Strange files in Internet Temp files area 2

[Bocaire]

In looking over the large number of files that a accumulate in this path

C:\Documents and Settings\Ronald Hirsch\Local Settings\Temporary Internet Files

I see almost 2000 files with very strange properties. And this machine has only been running for 7 weeks or so since I finished building it.

They are all zero bytes
They all have attributes of RHSA
They have dates ranging from 1969 to 2033
They have a wide variety of extensions, with most of them being jpg or gif

What the devil are they, and how did they get all these strange characteristics? RHSA should be the attribute for hidden system files, but these don't seem to qualify

I assume that all can be deleted.

Ron Hirsch

 

[linney]

E-mail programs maybe creating a hidden zero byte file for every e-mail that is read, according to some links here.

Just clean out the files regularly.

Safely Delete the Temporary Internet Files

http://www.mvps.org/winhelp2002/delcache.htm

http://www.google.com/search?source...&q=zero+bytes+hidden+temporary+internet+files

http://groups.google.com/groups?sou...&q=zero+bytes+hidden+temporary+internet+files

 

[Bocaire]

Hi Linney,

I don't see the thank you message I posted here yesterday, so I'll thank you again.

The mechanism that OE uses to generate all these 0 byte RHSA attribute files is absolutely weird.

And what can the mechanism be that generates dates covering from 1969 to 2033? That's even weirder.

It seems to me that MS is messing up in this whole area.

Bocaire

 

[linney]

Is your the current system date and time correct?

This thread talks about a CMOS issue.
MS Office 2000 Office Documents show modified date 1/1/1985
thread779-840505

None of these next threads are really that relevant but may offer some clues if you want to take it further.

OL2002: The Incorrect Date and Time Appears for Read Receipts

http://support.microsoft.com/default.aspx?kbid=820368

Description of NTFS date and time stamps for files and folders

http://support.microsoft.com/kb/299648/en-us?FR=1&PA=1&SD=HSCH

http://groups.google.com/groups/sea...+properties+xp+incorrect+OR+wrong&qt_s=Search

Just guessing and wondering, makes me guess that the zero byte files that are written with incorrect dates are written incorrectly because of a programming error or an access permission problem where relevant information is unable to be read or written.

Of course it could just be your funny machine too.

 

[Bocaire]

Hi Linney,

My system time and date are correct. I finished building this machine in early March, and it is a very high end system that was carefully put together. No one but me has ever been on the machine.

To have a spread of dates covering 1969 to 2033 is weird. It does seem that whatever the process is that produced these files, there are/were funny things happening.

I'm going to keep on eye on the path where these files were located, and see if they continue to be generated.

Also, it does seem that MS should build in some housekeeping and cleanup tools that automatically get rid of stuff which is pure garbage, and serve no purpose.

Thanks again

Bocaire

 

[Bocaire]

Hi Linney,

I just took a look at the folder (C:\Documents and Settings\Ronald Hirsch\Local Settings\Temporary Internet Files), after totally emptying it 1 day ago.

There are already about 600 files in it. they all have a creation date of 7/22/1970, and a modified date of 1/11/2026.

One of them has a very long name, which appears to be some of the text in my prevous message to you.

All of them are 0 byte and have RHSA attributes.

I have a large number of "protection" programs installed, and none of them have found any spyware or other "stuff" on my machine. Could something of that nature be involved here?

Does all this seem abnormal? I can't believe that XP does this in all its installs. Is this just a nuisance, or does it have a "dark side"?

Is there an option somewhere that I can invoke which will clear this file each time I run/shutdown Windows?

I have printed out the docuemnt you referred me to, for safely deleting and managing these temp files.

Bocaire

 

[Bocaire]

Hi Linney,

I checked my #2 and #3 machines. They all have this same crazy date structure et al.

The 2002 Gateway was just put into the #2 spot, and it had accumulated about 7000 files in the temp Internet folder.

I got rid of all of them.

I'm far from an expert in this area. But to me, it sure seems that MS is doing some sloppy work. These files presumably have no use, unlike cookies which are often helpful. So why doesn't the OS clean up this folder automatically?

