CONTENT.IE5 hidden?

[Menno Hershberger]

Norton found the Bloodhound.? virus in D:\Documents and Settings\Me\Local
Settings\Temporary Internet Files\Content.IE5\NKWNPHKD\viewthread[1].htm
Can't repair. Can't delete. In Windows Explorer when I get to the Temporary
Internet Files folder, there is no CONTENT.IE5 folder or any other folders.
A lot of files though, mostly cookies.
And yes, my settings are to show all files, protected operating system
files, known extensions, etc.
So I go to the command prompt and navigate as far as the Temporary Internet
Files folder (tempor~1) and then a "dir" shows nothing at all. No folders,
no files even. "dir /ah" shows a folder called content.mso. I changed to
that directory and it is empty.
So I ran Norton on the TIF folder again, and could see it scanning the
CONTENT.IE5 folder.
Why can't I see that folder?

 

[Ron Martell]

Norton found the Bloodhound.? virus in D:\Documents and Settings\Me\Local
Settings\Temporary Internet Files\Content.IE5\NKWNPHKD\viewthread[1].htm
Can't repair. Can't delete. In Windows Explorer when I get to the Temporary
Internet Files folder, there is no CONTENT.IE5 folder or any other folders.
A lot of files though, mostly cookies.
And yes, my settings are to show all files, protected operating system
files, known extensions, etc.
So I go to the command prompt and navigate as far as the Temporary Internet
Files folder (tempor~1) and then a "dir" shows nothing at all. No folders,
no files even. "dir /ah" shows a folder called content.mso. I changed to
that directory and it is empty.
So I ran Norton on the TIF folder again, and could see it scanning the
CONTENT.IE5 folder.
Why can't I see that folder?

Probably because it is redirected from another location by means of a
desktop.ini file.

Check the other user names under the Document and Settings folder,
especially the Default User one.

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."

 

[Menno Hershberger]

Norton found the Bloodhound.? virus in D:\Documents and
Settings\Me\Local Settings\Temporary Internet
Files\Content.IE5\NKWNPHKD\viewthread[1].htm Can't repair. Can't
delete. In Windows Explorer when I get to the Temporary Internet Files
folder, there is no CONTENT.IE5 folder or any other folders. A lot of
files though, mostly cookies. And yes, my settings are to show all
files, protected operating system files, known extensions, etc.
So I go to the command prompt and navigate as far as the Temporary
Internet Files folder (tempor~1) and then a "dir" shows nothing at
all. No folders, no files even. "dir /ah" shows a folder called
content.mso. I changed to that directory and it is empty.
So I ran Norton on the TIF folder again, and could see it scanning the
CONTENT.IE5 folder.
Why can't I see that folder?

Probably because it is redirected from another location by means of a
desktop.ini file.

Check the other user names under the Document and Settings folder,
especially the Default User one.

OK, I checked. There IS a CONTENT.IE5 under default user, with four
subdirectories, but there's nothing in any of them except a desktop.ini
and another file called "CodeSignPCA[1].crl" (in each one).
I also notice that there is NO desktop.ini in my personal TIF folder. I
ran another scan last night and it found nothing, so whatever it was must
have gone away. The original warning had popped up when I was browsing in
a spyware forum. Symantec describes the BLOODHOUND.* as "unknown virus".
I'm not going to worry about it, but it is still a mystery to me how
Norton can see that folder and I can't!
Thanks for the suggestion.

 

[Alex Nichol]

OK, I checked. There IS a CONTENT.IE5 under default user, with four
subdirectories, but there's nothing in any of them except a desktop.ini
and another file called "CodeSignPCA[1].crl" (in each one).
I also notice that there is NO desktop.ini in my personal TIF folder.

The handling of the current user's TIF folder by explorer is special.
While physically it contains a structure you can see from a Command
Prompt DIR /A ; or from another Admin level account, Explorer presents
it as a uniform level of files. There are actually

Desktop.ini
Content.IE5
which contains
index.dat
another desktop.ini
At least four - and possibly more - folders with cryptic names
that actually contain the files.

Also quite possibly other folders - such as
Content.MSO
for use of MS Office
FrontPageTempDir
And more cryptically named folders.

You will not see any of this by opening it in Explorer or looking at its
Properties - it will appear as a single level collection of files

 

[Menno Hershberger]

OK, I checked. There IS a CONTENT.IE5 under default user, with four
subdirectories, but there's nothing in any of them except a
desktop.ini and another file called "CodeSignPCA[1].crl" (in each
one). I also notice that there is NO desktop.ini in my personal TIF
folder.

The handling of the current user's TIF folder by explorer is special.
While physically it contains a structure you can see from a Command
Prompt DIR /A ; or from another Admin level account, Explorer presents
it as a uniform level of files. There are actually

Desktop.ini
Content.IE5
which contains
index.dat
another desktop.ini
At least four - and possibly more - folders with cryptic
names
that actually contain the files.

Also quite possibly other folders - such as
Content.MSO
for use of MS Office
FrontPageTempDir
And more cryptically named folders.

You will not see any of this by opening it in Explorer or looking at
its Properties - it will appear as a single level collection of files

Thanks for explaining that to me. I still don't understand the "why"
of it, but I guess Bill must have had his reasons... I created
another user, and from that user's account, my TIF folder looks as it
should. The file that Norton flagged is gone.