Look it is some sort of hidden folder. THIS IS JUST INFORMATION DO NOT FOLLOW ANY INSTRUCTION HERE "You will not be able to see the Content.IE5 folder associated with your account in Windows Explorer. There are two ways to access the folder. 1. Open your TIF folder, (TIF TEMPORY INTERNET FILES) C:\Documents and Settings\YOURACCOUNT\Local Settings\Temporary Internet Files. Next, click in the Address bar at the top of the window so that the address is highlighted. Hit the right arrow key to place the cursor at the end of the folder path. Type \Content.IE5 in the address bar and hit Enter. You should now see the contents of that folder. 2. Go to Start -> Run and enter the folder path to Content.IE5 in the Open box. Autocomplete should help you by presenting options you can select using the down arrow. Add a backslash after you select a folder. Don't worry about this folder I found this info from a google search..

No problem, Breenthumb - I was looking for a much simpler answer, anyway. On my old PC I could press Cont-Alt-Delete and get a list of what was running--maybe 8 items. Doing that on XP gives me a list a mile long. I was hoping for some way to figure out what was what on that list, and could "end task" whatever was going on that I didn't need at the moment. No big deal, I can out-wait the slowdown. It's just annoying. Cheers, J

Have you made any progress?

Name: jucheck Filename: jucheck.exe Command: C:\Windows\System32\dllcache\jucheck.exe Description: Added by the W32.Scrimge.O worm. W32.Scrimge.O is a worm that spreads through Microsoft instant messaging clients and opens a back door on the compromised computer. File Location: C:\Windows\System32\dllcache\jucheck.exe Startup Type: This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry. HijackThis Category: O4 Entry Discovered: September 28, 2007 Updated: September 28, 2007 5:22:51 PM Also Known As: W32/Sdbot-DHX [Sophos], W32/Sdbot-DJL [Sophos] Type: Worm Infection Length 76,288 bytes Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP Once executed, the worm copies itself as the following file: %System%\dllcache\jucheck.exe It then creates the following registry entries so that it starts when Windows runs: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"jucheck" = "%System%\dllcache\jucheck.exe" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\"MSNPRC" = "[PATH TO WORM]" That's where it comes from the registry run key It also modifies the following registry entry to lower security settings: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\"%Windir%\system32\dllcache\"jucheck.exe" = "%System%\dllcache\jucheck.exe:*:Enabled:Windows Sharing" The worm then connects to m.proxyisp.info on TCP port 21888 allowing unauthorized access to perform the following actions: Update itself Download additional files Spread using Microsoft instant messaging clients Delete itself The worm checks the the locale settings of the compromised computer and then spreads through Microsoft instant messaging clients by sending a zipped file attachment of itself along with a message composed of some of the following text: @ZHE SHI WO DE LUOZHAO :O QING BU YAO FA GEI BIEREN !!. YI ZHANG WO GEN WO PENGYOU ZUI HAO DE ZHAOPIAN :S !!. JIESHOU WO DE ZHAO PIAN :> !!. KAN WO DE ZHAOPIAN :D. NI HE WO !!! .... QING KAN :D. kAN BA LI XI ER DUN JIN JIANYU HOU SHI DUO ME QIAOCUI :<.> VOC TEM QUE VER ESTE RETRATO DE MIM