how to fix this problem HELP

  • Thread starter Thread starter Jon Phipps
  • Start date Start date
J

Jon Phipps

This has only started happening recently and I dont know what I installed
that may have made it so
SYSTEM:
Dell inspiron 6000 laptop
Win XP Pro
Service Pack 2
all other Msoft updates


Problem
Content.IE5 folder has disappeared
files are *.bin (eg CA2N49YF.BIN)
in the Temporary Internet Files Folderthey show as
<cachedsoap id="2013859455" />

Does any one know how to undo this. The problem only exists on my account
and when I am logged in. When logged into the administrators account the
problem does not happen and the cache folders in my account show normaly.

Has anyone else run into this and is there a fix for it.

Regards and Thanks
Jon
 
Looks like you have a trojan.

Update your antivirus and anti-spyware applications and run full system
scans.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
sorry brand new install... the only software I have installed is stuff I
have used for years and the updates from Microsoft.

Jon
 
and whatever got loaded onto your machine because you don't have a firewall
running or antivirus software installed.

Get some now!

[[Since its release, a number of severe security vulnerabilities have
been discovered in Windows XP. These vulnerabilities are used by
worms and viruses, making it impossible to connect an unsecured,
unpatched system to the Internet for any amount of time without
risking exposure and infection. Users of new computers are faced
with the dilemma of being infected by these worms before being able
to download the necessary patches.

This guide will show how to install Windows XP securely, without
being infected by these worms during the patching process.]]

Windows XP: Surviving the First Day
http://isc.sans.org/presentations/xpsurvivalguide.pdf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
You assume that I dont have scanners and firewall installed.....
Norton AV Corp
Microsoft Spyware scanner
Zone Alarm Pro

Now do you have any real suggestions ??

Jon
 
Thanks for the url but, as far as the files and reg entries go my system
shows none of them. I do have show hidden files and folders checked so I can
see all of the files on my system and I am logged in on an admin level
account. This problem is getting more and more frustrating everyday. I may
have neglected to mention that in the account's documents and settings tree
is a folder called CryptNetUrlCache, which contains two other folders
Content and MetaData both of these have really odd file names in them such
as "303572DF538EDD8B1D606185F1D559B8" with system, archive attibutes. I
cannot open these to see what is in them.

Jon
 
[[The CryptoAPI certificate no longer uses the Microsoft Internet Explorer
cache (Wininet.dll). Instead, it maintains a separate disk cache at the
following location:
C:\Documents and Settings\user name\Application
Data\Microsoft\CryptnetUrlCache ]]
From...
Summary of changes to the CryptoAPI certificate chain validation logic in
Windows XP Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;en-us;887196

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
well now I know the why Thanks to all the people who responded
.... I just wish I could get back to the old style of cache... it was far
more usefull than the new format. Role back to sp1 is out of the question

Jon
 
Paste the following into Start | Run and click OK...

%homepath%\Local Settings\Temporary Internet Files\Content.IE5

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Thanks, that atleast gives me access to it, however for the desktop shortcut
you need to use c:\documents and settings\useraccountname\.... rather than
%homepath%
Thanks to all who have helped
Jon
 
The original question as posted by Jon was:
"Content.IE5 folder has disappeared ...The problem only exists on my
account and when I am logged in. When logged into the administrators
account the problem does not happen and the cache folders in my account
show normaly."

There may or may not have been a trojan, as suggested, but the simpler
answer is that on a multiuser system anyone can access anyone else's
Content.IE5 folder, BUT NOT THEIR OWN.

I've posted a fuller discussion of this at
http://groups.google.com/group/micr...t&q=Content.IE5&rnum=1&hl=en#eb9a08399c825a2b,
but I'm not sure how to create a live link here. It's "Content.IE5",
posted by kaream Dec 10, 12:18 am. I hasten to say that I'm not an
experienced user, and my discussion there simply reflects my own
experience. I welcome corrections.
 
Content.IE5 is hidden and you have to know where to look to find your own
Content.IE5 folder.

Start | Run | Paste this in the box and click OK...

%homepath%\Local Settings\Temporary Internet Files\Content.IE5

Or...
Start | Run | Type: cleanmgr | OK | Highlight Temporary Internet Files |
View Files button

Or...

Start | Run | Type: %tmp% | Click OK |
You will probably have to click the Folders button on the Tool Bar.
Click: [+] Temporary Internet Files
Click: [+] Content.IE5
Click: Random named folders

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
First let me say that I am logged on to my laptop on an admin level account.
The issues was that in my %username% tree I have the TIF folder but under
that there is nothing except a series of files with names like "<cachedsoap
id="1214294699" />" however in the directory all that shows is ">". I have
scanned the system with Microsoft Antispyware-Beta, spybot search and
destroy, adaware se, and used Symatec client security for virus scanning and
nothing has been found, I will there for assume that the system is clean. I
can see the content.ie5 folder on all the other accounts except mine.
Durring the install, I created my account and did the rest of the installs
from there, from one other group I am on I found that this is expected
behaviour(the odd folder names) under WinXP Pro sp2, I can get to the
original cache by entering in the run command %username%\local
settings\Temporary Internet Files\Content.IE5. I have read your post, thank
you for your input, however it is not the same as the situation that I
experience.


Jon
 
Back
Top