Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Why is the cache rooykitted?

1 view
Skip to first unread message

Bill's E-mail

unread,
Feb 21, 2006, 7:14:55 AM2/21/06
to
I was using Rootkit Revealer for another problem and found
the missing cache folder. I was just wondering why you used
a rootkit to hide it?

Bill


Brian J. Graham

unread,
Feb 21, 2006, 7:32:30 AM2/21/06
to

uhhh ...not hidden here. I can go to my cache folder in my profile with
no problems whatsoever. WinXP Home SP2. FF 1.5.0.1

--
Brian

. http://www.mozilla.org

. http://ilias.ca/mozilla/

. http://ilias.ca/

. No keyboard found. Press F1 to continue.

Nick Thomas (cf)

unread,
Feb 21, 2006, 7:38:11 AM2/21/06
to

There isn't any rootkit - it sounds like a false positive from this
software you are using.

On windows, Gecko 1.8 applications (like Firefox 1.5 and SeaMonkey 1.0)
store the cache within this folder
C:\Documents and Settings\<username>\Local Settings\Application Data\
which Windows creates with the hidden attribute set.

Eg, Firefox 1.5 uses
C:\Documents and Settings\<username>\Local Settings\Application Data\
Mozilla\Firefox\Profiles\<profile>\Cache

Putting about:cache into the location bar is an easy way to look up the
cache location.


Bill's E-mail

unread,
Feb 21, 2006, 8:08:18 AM2/21/06
to
Ever since I went to FF 1.5, the Cache folder has been missing
from "Application Data\Mozilla\Firefox\.... Doing a search for
"Cache" doesn't show it [it also didn't show "Application Data\
Profiles\default\84wxl04.slt\Cache" which was last updated on
11/28/05 before 1.5] I have Show Hidden Files turned on all
the time in search. The rootkit program shows the path and the
Cache with current dates on the cached files. I had missed the
Cache ever since I went to 1.5 and wondered where they put
it because it still paged like the cache was still there.

Bill


"Brian J. Graham" <pawpa...@fuse.net> wrote in message
news:7MWdnTaWQcT...@mozilla.org...

Brian J. Graham

unread,
Feb 21, 2006, 8:21:28 AM2/21/06
to

>
> "Brian J. Graham" <pawpa...@fuse.net> wrote in message
> news:7MWdnTaWQcT...@mozilla.org...
>> Bill's E-mail wrote:
>>> I was using Rootkit Revealer for another problem and found
>>> the missing cache folder. I was just wondering why you used
>>> a rootkit to hide it?
>>>
>>> Bill
>>>
>>>
>> uhhh ...not hidden here. I can go to my cache folder in my profile with no
>> problems whatsoever. WinXP Home SP2. FF 1.5.0.1
>>
> Bill's E-mail wrote:
>> Ever since I went to FF 1.5, the Cache folder has been missing
>> from "Application Data\Mozilla\Firefox\.... Doing a search for
>> "Cache" doesn't show it [it also didn't show "Application Data\
>> Profiles\default\84wxl04.slt\Cache" which was last updated on
>> 11/28/05 before 1.5] I have Show Hidden Files turned on all
>> the time in search. The rootkit program shows the path and the
>> Cache with current dates on the cached files. I had missed the
>> Cache ever since I went to 1.5 and wondered where they put
>> it because it still paged like the cache was still there.
>>
>> Bill
>>

Please bottom post in these groups. Thanks!

The cache appears to have been moved in FF 1.5. I checked and mine is
under "Local Settings/Application Data/Mozilla/Firefox" ..it is not
hidden though. As another poster has pointed out, the rootkit issue is a
false positive from that software.

Bill's E-mail

unread,
Feb 21, 2006, 8:36:15 AM2/21/06
to
Thanks Nick,

I did find it. They did move the path. I found Bookmarkbackup in the
location
they used to have te cache. There is only one problem that is not FF's
problem.
That is why the Search function could not find that Cache or the other one
in
my previous post. I suspect that the search only goes so far down a search
tree.

Bill

"Nick Thomas (cf)" <no....@for.me.you.stupid.spammers.narf> wrote in
message news:qt2dncDH6p8...@mozilla.org...

»Q«

unread,
Feb 21, 2006, 2:26:49 PM2/21/06
to
"Brian J. Graham" <pawpa...@fuse.net> wrote in
<news:3oCdnYfpXJhOjmbe...@mozilla.org>:

> The cache appears to have been moved in FF 1.5. I checked and mine
> is under "Local Settings/Application Data/Mozilla/Firefox"

It was moved to make sure that it is on the user's local filesystem.
The %appdata% directory, used for profiles, may reside on a network
drive if roaming profiles are used, and having the cache on another
machine can slow things down pretty badly.

--
»Q«

Brian J. Graham

unread,
Feb 21, 2006, 4:08:37 PM2/21/06
to

Thanks >>Q<<. That makes sense. I never noticed the move until I went
looking.

Irwin Greenwald

unread,
Feb 21, 2006, 7:11:53 PM2/21/06
to
Brian J. Graham wrote:
> Bill's E-mail wrote:
>> I was using Rootkit Revealer for another problem and found
>> the missing cache folder. I was just wondering why you used
>> a rootkit to hide it?
>>
>> Bill
>>
>>
>
> uhhh ...not hidden here. I can go to my cache folder in my profile with
> no problems whatsoever. WinXP Home SP2. FF 1.5.0.1
>
In FF1.5 it was moved out of Application Data into Local Settings.

--
Irwin Greenwald - Mozilla Champion

Etiquette - http://www.mozilla.org/community/etiquette.html
About Profiles -
http://users.adelphia.net/~irwingreenwald/About%20Profiles.html
OE Quotefix - http://home.in.tum.de/~jain/software/oe-quotefix/

0 new messages