PDA

View Full Version : Cannot 'Show hidden files and folders' in Folder options


nomarjr3
April 10th, 2008, 02:10 PM
Hi. I'm using a Windows XP SP2.
Recently, I reformatted my PC. Now I want to delete the junk files left from the Administrator folder.

The problem is, I can't seem to show up the hidden files and folders! In case you may not know, this is needed to show the Local Settings folder and the App folder.

I already tried the usual registry editing (delete CheckedValue and replace w/ DWORD =1) and to no avail. The CheckedValue registry keeps popping back.
I also scanning the whole system with Antivir and Avast. No viruses/trojans were found.

Can anyone here help me? TY

nomarjr3
April 10th, 2008, 02:11 PM
Almost forgot, I used HijackThis and sent a log on a forum. They said there was no malware present on the system

???

ccsito
April 10th, 2008, 07:57 PM
I use the following to show hidden files and folders.

{Drive letter}: <enter>
Click on TOOLS
Click on FOLDER OPTIONS
Click on the VIEW tab
Click on the bullet circle for SHOW HIDDEN FILES AND FOLDERS
You can also uncheck the HIDE PROTECTED OPERATING SYSTEM FILES (recommended) if you want to see certain OS folders

nomarjr3
April 10th, 2008, 11:20 PM
ccsito,

I did exactly what you said. But it reverts back to hide the files. I also tried unchecking the 'hide operating system files', but as soon as I uncheck it, it gets checked again

???

Franklin
April 11th, 2008, 02:09 AM
Download RatsCheddar.zip (http://www.castlecops.com/zx/sjpritch25/RatsCheddar.zip) and save it to your desktop. It is a Policy Controller program written by Rathat to remove certain restrictions on XP systems.

* Extract (unzip) the file to the desktop.
* Double-click on RatsCheddar.exe to launch the tool.
* Select Enable for everything listed, then click Exit.
* Restart your computer.

nomarjr3
April 11th, 2008, 04:59 AM
Franklin,

I've downloaded and run the program. But it didn't work.. :(
Notification window says "FAILED TO SET DATA FOR 'DisableTaskMgr'"
"Failed to set data for 'DisableRegistryTools"
"Failed to set data for 'DisbaleCMD" ???

BTW the icon for "Hidden files and folders" has been altered into an arrow icon instead of a folder icon
???
My internet broadband speed has become VERY slow, as slow as dial-up.


Before all this mess happened, I ran a fresh install of Win XP on my PC.
I was able to detect a malware (amvo.exe) using HijackThis. I removed it, but it seems this malware has something to do with the errors.
Then again, I may be wrong.

Franklin
April 11th, 2008, 08:57 AM
Seems to me you are infected.

Try a scan with SuperAntispyware (http://www.superantispyware.com/) which is is usually better than any AV when it comes to Smitfraud types.

nomarjr3
April 11th, 2008, 09:12 AM
Been there, done that.
SAS Free is my 2nd choice when it comes to malware, next to HijackThis.
I did a full scan. No threats were found, just a few tracking cookies.

This is getting so ???

Franklin
April 11th, 2008, 09:23 AM
Yep, I agree!

So where do we go from here?

OK, try the link below and I'm only trying to help!
Hope it may help? (http://winonline.blogspot.com/2005/11/reset-entire-registry-permissions-to.html)

thanatos_theos
April 11th, 2008, 10:45 AM
Check if the infection is still present. Even if you manage to restore folder options, if the infection is still present, it will disable folder options again. Scan with Housecall (http://housecall.antivirus.com/) then use this tool (http://www.softpedia.com/get/Security/Security-Related/RRT-Remove-Ristrictions-Tool.shtml).

If you still have a copy of amvo.exe, please send it to (samples@superantispyware.com).

thanatos

Firebytes
April 11th, 2008, 05:50 PM
Found several websites where people stated that this worked for them to clear up the same problem you are having. Here is one of the sites...worth a try? Same as what you stated you tried initially but with an extra step I think. http://techiesden.com/2008/03/17/show-hidden-files-and-folders-not-working/

ccsito
April 14th, 2008, 07:35 PM
-{ Quote: "ccsito,

I did exactly what you said. But it reverts back to hide the files. I also tried unchecking the 'hide operating system files', but as soon as I uncheck it, it gets checked again

???" }-
Not sure if you have a bug during the install process. Where are the reload disks coming from?

nomarjr3
April 15th, 2008, 10:12 PM
Thanatos,

I have also tried that method, but it didn't work. I will try Housecall.
If this doesn't work, my last ditch effort will be another fresh reformat of the hard drives. :(

nomarjr3
April 15th, 2008, 10:19 PM
thanatos,

Thanks very much! You just saved me from having to reformat my hard drives!
That special tool you told me to use worked wonders!
I've tried all methods, using RatsCheddar, avast!, and SAS Free. None of them were able to fully recover from the error.

