Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: can not choose show hidden files and folders  (Read 2633 times)

0 Members and 1 Guest are viewing this topic.

k_mohsen

    Topic Starter


    Intermediate

    can not choose show hidden files and folders
    « on: January 22, 2010, 12:48:20 PM »
    Hello
    Recently a virus implicates and slows my PC (kmj.exe). Like every time the option, "show hidden files and folders", in "folder option" disable. I update my antivirus (Nod32) and clear it from my system. Now every thing is correct but stile can not choose "show hidden …"!? How can I solve this problem?

    Thanks

    harry 48



      Egghead

    • lay back , relax and chill out
    • Thanked: 129
      • Yes
      • Yes
      • Yes
      • Dribbling Pensioner
    • Certifications: List
    • Experience: Familiar
    • OS: Windows 7
    Re: can not choose show hidden files and folders
    « Reply #1 on: January 22, 2010, 12:58:21 PM »
    http://www.computerhope.com/forum/index.php/topic,46313.0.html

    go to above and complete , post 3 logs and they will be looked at

    k_mohsen

      Topic Starter


      Intermediate

      Re: can not choose show hidden files and folders
      « Reply #2 on: January 23, 2010, 01:32:37 PM »
      thanks "harry 48"
      i do it and post some log file.
      but my antivirus clear the virus/worm from my PC, why these log files are important?

      [Saving space, attachment deleted by admin]

      harry 48



        Egghead

      • lay back , relax and chill out
      • Thanked: 129
        • Yes
        • Yes
        • Yes
        • Dribbling Pensioner
      • Certifications: List
      • Experience: Familiar
      • OS: Windows 7
      Re: can not choose show hidden files and folders
      « Reply #3 on: January 23, 2010, 01:41:07 PM »
      an expert will want to look at them , where are the malware and sas logs please post them

      harry 48



        Egghead

      • lay back , relax and chill out
      • Thanked: 129
        • Yes
        • Yes
        • Yes
        • Dribbling Pensioner
      • Certifications: List
      • Experience: Familiar
      • OS: Windows 7
      Re: can not choose show hidden files and folders
      « Reply #4 on: January 23, 2010, 01:48:28 PM »
      It appears as if you may have not pasted your full HijackThis log into this tool. You should be copying the complete log file from the beginning "Log of" line to the ending "End of file" line. In the log file try pressing "Ctrl + A" to select all text and then copy and paste that text into this tool. Having an incomplete log may mean that not all processes and potential threats will be listed.

      please post a new log

      k_mohsen

        Topic Starter


        Intermediate

        Re: can not choose show hidden files and folders
        « Reply #5 on: January 24, 2010, 01:31:27 PM »
        thanks harry 48
        I can not understand? I attach some log files from hijack This software.
        what do you need exactly? please illuminate me...

        thanks

        harry 48



          Egghead

        • lay back , relax and chill out
        • Thanked: 129
          • Yes
          • Yes
          • Yes
          • Dribbling Pensioner
        • Certifications: List
        • Experience: Familiar
        • OS: Windows 7
        Re: can not choose show hidden files and folders
        « Reply #6 on: January 24, 2010, 01:36:47 PM »
        when you run hjt and the log comes up at the end you must copy and paste from top to bottom and post

        k_mohsen

          Topic Starter


          Intermediate

          Re: can not choose show hidden files and folders
          « Reply #7 on: January 26, 2010, 01:19:13 PM »
          ok harry 48
          I past the log file in here;

          hiJack log:
          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 11:47:34 ب.ظ, on 2010/01/26
          Platform: Windows XP SP3 (WinNT 5.01.2600)
          MSIE: Internet Explorer v8.00 (8.00.6001.18702)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
          D:\ESET\ESET Smart Security\ekrn.exe
          C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\nvsvc32.exe
          D:\VMware\VMware Workstation\vmware-authd.exe
          C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
          D:\ESET\ESET Smart Security\egui.exe
          D:\CyberLink\PowerDVD\PDVDServ.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\WINDOWS\system32\vmnat.exe
          C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
          D:\Bookshelf 98\qshelf98.exe
          C:\WINDOWS\system32\vmnetdhcp.exe
          C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
          C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
          D:\JetAudio\JetAudio.exe
          D:\KeePass Password Safe\KeePass.exe
          D:\Mozilla Firefox\firefox.exe
          D:\Trend Micro\HijackThis\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://localhost/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
          O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - d:\Orbitdownloader\orbitcth.dll
          O4 - HKLM\..\Run: [egui] "D:\ESET\ESET Smart Security\egui.exe" /hide /waitservice
          O4 - HKLM\..\Run: [RemoteControl] d:\CyberLink\PowerDVD\PDVDServ.exe
          O4 - HKLM\..\Run: [LanguageShortcut] d:\CyberLink\PowerDVD\Language\Language.exe
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: Bluetooth.lnk = ?
          O4 - Global Startup: Qshelf.lnk = D:\Bookshelf 98\qshelf98.exe
          O8 - Extra context menu item: &Download all by Orbit - res://d:\Orbitdownloader\orbitmxt.dll/202
          O8 - Extra context menu item: &Download by Orbit - res://d:\Orbitdownloader\orbitmxt.dll/201
          O8 - Extra context menu item: &Download selected by Orbit - res://d:\Orbitdownloader\orbitmxt.dll/203
          O8 - Extra context menu item: &Grab video by Orbit - res://d:\Orbitdownloader\orbitmxt.dll/204
          O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\MICROS~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
          O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
          O8 - Extra context menu item: Translate with &Babylon - res://D:\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
          O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\MICROS~1\OFFICE11\REFIEBAR.DLL
          O17 - HKLM\System\CCS\Services\Tcpip\..\{69A2C76F-BD2A-4C9F-832F-840D6D04B6B8}: NameServer = 92.50.0.60 92.50.0.242
          O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
          O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - D:\ESET\ESET Smart Security\EHttpSrv.exe
          O23 - Service: ESET Service (ekrn) - ESET - D:\ESET\ESET Smart Security\ekrn.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe (file missing)
          O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
          O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - D:\VMware\VMware Workstation\vmware-authd.exe
          O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
          O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
          O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe

