Virus has made folder inaccessible

March 10, 2007 at 06:57:09
Specs: Windows XP - Home Edition, Pentium 4 3Ghz / 1Ghz of
G'day all,

Thanks for your help in advance. I have a folder, "c:\documents and settings\user\local settings\temp\temporary internet files\content.ie5" that is completely inaccesible. I cannot see what is inside the folder, I cannot copy it, I cannot get its properties, I cannot delete it. If I try to do any of these things, Windows Explorer crashes. If I try to use the command-line prompt, it says there are no files in the folder ... until I try to delete it, and then it says there are files.

The important thing to note is that it is NOT where my temporary internet files go. That goes to a completely separate folder. So I have no idea what this folder does. Especially as I use IE6 not IE5.

It is my suspicion therefore that there are viruses in the folder. My World of Warcraft program keeps telling me that I have "Trojan-Downloader.Win32.Agent.uj" on my computer. No matter how many times I virus scan my computer, I cannot find that virus. Of-course, viruscans crash when they try to scan that folder ...

So, can someone tell me how to a)access and possibly delete that folder, and b)how to get rid of that virus.

It is important that I stress that every operation that I have tried on that folder so far has caused a crash.

Thank you again.

See More: Virus has made folder inaccessible

Report •

March 10, 2007 at 07:11:08
rbha7, Have you gone into Folder Options>View tab and unchecked "Hide protected operating system files etc." click Apply/OK. That Content IE5 folder name is correct even though you have IE6. Microsoft never caught up yet.


Report •

March 10, 2007 at 08:07:03
We can looks for the trojan and help you remove it.

Please download HJTsetup.exe from this link to your desktop.
Doubleclick on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue.
Put a check by "Create a desktop icon" then click "Next" again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click "Finish" and it will launch Hijack This.
Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread.

Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.

Please download SmitFraudFix from this link Then extract the contents to your desktop.

!!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!!

Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd"
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

Report •

Related Solutions

Ask Question