Cannot 'Show hidden files and folders' in Folder options

Discussion in 'privacy general' started by nomarjr3, Apr 10, 2008.

Thread Status:
Not open for further replies.
  1. nomarjr3

    nomarjr3 Registered Member

    Joined:
    Jul 31, 2007
    Posts:
    502
    Hi. I'm using a Windows XP SP2.
    Recently, I reformatted my PC. Now I want to delete the junk files left from the Administrator folder.

    The problem is, I can't seem to show up the hidden files and folders! In case you may not know, this is needed to show the Local Settings folder and the App folder.

    I already tried the usual registry editing (delete CheckedValue and replace w/ DWORD =1) and to no avail. The CheckedValue registry keeps popping back.
    I also scanning the whole system with Antivir and Avast. No viruses/trojans were found.

    Can anyone here help me? TY
     
  2. nomarjr3

    nomarjr3 Registered Member

    Joined:
    Jul 31, 2007
    Posts:
    502
    Almost forgot, I used HijackThis and sent a log on a forum. They said there was no malware present on the system

    o_O
     
  3. ccsito

    ccsito Registered Member

    Joined:
    Jul 27, 2006
    Posts:
    1,579
    Location:
    Nation's Capital
    I use the following to show hidden files and folders.

    {Drive letter}: <enter>
    Click on TOOLS
    Click on FOLDER OPTIONS
    Click on the VIEW tab
    Click on the bullet circle for SHOW HIDDEN FILES AND FOLDERS
    You can also uncheck the HIDE PROTECTED OPERATING SYSTEM FILES (recommended) if you want to see certain OS folders
     
  4. nomarjr3

    nomarjr3 Registered Member

    Joined:
    Jul 31, 2007
    Posts:
    502
    ccsito,

    I did exactly what you said. But it reverts back to hide the files. I also tried unchecking the 'hide operating system files', but as soon as I uncheck it, it gets checked again

    o_O
     
  5. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Download RatsCheddar.zip and save it to your desktop. It is a Policy Controller program written by Rathat to remove certain restrictions on XP systems.

    * Extract (unzip) the file to the desktop.
    * Double-click on RatsCheddar.exe to launch the tool.
    * Select Enable for everything listed, then click Exit.
    * Restart your computer.
     
  6. nomarjr3

    nomarjr3 Registered Member

    Joined:
    Jul 31, 2007
    Posts:
    502
    Franklin,

    I've downloaded and run the program. But it didn't work.. :(
    Notification window says "FAILED TO SET DATA FOR 'DisableTaskMgr'"
    "Failed to set data for 'DisableRegistryTools"
    "Failed to set data for 'DisbaleCMD" o_O

    BTW the icon for "Hidden files and folders" has been altered into an arrow icon instead of a folder icon
    o_O
    My internet broadband speed has become VERY slow, as slow as dial-up.


    Before all this mess happened, I ran a fresh install of Win XP on my PC.
    I was able to detect a malware (amvo.exe) using HijackThis. I removed it, but it seems this malware has something to do with the errors.
    Then again, I may be wrong.
     
    Last edited: Apr 11, 2008
  7. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Seems to me you are infected.

    Try a scan with SuperAntispyware which is is usually better than any AV when it comes to Smitfraud types.
     
  8. nomarjr3

    nomarjr3 Registered Member

    Joined:
    Jul 31, 2007
    Posts:
    502
    Been there, done that.
    SAS Free is my 2nd choice when it comes to malware, next to HijackThis.
    I did a full scan. No threats were found, just a few tracking cookies.

    This is getting so o_O
     
  9. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Yep, I agree!

    So where do we go from here?

    OK, try the link below and I'm only trying to help!
    Hope it may help?
     
  10. thanatos_theos

    thanatos_theos Registered Member

    Joined:
    Apr 28, 2007
    Posts:
    540
    Check if the infection is still present. Even if you manage to restore folder options, if the infection is still present, it will disable folder options again. Scan with Housecall then use this tool.

    If you still have a copy of amvo.exe, please send it to (samples@superantispyware.com).

    thanatos
     
  11. Firebytes

    Firebytes Registered Member

    Joined:
    May 29, 2007
    Posts:
    903
  12. ccsito

    ccsito Registered Member

    Joined:
    Jul 27, 2006
    Posts:
    1,579
    Location:
    Nation's Capital
    Not sure if you have a bug during the install process. Where are the reload disks coming from?
     
