Computer Hope
Software => Computer viruses and spyware => Topic started by: gev on November 04, 2009, 08:53:42 AM
-
OK, it’s again about this "Show hidden files and folders" issue.
1. Hidden and protected operating system files and folders are not viewed.
2. I go to «Folder Options\View» and check the "Show hidden files and folders" radio button and uncheck the "Hide protected operating system files" checkbox, click "OK", but no effect takes place. When I close the window and go there again, it is in the same condition as before: "Do not show hidden files and folders" radio button and "Hide protected operating system files" checkbox are checked.
3. I learnt that this is caused by virus or so. The workaround, according to advices in I.net, is to go to regedit HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\Folder\Hidden\SHOWALL and set the value of "CheckedValue" to 1 instead of 2 or 0...
Now check this out:
First of all, when I change the value, wait a couple of seconds and update (F5), it changes back to 2 again. Id est., nothing has changed, the "Show hidden files and folders" issue is still there.
I kind of found my own work around on top. Prior to changing this value, I end «Explorer.exe» process form «Task manager\Processes», change the mentioned regedit value, and then start «Explorer.exe» from «Task Manager\File\New Task» again. This time when I refresh (F5) in regedit, all is cool and the issue is gone, I can view the hidden and system files now using the enablements described above and view some a2g21.exe virus with it's autorun.inf in all drive's root directories. For some reason Norton or Mcafee do not react on it at all.
However when I delete those, restart the machine, it is reproducing again. All is like I described above again.
Now, could anybody advice what else I should delete besides a2g21.exe or what else should be changed in regedit to get rid of this plaque?
Thanks in advance
-
That sounds terribly frustrating. Just be patient though and a specialist will be with you.
-
It looks like I have some progress here (if I didn't kill that hemorrhoid at final).
As a matter of fact I can freely change my "Show hidden files and folders" and "Show system files..." settings now. How I did it?
While a full scan Symante360 found some cvasds0.dll, cvasds1.dll... files in C:\Documents and Settings\"Windows account name"\Local Settings\Temp directory. Norton couldn't take any actiones on them, I brutally deleted them instead and those a2g21.exe-s from roots of course. According to Norton it was Trojan.Packed.NsAnti and it's claimed to be a low risk http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2006-061009-4441-99
Now, of course I don't experience this behaviour, but still not sure if I have removed all the threats, since an .exe file was not foud. If have some ideas on this please share.
The truth is somewhere, there :)
-
The truth is in your logs ..... which you haven't produced yet.
Malware specialists are talented, not psychic.
Visit here (http://www.computerhope.com/forum/index.php/topic,46313.0.html) , follow directions and post the required logs.
-
Don't worry , If you want to view all the hidden files including system files, you need to change some of the registry values. They are given below.
HKEY_CURRENT_USER/Softwares/Microsoft/windows/currentversion/Explorer/Advanced hidden=1
HKEY_CURRENT_USER/Softwares/Microsoft/Windows/Currentversion/Explorer/Advanced showsuperhidden=1
HKEY_CURRENT_USER/Softwares/Microsoft/Windows/Currentversion/Explorer/Advanced superhidden=1
-
OK Karnac,
I'll post those
-
Hi Karnac,
I didn't quite get the Java part.
If I follow the http://www.java.com/en/download/installed.jsp link and find out theat my Java is up to date, is there still something I have to do in terms of Java?