Netext folder

[tshad]

What is the C:\windows\netext folder used for in XP?

I am running filemon on my machine and I can see explorer.exe writing to it
constantly. Is this a problem and why is it doing it?

Thanks,

Tom.

 

[Rock]

What is the C:\windows\netext folder used for in XP?

I am running filemon on my machine and I can see explorer.exe writing to it
constantly. Is this a problem and why is it doing it?

Thanks,

Tom.

It's not a windows folder that I know of. A google search comes up with
some hits which suggest it's associated with internet monitoring software.

http://groups-beta.google.com/groups?q=netext&hl=en&lr=&sa=N&tab=wg

This link has some specific info:
http://groups-beta.google.com/group..._doneTitle=Back+to+Search&&d#5c29f72240f3c45b

 

[Guest]

It could also be related to Netscape. Suggest the following:
Ad-Aware SE Personal Edition - Download Free version and Run It
http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

 

[Rock]

It could also be related to Netscape. Suggest the following:
Ad-Aware SE Personal Edition - Download Free version and Run It!
http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

:

I'm using netscape 7.1 and don't have that folder.

 

[tshad]

I'm using netscape 7.1 and don't have that folder.

I also have Netscape and it is not running, but I am constantly seeing the
following from filemon which is monitoring what my system is doing and it is
constantly reading and writing to files in the NETEXT file.

What Filemon is giving me is:

************************************************************************
18030 3:52:13 PM explorer.exe:2340 QUERY INFORMATION
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Length: 989622
18031 3:52:13 PM explorer.exe:2340 WRITE
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Offset: 989622 Length: 77
18032 3:52:13 PM msimn.exe:3236 QUERY INFORMATION C:\Documents and
Settings\tscheiderich\Local Settings\Temporary Internet
Files\Content.IE5\index.dat SUCCESS Length: 1163264
18033 3:52:13 PM explorer.exe:2340 QUERY INFORMATION
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Length: 989699
18034 3:52:13 PM explorer.exe:2340 WRITE
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Offset: 989699 Length: 97659
18035 3:52:13 PM explorer.exe:2340 WRITE
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Offset: 0 Length: 150
*******************************************************************************

I am just concerned that this might be a virus running and if what you say
is true, it could be looking at everything I am doing.

Tom

 

[Rock]

I also have Netscape and it is not running, but I am constantly seeing the
following from filemon which is monitoring what my system is doing and it is
constantly reading and writing to files in the NETEXT file.

What Filemon is giving me is:

************************************************************************
18030 3:52:13 PM explorer.exe:2340 QUERY INFORMATION
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Length: 989622
18031 3:52:13 PM explorer.exe:2340 WRITE
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Offset: 989622 Length: 77
18032 3:52:13 PM msimn.exe:3236 QUERY INFORMATION C:\Documents and
Settings\tscheiderich\Local Settings\Temporary Internet
Files\Content.IE5\index.dat SUCCESS Length: 1163264
18033 3:52:13 PM explorer.exe:2340 QUERY INFORMATION
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Length: 989699
18034 3:52:13 PM explorer.exe:2340 WRITE
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Offset: 989699 Length: 97659
18035 3:52:13 PM explorer.exe:2340 WRITE
C:\WINDOWS\system32\netext\465774F9F703DC331D899F5768161563AE7FB80E.tpr
SUCCESS Offset: 0 Length: 150
*******************************************************************************

I am just concerned that this might be a virus running and if what you say
is true, it could be looking at everything I am doing.

Tom

Did you look at any of the links I gave you. It looks like it's
internet monitoring software.

 

[tshad]

Did you look at any of the links I gave you. It looks like it's internet
monitoring software.

I did - thanks.

I just wanted to make sure that it wasn't something else doing the same
thing the internet monitoring software does. I am dealing with a virus
problem at the moment where my machine is randomly calling out to external
addresses and I want to make sure that there is something monitoring my
actions that could be used against my system.

Thanks,

Tom.

 

[Rock]

I did - thanks.

I just wanted to make sure that it wasn't something else doing the same
thing the internet monitoring software does. I am dealing with a virus
problem at the moment where my machine is randomly calling out to external
addresses and I want to make sure that there is something monitoring my
actions that could be used against my system.

Thanks,

Tom.

So is that software you have installed - or part of the problem? I
assume you have done a thorough scan for malware with a combination of
programs and on line scans in safe mode.