Internet File could not be deleted in one go!

[polonus]

Hi malware fighters,

It is a custom of mine to delete all crap from my computer before closing it down. Whenever I can I use my browser Flock with NoScript installed and Stealther running. But anyways sometimes I have to lift my visors to perform certain activities that need cookies for instance. Today I copied a link to start to listen to an audiostream with my vcl player, and when I looked in IE cache explorer I could delete all cookies, history files. But in Internet files one file was stubborn, and also looking odd. It had to do with the site from where I copied the audio stream location. The name of the file is: http:// www dot prisonplanet dot
ð­
and 35 x ð­ to follow

ð­URL    0   1   06/17/2006 01:11:30 AM   01/01/1601 02:00:00 AM   05/17/2007 07:20:50 PM   05/17/2007 07:20:52 PM   C:\Documents and Settings\Polonus\Local Settings\Temporary Internet Files\Content.IE5\S6PBGNG9\
ð­
ð­

and various again
ð­URL    
I could delete it later using System Security Suite crap cleaner, having to restart the computer.
Does this mean the site has/had  malicious code on it. Of what could this be a symptom?
Good I always check these crap data. Can anyone give more details?

polonus

[DavidR]

t is a custom of mine to delete all crap from my computer before closing it down.

You could probably start with all the additional line space characters in this post , it is huge.

ð­
ð­
ð­
ð­
ð­
ð­

[polonus]

Hi DavidR,

That is how I found it, and it resembles to my best knowledge some kind of buffer-overflow probe.
Because this was all one string, and later came out separately,

polonus

[DavidR]

I meant in the actual length of the post, I know you are trying to represent what happened.

ð­
ð­
ð­
ð­
ð­
<35 more occurrences of this line ð­>

[polonus]

Hi DavidR,

This won't boggle your eyes anymore now, so far I got your point. Again I wonder what actually happened there and why I found it in this exact fashion. The link or the website I got it from was clean according to GeoTrust, according to finjan and DrWeb's, so how it got there and why. What are the implications, scanned with ewido and found nothing. Why the URL and times of visit were put in my IE temps file? I hate it when I do not have the greenest why it appeared there?!?

polonus

[DavidR]

That's better makes it easier to see the whole post in one screen. Perhaps some form of malformed URL/file name as an attempt to cause some sort of buffer overflow. Other than that I'm at a loss.

[CharleyO]

***

Maybe this can help?   

http://en.wikipedia.org/wiki/Alex_Jones_(radio)

And maybe they use bad cookies?   


***