Hi guys,
I was just doing an experiment and i came across 3 files that are created when a video is played in normal browsing mode and private browsing mode in internet explorer.
The files have the extension .wid, .ci and .dir.
All 3 file names are the same. (00010007)
The .Wid and .Dir files are empty, and .ci file contains some slack data.
Can anyone shed some light on these 3 files.
If you were doing an experiment, I would suggest that you might be the most likely person to shed some light on these files. And more to the point, what "light" are you looking for?
For example, where were these files created within the file system? Using something like ProcMon, when were they created, and by what process? Are there any Registry artifacts that might apply to the creation of these files? Which version of Windows and IE were you using? Were the files created during the normal or private browsing modes?
I did a Google search for you.
.wid, .ci, .dir files are related to the Windows search indexer.
The indexer is probably trying to index the new files that appeared on the machine.