  13. nomarjr3

    nomarjr3 Registered Member

    Joined:
    Jul 31, 2007
    Posts:
    502
    Thanatos,

    I have also tried that method, but it didn't work. I will try Housecall.
    If this doesn't work, my last ditch effort will be another fresh reformat of the hard drives. :(
     
  14. nomarjr3

    nomarjr3 Registered Member

    Joined:
    Jul 31, 2007
    Posts:
    502
    thanatos,

    Thanks very much! You just saved me from having to reformat my hard drives!
    That special tool you told me to use worked wonders!
    I've tried all methods, using RatsCheddar, avast!, and SAS Free. None of them were able to fully recover from the error.

    Thanks again!
     
  15. thanatos_theos

    thanatos_theos Registered Member

    Joined:
    Apr 28, 2007
    Posts:
    540
    You're welcome nomarjr3. I am glad it worked. Thanks to iSergiwa's nifty tool.

    Please scan with Housecall just to be sure you're clean.

    thanatos
     
  16. ccsito

    ccsito Registered Member

    Joined:
    Jul 27, 2006
    Posts:
    1,579
    Location:
    Nation's Capital
    Glad to hear that it working fine now. The infection must have changed the system settings so that you could not show hidden files (a mechanism to self protect the virus). Even though you may have eradicated the infection, the side effect remained and is not treated as evidence of an infection. You can change system parameters and many of the AS and AV programs would not detect that as an infection. AS and AV programs tend to look for certain code patterns in the system files and memory. A setting that has been altered to allow or block something does not necessarily mean that an infection is present.
     
  17. Firebytes

    Firebytes Registered Member

    Joined:
    May 29, 2007
    Posts:
    903
    Just in case anyone is interested, there is apparently a much newer version available of the tool from iSergiwa (RRT Remove Restictions Tool) that thanatos_theos mentioned in the post I quote above and in post #10 (where there is also a link to it). Here are links where the newer version can be downloaded: Sergiwa.com or Download.com

    (The scanners at VirusTotal don't like this program much though. I would assume due to the changes it makes to the users system to remove changes made previously by malware, but maybe not. Anyway, the 2.0 version linked to earlier has fifteen of the scanners flagging it. The 4.7.0.3 version I link to has five scanners flagging it.)

    edit: If you do have to use the tool, as per the website, iSergiwa recommends disabling all security type programs before attempting to install.
     
  18. nomarjr3

    nomarjr3 Registered Member

    Joined:
    Jul 31, 2007
    Posts:
    502
    Firebytes,

    I've downloaded and tried the latest version of of his tool but did not like it.
    The software seems to exhibit malware-like behaviors.
    As soon as I launched the app, it keeps generating a start-up. I was able to disable it w/ Winpatrol.
    Disabling the start-up would not make the app launch at all.

    Thanks, but I'd rather stick with the old version. :)
     
  19. Firebytes

    Firebytes Registered Member

    Joined:
    May 29, 2007
    Posts:
    903
    Fine with me..I was just pointing out that it was available. ;)
     
  20. thanatos_theos

    thanatos_theos Registered Member

    Joined:
    Apr 28, 2007
    Posts:
    540
    Version 2 is packed using Mew which is commonly used by malware writers; the antivirus software are detecting the packer. I believe latter versions were packed using UPX. Also, afaik most antivirus like Avira has packer detection turned-off by default (contrary to VirusTotal).

    thanatos
     
    Last edited: Apr 16, 2008
  21. sagui28

    sagui28 Registered Member

    Joined:
    May 30, 2008
    Posts:
    2
    I am using Xp Sp2 and I encountered a problem in my folder options.
    Under the folder of hidden files and folders, the bulleted option - show hidden files and folders is no longer visible, only the bulleted option - Do not show hidden files and folders is visible and selected. I managed to unclick that option from the registry (I forgot how i did it) but still Show hidden files and folder option is not visible. What should I do...Please help.
    sagui28........
     
  22. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
  23. sagui28

    sagui28 Registered Member

    Joined:
    May 30, 2008
    Posts:
    2
    Steve,
    I followed ur advice...I checked Tech Guru and found the solution...
    Thanks,
    Sagui28
     
  24. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
    Bitte schön. ~ wink ~
     
Loading...
Thread Status:
Not open for further replies.