I know that one can say - hey it's only a few MB, so what's the problem. I say it's sloppy housekeeping, and just that many more files that can get corrupted, even though they are 0 bytes. Many programs, when they're installed, clean up all the temp stuff they created along the way, and many others don't. It's a reflection on their courtesy, or lack of it, to the user.

Bocaire

 

[linney]

Have a look at this program and see if you can use it to fathom out which program you are running is creating these weird files.

http://www.sysinternals.com/Utilities/Filemon.html

There is an option in IE/ Tools/ Internet Options/ Advanced/ Security, to have your files in the cache (T.I.F) cleared automatically every time you close IE.

A slower way of tracking down your problem is this -

310353 - How to Perform a Clean Boot in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;310353&FR=1&PA=1&SD=HSCH

316434 - HOW TO: Perform Advanced Clean-Boot Troubleshooting in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;316434&FR=1&PA=1&SD=HSCH

310560 - How to Troubleshoot By Using the Msconfig Utility in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;310560&FR=1&PA=1&SD=HSCH

 

[Broomhall]

Have a go at

http://www.langa.com/cleanup_bat.htm

for free batch files that clean out files on command, whether user invoked or auto at shutdown:

Cleanup.bat - for batch file novices
Cleanup.bat - for batch file experts
WipeTIF.bat - Completely erase all temp internet files

and two more that are combinations of the above.

Read the descriptions to learn how to use and modify the files for your own system/paths.

 

[Bocaire]

Hi Linney and Broomhall,

Thanks for the links. I'm following up on all of them.

Is there a setting anywhere in XP Pro that will automatically empty the temp internet files each time IE is shut down, or when Windows shuts down?

Do you guys not get files of the strange nature that I do? The fact that it happens on 3 totally different machines of mine, would lead me to believe that it happens on all machines.

Bocaire

 

[Bocaire]

Hi Broomhall,

I went to Fred Langa's site. I do get his free newsletter.

In trying to find the hot link to download WipeTif.bat, I ended up going around in circles. He has things structured strangely, and finding where to actually click to do the download for XP is certainly a confusing maze to navigate.

I'll try again later on today.

If I continue to get frustrated, I'll invoke Google's help.

Bocaire

Ron

 

[Broomhall]

Hi Ron,

It's been awhile since I navigated the site...understand your circles. I think he doesn't want to make it too easy to download and use without fully understanding the functions and hazards.

For CleanXP.bat, a template which will do everything you need after it's customized for your system:

http://www.langa.com/newsletters/2002/2002-04-04.htm#2

near the bottom of the page.

No, on none of three machines running XPPro do I see the files or strange dates you describe, but do find multitudes of empty TIF folders, despite that I don't/won't actively use IE and have never opened OE or Outlook.

I don't find a built-in XP option to purge the temp internet files at browser close or system shutdown. It may exist, but isn't obvious.

A casual search suggests that many AV programs lock certain file types, in particular those in TIF, which prevents IE from following the "empty at close" instructions.

Unsupported extrapolation: wonder if one (or more) of your protection programs is responsible for the strange file dates, especially as this condition is replicated across three local machines? Maybe by design, to make an unidentified file innocuous?

While workarounds abound, the best solution would be to find the reason behind the behavior and prevent it, if possible. However, a definitive answer seems elusive.

A suggestion would be to try out one of the excellent free browsers (Firefox, Opera, Mozilla for three of several examples) and see if the problem goes away or diminishes. Changing email programs is very much more trouble, of course.

I agree with your good housekeeping philosophy, practice it myself and resent that arrogant or careless program behavior compounds the task exponentially.

Please post back if you discover a good solution. Good luck!

Broom

 

[Bocaire]

Hi Broom,

Thanks for the info. I downloaded the template.

Since you're not using IE or OE, I'd guess that these files wouldn't show on your machine. My feelings are that MS has gone overboard in this area, and is responsible for all the junk that shows.

Just for kicks, I cleaned the folder of everything except the cookies that were in it. I opened IE to the home page, which is still set as MS. Then I shut down IE. That produced about 60 files in the folder. Even though they all show as 0 bytes, the true file size is certainly larger than that, as the folder showed about 10 MB.