          --
          End of file - 4941 bytes

          harry 48



            Egghead

          • lay back , relax and chill out
          • Thanked: 129
            • Yes
            • Yes
            • Yes
            • Dribbling Pensioner
          • Certifications: List
          • Experience: Familiar
          • OS: Windows 7
          Re: can not choose show hidden files and folders
          « Reply #8 on: January 26, 2010, 01:23:39 PM »
          ok , its a matter of waiting for a malware expert , harry

          SuperDave

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Thanked: 996
          • Certifications: List
          • Experience: Expert
          • OS: Windows 8
          Re: can not choose show hidden files and folders
          « Reply #9 on: January 27, 2010, 07:55:38 AM »
          Hello k_moshen and welcome to Computer Hope Forum. My name is Superdave but you can just call me SD. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

          1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
          2. The fixes are specific to your problem and should only be used for this issue on this machine.
          3. If you don't know or understand something, please don't hesitate to ask.
          4. Please DO NOT run any other tools or scans while I am helping you.
          5. It is important that you reply to this thread. Do not start a new topic.
          6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
          7. Absence of symptoms does not mean that everything is clear.

          SUPERAntiSpyware

          Download SuperAntispyware Free Edition (SAS)
          * Double-click the icon on your desktop to run the installer.
          * When asked to Update the program definitions, click Yes
          * If you encounter any problems while downloading the updates, manually download and unzip them from here
          * Next click the Preferences button.

          •Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
          * Click the Scanning Control tab.
          * Under Scanner Options make sure only the following are checked:

          •Close browsers before scanning
          •Scan for tracking cookies
          •Terminate memory threats before quarantaining
          Please leave the others unchecked

          •Click the Close button to leave the control center screen.

          * On the main screen click Scan your computer
          * On the left check the box for the drive you are scanning.
          * On the right choose Perform Complete Scan
          * Click Next to start the scan. Please be patient while it scans your computer.
          * After the scan is complete a summary box will appear. Click OK
          * Make sure everything in the white box has a check next to it, then click Next
          * It will quarantine what it found and if it asks if you want to reboot, click Yes

          •To retrieve the removal information please do the following:
          •After reboot, double-click the SUPERAntiSpyware icon on your desktop.
          •Click Preferences. Click the Statistics/Logs tab.

          •Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

          •It will open in your default text editor (preferably Notepad).
          •Save the notepad file to your desktop by clicking (in notepad) File > Save As...

          * Save the log somewhere you can easily find it. (normally the desktop)
          * Click close and close again to exit the program.
          *Copy and Paste the log in your post

          -----------------------------------------------------------------
          Malwarebytes' Anti-Malware (MBAM)

          If you already have Malwarebytes be sure to check for updates before scanning!


          Download Malwarebytes Anti-Malware and save it to your desktop. Alternate download link

          •Double-click mbam-setup.exe and follow the prompts to install the program.

          •Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

          If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.

          •If an update is found, it will download and install the latest version.
          •Once the program has loaded, select Perform Quick Scan, then click Scan.

          •When the scan is complete, click OK, then Show Results to view the results.

          •Be sure that everything is checked, and click Remove Selected.

          •When completed, a log will open in Notepad. Save it to a convenient location like the Desktop.

          •The log is also automatically saved and can be viewed later by clicking the Logs tab in MBAM.

          Copy and Paste the contents of the report in your reply.

          •Exit MBAM.
          .
          Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.



          Open HijackThis and select Do a system scan only

          Place a check mark next to the following entries: (if there)

          O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe (file missing)


          Important: Close all open windows except for HijackThis and then click Fix checked.

          Once completed, exit HijackThis.

          Please attach or copy and paste the SAS and MBAM logs.
          Intel(R) Core (TM) i3-3220 CPU 3.30 GHz 8.0 Gb RAM Windows 8.1 with a dual boot to Windows XP  Home with SP3, Comodo  with Windows Firewall & Windows Defender