Re: OLKCD or OLKB8 subdirectories of Temporary Internet Files

Thanks. I moved all my files out and put them elsewhere and did the same to
a co-worker who apparently wanted to get at the content. I must be getting
way too suspicious these days, huh?

"N. Miller" wrote:

> On Fri, 1 Jul 2005 05:15:02 -0700, Lambi000 wrote:
>
> > At my company many of us have a hidden subdirectory named one of the above.
> > We cannot access the files via Windows Explorer, but can see them when we get
> > an attachment via email. It seems to be the default for saving attachments.
>
> Only one such file? Interesting. In my TIF I have a subdirectory called,
> "Content.IE5". It contains four randomly named folders, using an eight
> character alpha/numeric string:
>
> E:\Temporary Internet Files\Content.IE5\698XENU9
> E:\Temporary Internet Files\Content.IE5\8F8NWX2J
> E:\Temporary Internet Files\Content.IE5\AG49BBAX
> E:\Temporary Internet Files\Content.IE5\EU36PP6C
>
> Actually, I saw more on one of my computers; but just deleted them and
> rebooted. First boot of Windows after deletion and there are only four
> folders in TIF\content.ie5.
>
> > I have found a way to get there by doing a search on the drive and using the
> > shortcut to get to the directory. I have deleted those files, all of which
> > came through my email and were accidentally saved to that directory.
>
> I can't navigate to E:\Temporary Internet Files\Content.IE5\ in the view
> pane, but I can see it in the folders pane, and view the contents when I
> select one of the folders.
>
> > But I'm suspicious. What is it?
>
> MS Internet Explorer cache.
>
> > Why is it in temporary internet files?
>
> They are temporary files.
>
> > Why can't I see it through Windows Explorer?
>
> One of the MVPs probably has the gory details, but it is something about
> the way that the Windows file system works.
>
> > Why, when I do a search on the Internet, I can find other
> > references to that subdirectory?
>
> "Can find", or "can't find"? It is a subject which comes up regularly in
> the GRC newsgroups (news.grc.com).
>
> > Is it something created by maliciousware?
>
> The folders are created by Windows. The content may harbor malicious items,
> but those should be cleared by AV programs. They will be cleared if you
> boot to DOS mode and delete the folders. Windows will just create new
> folders the next time that you boot normally.
>
> --
> Norman
> ~Win dain a lotica, En vai tu ri, Si lo ta
> ~Fin dein a loluca, En dragu a sei lain
> ~Vi fa-ru les shutai am, En riga-lint
>
.