إضغط لتفاصيل الإعلانات



Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Share
  1. #1
    Join Date
    Jan 2008
    Location
    Egypt
    Posts
    3,946
    Blog Entries
    1
    Rep Power
    16

    Unhappy Option of showing Hidden folders and files doesn't work - Autorun virus

    Dear All,

    I really need your help

    the Problem is :

    the option of showing
    the hidden folders
    and files doesn't work,

    Can anyone know why??

    and

    How I can solve this??


    thanks All


  2. Facebook Comments - تعليقـك على الفيس بوك يسعدنا ويطور مجهوداتنـا


  3. Forum Ads:

  4. Forum Ads:

    اضفط هنا لمعرفة تفاصيل الإعلانات بالموقع


  5. Forum Ads:

    -->

  6. #2

  7. #3

    Default

    1.(Go to Start --> Run, then type Regedit

    2. Navigate to the registry folder HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
    CurrentVersion\Explorer\Advanced\Folder\Hidden\SHO WALL

    3. Find a key called CheckedValue.
    4. Double Click CheckedValue key and modify it to 1.
    (This is to show all the hidden files.)

    Follow this link
    http://www.technize.com/2007/05/13/s...s-not-working/

  8. Forum Ads:

  9. #4
    Join Date
    Nov 2007
    Location
    Arab world!
    Posts
    6,169
    Blog Entries
    4
    Rep Power
    10

    Default

    I upload this tools for your case
    http://www.el-malak.net/view.php?file=e02125f7f4
    Use RRT tool to enable the locked feature AND RESTART the PC directly!s.
    When you boot again go to safe mode also then use the patch and the steps below.



    Try to do that from safe mode.
    I made a patch to delete this virus that named Fouad.bat .
    Copy the patch at every partition like c:/ or d:/
    run the patch
    sometimes the virus create another names of virus files so you can add it by yourself in the patch.
    the virus files for sure are hidde, one of them is autorun and one else with random name and may have the extension " .com"

    Disable the windows restore as this advanced virus use the system restore folder to restore itself if you delete the virus files.
    If you found the Turn off system restore is dammed by group policy so the virus made a GP to close this feature so you have to open this feature from group policy by open Start > Run> GBedit.msc > Computer Configuration > Windows component >System restore.
    Enable the system restore as in the below image and click Apply> OK.
    Hint: You can click again in the Turn Off System restore and back the option to not configured and you will find the option is enabled at the windows Turn off system restore option.





    Now you be able to turn off the system restore.
    Restart your PC.
    Login to safe mode again.
    if you found the hidden files and folders not appeared use the RRT tool again many more and more.
    After the hidden files appear so you will find two folders named: System Volume Information and RECYCLER.
    You have to delete the contents of the two folders.
    When you try to open the System Volume Information you may get ACCESS Denied.
    Your account should be a local administrator then Open the SECURITY tab for the folder and add your account simply by writing you account name and Click check name then Click Apply > OK. See below Image.


    Now you can open the folder.
    Try to delete all contents. "You may find some files won't delete so don't worry and keep them".

    Do all of these steps at all partitions and try to do all these process as fast as you can and do restart.

    Try to use the others anivirus tools and also something recommended like Kaspersky antivirus scanner and use them in the same time with the manual process you are doing!.

    Hope that will help you!

  10. #5
    Join Date
    Jan 2008
    Location
    Egypt
    Posts
    3,946
    Blog Entries
    1
    Rep Power
    16

    Unhappy

    Quote:
    Originally Posted by mohamadoz
    1.(Go to Start --> Run, then type Regedit

    2. Navigate to the registry folder HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
    CurrentVersion\Explorer\Advanced\Folder\Hidden\SHO WALL

    3. Find a key called CheckedValue.
    4. Double Click CheckedValue key and modify it to 1.
    (This is to show all the hidden files.)

