mitchell2013 Posted January 22, 2013 Share Posted January 22, 2013 A client brought in a Toshiba laptop a few days ago. It has Windows Vista SP2, 3GB ram and a 225GB hard drive. He was getting browser redirects and hard drive almost full errors. The hard drive actually showed 300MB of space remaining. I tried running Malwarebytes, McAfee Viruscan, Windows Defender, Spybot and a few rootkit killers. Everything got hung on a folder at the following address: C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 . . . After a couple of hours, I was able to get into the folders that have been created in the Content.IE5 folder. My best guess is that there are over a million files in the 4 sub-folders under Content.IE5. I have tried every method that I have learned over the last 25 years to delete those temporary internet files, but was unsuccessful. My best guess is that some trojan was downloaded onto this machine, which in turn either disabled Windows from automatically deleting these internet files or actually started randomly downloading files from the internet and putting them into these folders. The only app that I can run that actually can see the files in these folders is Ccleaner. I set up a custom files and folders option and it has been scanning this folder for 3 days and has yet to finish it. However, it is scanning about one file per second, so if you calculate that out it would take approximately 200 hours or 8 days to scan the number of files in the folder. I've searched the web and found one other person who ran into this problem but he only had 7000 files in his content.IE5 and he said it took Ccleaner a couple of hours to find them and allow him to delete them. I know that Microsoft has used that same folder to hold temporary internet files, and that it hides the files, but I have unhidden all files and changed settings to show all system folders. I can go in and look at the files, but it won't let me delete them. I hate to think that I am going to have to wait 8 days for Ccleaner to find all of these files. BTW, I was able to get Ad-Aware to run and delete several trojans, but I still think there are some on here. Any suggestions? Link to comment Share on other sites More sharing options...
Winapp2.ini Posted January 22, 2013 Share Posted January 22, 2013 Can you just SHIFT-DELETE the folder? Windows should re-create it. Barring that, try Unlocker Assistant? winapp2.ini additions thread winapp2.ini github Link to comment Share on other sites More sharing options...
Moderators hazelnut Posted January 22, 2013 Moderators Share Posted January 22, 2013 As you say the machine is infected, and we don't give malware removal advice on forum, please see here http://forum.pirifor...showtopic=34786 Support contact https://support.ccleaner.com/s/contact-form?language=en_US&form=general or support@ccleaner.com Link to comment Share on other sites More sharing options...
login123 Posted January 22, 2013 Share Posted January 22, 2013 I would be quite interested in what you find out at those spyware forums. Just curiosity, don't want to be a bother. The CCleaner SLIM version is always released a bit after any new version; when it is it will be HERE :-) Pssssst: ... It isn't really a cloud. Its a bunch of big, giant servers. Link to comment Share on other sites More sharing options...
Alan_B Posted January 22, 2013 Share Posted January 22, 2013 This is NOT a solution for malware, but If you want to know RAPIDLY what is held in your Content IE folder I suggest the portable freeware Treesize https://www.jam-software.de/customers/downloadTrial.php?article_no=80 It only takes a few seconds to scan my system drive C:\ and then it can show me all the files held in any folder including C:\System Volume Information\Windows Backup\Catalogs Link to comment Share on other sites More sharing options...
Moderators hazelnut Posted January 22, 2013 Moderators Share Posted January 22, 2013 But before doing anything get your machine seen to by a malware expert. Support contact https://support.ccleaner.com/s/contact-form?language=en_US&form=general or support@ccleaner.com Link to comment Share on other sites More sharing options...
Moderators mta Posted January 22, 2013 Moderators Share Posted January 22, 2013 without touching on the malware side of your problem...... but for the .IE5 - 2 things come to mind if it was mine. 1. start in Safe Mode and try nuking that folder 2. remove the drive (sounds like you have access to 'test rigs') and clean/scan/delete whatever you want with it has an external drive running on a clean, secure platform. Backup now & backup often.It's your digital life - protect it with a backup.Three things are certain; Birth, Death and loss of data. You control the last. Link to comment Share on other sites More sharing options...
Moderators Andavari Posted January 22, 2013 Moderators Share Posted January 22, 2013 Everyone, please re-read post #3 by Hazelnut, therefore this topic is closed as we don't give malware removal advice. Link to comment Share on other sites More sharing options...
Recommended Posts