Cannot 'Show hidden files and folders' in Folder options

[nomarjr3]

Hi. I'm using a Windows XP SP2.
Recently, I reformatted my PC. Now I want to delete the junk files left from the Administrator folder.

The problem is, I can't seem to show up the hidden files and folders! In case you may not know, this is needed to show the Local Settings folder and the App folder.

I already tried the usual registry editing (delete CheckedValue and replace w/ DWORD =1) and to no avail. The CheckedValue registry keeps popping back.
I also scanning the whole system with Antivir and Avast. No viruses/trojans were found.

Can anyone here help me? TY

[nomarjr3]

Almost forgot, I used HijackThis and sent a log on a forum. They said there was no malware present on the system

[ccsito]

I use the following to show hidden files and folders.

{Drive letter}: <enter>
Click on TOOLS
Click on FOLDER OPTIONS
Click on the VIEW tab
Click on the bullet circle for SHOW HIDDEN FILES AND FOLDERS
You can also uncheck the HIDE PROTECTED OPERATING SYSTEM FILES (recommended) if you want to see certain OS folders

[nomarjr3]

ccsito,

I did exactly what you said. But it reverts back to hide the files. I also tried unchecking the 'hide operating system files', but as soon as I uncheck it, it gets checked again

[Franklin]

Download RatsCheddar.zip and save it to your desktop. It is a Policy Controller program written by Rathat to remove certain restrictions on XP systems.

* Extract (unzip) the file to the desktop.
* Double-click on RatsCheddar.exe to launch the tool.
* Select Enable for everything listed, then click Exit.
* Restart your computer.

[nomarjr3]

Franklin,

I've downloaded and run the program. But it didn't work..
Notification window says "FAILED TO SET DATA FOR 'DisableTaskMgr'"
"Failed to set data for 'DisableRegistryTools"
"Failed to set data for 'DisbaleCMD"

BTW the icon for "Hidden files and folders" has been altered into an arrow icon instead of a folder icon

My internet broadband speed has become VERY slow, as slow as dial-up.


Before all this mess happened, I ran a fresh install of Win XP on my PC.
I was able to detect a malware (amvo.exe) using HijackThis. I removed it, but it seems this malware has something to do with the errors.
Then again, I may be wrong.

[Franklin]

Seems to me you are infected.

Try a scan with SuperAntispyware which is is usually better than any AV when it comes to Smitfraud types.

[nomarjr3]

Been there, done that.
SAS Free is my 2nd choice when it comes to malware, next to HijackThis.
I did a full scan. No threats were found, just a few tracking cookies.

This is getting so

[Franklin]

Yep, I agree!

So where do we go from here?

OK, try the link below and I'm only trying to help!
Hope it may help?

[thanatos_theos]

Check if the infection is still present. Even if you manage to restore folder options, if the infection is still present, it will disable folder options again. Scan with Housecall then use this tool.

If you still have a copy of amvo.exe, please send it to (samples@superantispyware.com).

thanatos

[Firebytes]

Found several websites where people stated that this worked for them to clear up the same problem you are having. Here is one of the sites...worth a try? Same as what you stated you tried initially but with an extra step I think. http://techiesden.com/2008/03/17/sho...s-not-working/

[ccsito]

Originally Posted by nomarjr3

ccsito,

I did exactly what you said. But it reverts back to hide the files. I also tried unchecking the 'hide operating system files', but as soon as I uncheck it, it gets checked again

Not sure if you have a bug during the install process. Where are the reload disks coming from?

[nomarjr3]

Thanatos,

I have also tried that method, but it didn't work. I will try Housecall.
If this doesn't work, my last ditch effort will be another fresh reformat of the hard drives.

[nomarjr3]

thanatos,

Thanks very much! You just saved me from having to reformat my hard drives!
That special tool you told me to use worked wonders!
I've tried all methods, using RatsCheddar, avast!, and SAS Free. None of them were able to fully recover from the error.

Thanks again!

[thanatos_theos]

You're welcome nomarjr3. I am glad it worked. Thanks to iSergiwa's nifty tool.

Please scan with Housecall just to be sure you're clean.

thanatos

[ccsito]

Glad to hear that it working fine now. The infection must have changed the system settings so that you could not show hidden files (a mechanism to self protect the virus). Even though you may have eradicated the infection, the side effect remained and is not treated as evidence of an infection. You can change system parameters and many of the AS and AV programs would not detect that as an infection. AS and AV programs tend to look for certain code patterns in the system files and memory. A setting that has been altered to allow or block something does not necessarily mean that an infection is present.

[Firebytes]

Originally Posted by thanatos_theos

You're welcome nomarjr3. I am glad it worked. Thanks to iSergiwa's nifty tool.

Please scan with Housecall just to be sure you're clean.

thanatos

Just in case anyone is interested, there is apparently a much newer version available of the tool from iSergiwa (RRT Remove Restictions Tool) that thanatos_theos mentioned in the post I quote above and in post #10 (where there is also a link to it). Here are links where the newer version can be downloaded: Sergiwa.com or Download.com

(The scanners at VirusTotal don't like this program much though. I would assume due to the changes it makes to the users system to remove changes made previously by malware, but maybe not. Anyway, the 2.0 version linked to earlier has fifteen of the scanners flagging it. The 4.7.0.3 version I link to has five scanners flagging it.)

edit: If you do have to use the tool, as per the website, iSergiwa recommends disabling all security type programs before attempting to install.

[nomarjr3]

Firebytes,

I've downloaded and tried the latest version of of his tool but did not like it.
The software seems to exhibit malware-like behaviors.
As soon as I launched the app, it keeps generating a start-up. I was able to disable it w/ Winpatrol.
Disabling the start-up would not make the app launch at all.

Thanks, but I'd rather stick with the old version.

[Firebytes]

Originally Posted by nomarjr3

Firebytes,

I've downloaded and tried the latest version of of his tool but did not like it.
The software seems to exhibit malware-like behaviors.
As soon as I launched the app, it keeps generating a start-up. I was able to disable it w/ Winpatrol.
Disabling the start-up would not make the app launch at all.

Thanks, but I'd rather stick with the old version.

Fine with me..I was just pointing out that it was available.

[thanatos_theos]

Originally Posted by Firebytes

(The scanners at VirusTotal don't like this program much though. I would assume due to the changes it makes to the users system to remove changes made previously by malware, but maybe not. Anyway, the 2.0 version linked to earlier has fifteen of the scanners flagging it. The 4.7.0.3 version I link to has five scanners flagging it.)

Version 2 is packed using Mew which is commonly used by malware writers; the antivirus software are detecting the packer. I believe latter versions were packed using UPX. Also, afaik most antivirus like Avira has packer detection turned-off by default (contrary to VirusTotal).

thanatos

[sagui28]

I am using Xp Sp2 and I encountered a problem in my folder options.
Under the folder of hidden files and folders, the bulleted option - show hidden files and folders is no longer visible, only the bulleted option - Do not show hidden files and folders is visible and selected. I managed to unclick that option from the registry (I forgot how i did it) but still Show hidden files and folder option is not visible. What should I do...Please help.
sagui28........

[GlobalForce]

Welcome Sagui,

Take a look here - http://techix.blogspot.com/2008/04/s...lders-not.html


Steve

[sagui28]

Steve,
I followed ur advice...I checked Tech Guru and found the solution...
Thanks,
Sagui28

[GlobalForce]

Bitte schön. ~ wink ~