Well YoKenny,
So much for the rooster, but kl-detector found out about all the hidden things that McAfee's SiteAdvisor is performing on the computer e.g. SACore data after a short session with my Minefield browser:
Found as suspicious in some way:
C:\WINDOWS\Internet Logs\ACER-******D0D.ldb (created by ZA)
C:\Documents and Settings\Polonus\Local Settings\Application Data\Mozilla\Firefox\Profiles\*****4a.default\XUL.mfl
C:\Documents and Settings\All Users\Application Data\McAfee\SiteAdvisor\SA.dat-journal
C:\Documents and Settings\All Users\Application Data\McAfee\SiteAdvisor\SA.dat
C:\System Volume Information\_restore{344DC755-28BF-40FE-91D5-B22D466F307D}\R****\change.log
C:\Documents and Settings\LocalService\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\.subcache
C:\Documents and Settings\Polonus\Application
Data\Mozilla\Firefox\Profiles\*****4a.default\places.sqlite (bookmarks and browsing history)
C:\Documents and Settings\Polonus\Application Data\Mozilla\Firefox\Profiles\*****4a.default\places.sqlite-journal (id. bookmarks & browsing hist.)
C:\Documents and Settings\LocalService\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\.lockfile
C:\Documents and Settings\LocalService\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\AA3480662CC1BD6B06FD9B1C4E69C4108D866B11\.subcache
C:\WINDOWS\Internet Logs\tvDebug.log (made by ZA, can be emptied and regenerates)
If anyone is interested - the following command will instantly delete the Cache folder and all of the contents temporarily. Assuming that Windows XP is on drive C. If not just change the C: to the correct drive letter. Copy the command to a blank Notepad document. Save the file, give it anyname.BAT
Be sure the extension is .bat and not the default .TXT (case is not important).
If you save to Desktop - just double click the file and Poof! Everthing's gone. You can also put in the Startup folder and it will automagically run when you reboot. enjoy!
RmDir /S /Q "C:\Documents and Settings\NetworkService\Application Data\SACore\Cache"
The only full solution is taking McAfee SiteAdvisor off your computer,
pol