Thanks again!

thanatos_theos
April 15th, 2008, 11:06 PM
You're welcome nomarjr3. I am glad it worked. Thanks to iSergiwa's nifty tool.

Please scan with Housecall just to be sure you're clean.

thanatos

ccsito
April 16th, 2008, 07:24 PM
Glad to hear that it working fine now. The infection must have changed the system settings so that you could not show hidden files (a mechanism to self protect the virus). Even though you may have eradicated the infection, the side effect remained and is not treated as evidence of an infection. You can change system parameters and many of the AS and AV programs would not detect that as an infection. AS and AV programs tend to look for certain code patterns in the system files and memory. A setting that has been altered to allow or block something does not necessarily mean that an infection is present.

Firebytes
April 16th, 2008, 08:00 PM
-{ Quote: "You're welcome nomarjr3. I am glad it worked. Thanks to iSergiwa's nifty tool.

Please scan with Housecall just to be sure you're clean.

thanatos" }-

Just in case anyone is interested, there is apparently a much newer version available of the tool from iSergiwa (RRT Remove Restictions Tool) that thanatos_theos mentioned in the post I quote above and in post #10 (where there is also a link to it). Here are links where the newer version can be downloaded: Sergiwa.com (http://en.sergiwa.com/modules/mydownloads/singlefile.php?cid=2&lid=1) or Download.com (http://www.download.com/RRT-With-Removable-Media-Malware-Defender/3000-2239_4-10653097.html)

(The scanners at VirusTotal don't like this program much though. I would assume due to the changes it makes to the users system to remove changes made previously by malware, but maybe not. Anyway, the 2.0 version linked to earlier has fifteen of the scanners flagging it. The 4.7.0.3 version I link to has five scanners flagging it.)

edit: If you do have to use the tool, as per the website, iSergiwa recommends disabling all security type programs before attempting to install.

nomarjr3
April 16th, 2008, 09:53 PM
Firebytes,

I've downloaded and tried the latest version of of his tool but did not like it.
The software seems to exhibit malware-like behaviors.
As soon as I launched the app, it keeps generating a start-up. I was able to disable it w/ Winpatrol.
Disabling the start-up would not make the app launch at all.

Thanks, but I'd rather stick with the old version. :)

Firebytes
April 16th, 2008, 10:14 PM
-{ Quote: "Firebytes,

I've downloaded and tried the latest version of of his tool but did not like it.
The software seems to exhibit malware-like behaviors.
As soon as I launched the app, it keeps generating a start-up. I was able to disable it w/ Winpatrol.
Disabling the start-up would not make the app launch at all.

Thanks, but I'd rather stick with the old version. :)" }-

Fine with me..I was just pointing out that it was available. ;)

thanatos_theos
April 16th, 2008, 11:10 PM
-{ Quote: "(The scanners at VirusTotal don't like this program much though. I would assume due to the changes it makes to the users system to remove changes made previously by malware, but maybe not. Anyway, the 2.0 version linked to earlier has fifteen of the scanners flagging it. The 4.7.0.3 version I link to has five scanners flagging it.)" }-
Version 2 is packed using Mew which is commonly used by malware writers; the antivirus software are detecting the packer. I believe latter versions were packed using UPX. Also, afaik most antivirus like Avira has packer detection turned-off by default (contrary to VirusTotal).

thanatos

sagui28
May 30th, 2008, 10:01 AM
I am using Xp Sp2 and I encountered a problem in my folder options.
Under the folder of hidden files and folders, the bulleted option - show hidden files and folders is no longer visible, only the bulleted option - Do not show hidden files and folders is visible and selected. I managed to unclick that option from the registry (I forgot how i did it) but still Show hidden files and folder option is not visible. What should I do...Please help.
sagui28........

GlobalForce
May 30th, 2008, 10:10 AM
Welcome Sagui,

Take a look here - http://techix.blogspot.com/2008/04/show-hidden-files-and-folders-not.html


Steve

sagui28
May 30th, 2008, 12:43 PM
Steve,
I followed ur advice...I checked Tech Guru and found the solution...
Thanks,
Sagui28

GlobalForce
May 30th, 2008, 03:18 PM
Bitte schön. ~ wink ~