And, as I've noted earlier, some of the file names have some text such as I'm typing here, in them.

I've stayed with IE and OE, in spite of all the "attacks" on them. I don't believe that the alternate choices will really continue to stay better in that area. As more people switch, the bastards out there will decide it's time to step up the attacks against those programs. And MS has more resources that they can assign to security et al.

And, I've gotten very familiar and capable with OE, and IE too. I already spend too much time learning new "Stuff", and my cranial hard drive is getting overloaded.

After 23 3rd party books on Photoshop, there's still lots to be learned there, and I'd prefer to be learning more about it. <G>

Thanks again

Bocaire

 

[linney]

Is there a setting anywhere in XP Pro that will automatically empty the temp internet files each time IE is shut down, or when Windows shuts down?"

As already mentioned there is this in IE. There is an option in IE/ Tools/ Internet Options/ Advanced/ Security, to have your files in the cache (T.I.F) cleared automatically every time you close IE.

As to your question about files that are similar to what you are finding in T.I.F. There are numerous zero byte files created in my T.I.F., but they all have current and sensible dates and times displayed with them.

 

[Broomhall]

Bocaire,

It isn't IE's current status as prime target that keeps me from using it. Rather, getting stubborn years ago at the edict that there was no real choice, I migrated to the Netscape camp. Opera's functionality topped NS when it first came out and it continues to improve, so I've stuck with it since, adding Firefox to expand browsing options and using them concurrently.

Early in my computing lifetime I looked forward to learning new things and jumped at the chances to figure out problems and overcome glitches; there was no challenge I would not attempt. Now, I prefer that the software be familiar and that the computer respond to proper maintenance and protection by performing its jobs without problems...IOW, I just want it to work!

My own overloaded cranial hard drive is now content with the absence of steep learning curves. The one voluntary exception is my endless quest to learn everything there is to know about Paint Shop Pro, much as you explore Photoshop. I have only one shelf of 3rd party books, though.

And sure, you're welcome!

Broom

 

[Bocaire]

Hi Linney,

Thanks - I had missed that option to dump all the files each time.

MS has put a very large number of options into using IE, making it quite a task for users to configure things. So using the default settings is probably what most people do use.

I've now checked that option. Assuming that it does leave the cookies, which generally are handy to have around when logging into sites such as this one, I don't see any disadvantages.

Bocaire

 

[linney]

Cookies are stored in the Cookies folder not the T.I.F., so you should be OK with them.

 

[Bocaire]

Hi Linn1ey,

While I do have a fair number of cookies in the "Cookies" folder, my TIF folder, which is

C:\Documents and Settings\Ronald Hirsch\Local Settings\Temporary Internet Files

also has lots of cookies in it. The cookies in the "cookies" folder have the normal dates on them. In the TIF folder, the cookies have the strange dates.

Is is possible that one of my security programs is doing this, in its protective activities??

Bocaire

 

[linney]

The Cookies in the T.I.F are allegedly just a mirror image of what actually is in the Cookies folder.

You could try deleting the Index.dat file (if you can see it and access it). You may have to try approahing it via Safe Mode or another user to get at it. The reason I say try deleting it is because it might have become corrupted and be the cause of your problems?

You may have to revisit this site for details on deleting the damaged Index.dat

http://www.mvps.org/winhelp2002/delcache.htm

If you do succeed in deleting it Windows will create a new one for you after you reload IE.

 

[Bocaire]

Hi Linney,

Thanks for your ongoing support.

I did note that the cookies folder and the TIF folder do keep cookie copies, and they appear to be duplicated. The ones in the cookie folder would appear to be the duplicate files though, as they have the "(2)" at the end of the filename.

And, since all three of my desktop machines have the strange dates, I suspect that it's not a corrupted DAT file, but one of the various security software programs.

When I get around to it, I'll disable them one at a time, and see if things change in the TIF folder.

I had already been to and printed out the good stuff in the link you noted. That is a good doc to keep in my library of tips et al.

Bocaire