gone into Safe Mode to try and
> find the file.
>
> The file is shown as located as follows by referenced application:
>
> C:\Documents and Settings\name\Local Settings\Temporary Internet
> Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little Rock,
> AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from Windows API.
>
> Again is there any way that I can delete this file?
>
> Thanks
>
>
>

I did....but would not delete and always saying it cannot find the specified
file.


"Richard" <(E-Mail Removed)> wrote in message
news:48341cba$0$15175$(E-Mail Removed)...
How about trying to drag it into the recycle bin?

"ColTom2" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>
> I finally found the file, but could not delete it as it was in Protected
> Operating Systems Temporary Internet Files\Content.IE5 folder. So I
> dragged
> it to the desktop and now have it there, but have found NO way now to
> delete
> it from there. Tried SafeMode and that does not work in deleting it
> either.
>
> Anyone know how I now can remove this file from my desktop?
>
>
> "ColTom2" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
> Hi:
>
> Sysinternals Rootkit Revealer has identified the following file that I
> cannot find otherwise to delete. If I can't find it how can I ever delete
> it?
>
> I have settings to show Hidden Files and Folders and also unticked Hide
> Protected Operating System Files. Also have gone into Safe Mode to try and
> find the file.
>
> The file is shown as located as follows by referenced application:
>
> C:\Documents and Settings\name\Local Settings\Temporary Internet
> Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little Rock,
> AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from Windows API.
>
> Again is there any way that I can delete this file?
>
> Thanks
>
>
>

I had a file like that. What I did was bury it deep in some hidden temp
folder so I wouldn't have to look at it. I forget where.

"ColTom2" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I did....but would not delete and always saying it cannot find the
>specified
> file.
>
>
> "Richard" <(E-Mail Removed)> wrote in message
> news:48341cba$0$15175$(E-Mail Removed)...
> How about trying to drag it into the recycle bin?
>
> "ColTom2" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>>
>> I finally found the file, but could not delete it as it was in Protected
>> Operating Systems Temporary Internet Files\Content.IE5 folder. So I
>> dragged
>> it to the desktop and now have it there, but have found NO way now to
>> delete
>> it from there. Tried SafeMode and that does not work in deleting it
>> either.
>>
>> Anyone know how I now can remove this file from my desktop?
>>
>>
>> "ColTom2" <(E-Mail Removed)> wrote in message
>> news:%(E-Mail Removed)...
>> Hi:
>>
>> Sysinternals Rootkit Revealer has identified the following file that I
>> cannot find otherwise to delete. If I can't find it how can I ever delete
>> it?
>>
>> I have settings to show Hidden Files and Folders and also unticked Hide
>> Protected Operating System Files. Also have gone into Safe Mode to try
>> and
>> find the file.
>>
>> The file is shown as located as follows by referenced application:
>>
>> C:\Documents and Settings\name\Local Settings\Temporary Internet
>> Files\Content IE5\3U7B4XQ4\Tour of the Clinton Library....Little Rock,
>> AR....Zone Identifier 12/24/2004 Size 26 bytes Hidden from Windows API.
>>
>> Again is there any way that I can delete this file?
>>
>> Thanks
>>
>>
>>
>
>
>