    Follow this link
    http://www.technize.com/2007/05/13/s...s-not-working/



    thanks so much mohamadoz
    for your fast help
    but I really found this website
    http://blog.techiezone.in/windows/wi...ows-explorer/#
    after writing the topic
    and before I saw your reply
    but I am so so sad when you said
    it is a virus
    because My PC had been formated a week ago
    so I don't know what I should do
    ?????????

  11. Forum Ads:

  12. #6
    Join Date
    Jan 2008
    Location
    Egypt
    Posts
    3,946
    Blog Entries
    1
    Rep Power
    16

  13. #7
    Join Date
    Nov 2007
    Location
    Arab world!
    Posts
    6,169
    Blog Entries
    4
    Rep Power
    10

  14. #8
    Join Date
    Jan 2008
    Location
    Egypt
    Posts
    3,946
    Blog Entries
    1
    Rep Power
    16

    Default

    Do What You Like
    but I'd like to tell You that the right Path of the Group Policy is this:
    Start>Run>GPedit.msc>Computer Configuration >Administrative Templates>System>System restore.
    another something please:
    where will be the two folders
    System Volume Information
    and RECYCLER.
    thanks again



  15. #9
    Join Date
    Dec 2007
    Location
    Cairo, Al Qahirah, Egypt, 115351105145884, Cairo, Egypt
    Posts
    2,229
    Blog Entries
    1
    Rep Power
    15

  16. #10
    Join Date
    Jan 2008
    Location
    Egypt
    Posts
    3,946
    Blog Entries
    1
    Rep Power
    16

    Default

    Mohamed Fouad
    I'd like to tell you about
    the results that I get after
    doing your steps:
    First
    I couldn't found the Security tab in the folders although all My partitions are NTFS
    Second
    when I scanned the RRT tool that you had uploaded
    Norton told me it is a virus
    Now
    all My Last request is that
    I want to be sure
    that My PC doesn't have any Viruses.
    and this is a snapshot of My C Drive
    Last edited by hopy_braya; 13-03-2009 at 10:01 AM.

  17. #11
    Join Date
    Nov 2007
    Location
    Arab world!
    Posts
    6,169
    Blog Entries
    4
    Rep Power
    10

    Thumbs up

    Quote:
    Originally Posted by hopy_braya
    Mohamed Fouad

    I'd like to tell you about
    the results that I get after
    doing your steps:
    First
    I couldn't found the Security tab in the folders although all My partitions are NTFS
    To show security tab:
    Open My computer > Open TOOLS > Folder option > View tab > Go to last row and unckeck "Use simple file sharing".

    Second
    when I scanned the RRT tool that you had uploaded
    Norton told me it is a virus
    It's not a virus but you can close the antivirus when using it.
    Now
    all My Last request is that
    I want to be sure
    that My PC doesn't have any Viruses.
    and this is a snapshot of My C Drive




    From screen shot you seems that you delete the virus files but there is a file named service!! it's not a system file so review this file.

    Hope everything is good with you now!

  18. #12
    Join Date
    Nov 2007
    Location
    Arab world!
    Posts
    6,169
    Blog Entries
    4
    Rep Power
    10

    Default

    Quote:
    Originally Posted by hopy_braya
    Do What You Like

    but I'd like to tell You that the right Path of the Group Policy is this:
    Start>Run>GPedit.msc>Computer Configuration >Administrative Templates>System>System restore.
    You are right and i attach an image in the post
    another something please:
    where will be the two folders
    System Volume Information
    and RECYCLER.
    thanks again

    My computer > Tools > Folder options >View > Uncheck Hide protected operating system

  19. #13

  20. #14
    Join Date
    Jan 2008
    Location
    Egypt
    Posts
    3,946
    Blog Entries
    1
    Rep Power
    16

    Default

    what trik you mean Mohamadoz???
    and I 'd like ask Mohamed Fouad :
    how I can review the folder that you refer to in your post
    "From screen shot you seems that you delete the virus files but there is a file named service!! it's not a system file so review this file."
    I am sorry for
    Inconvenience All of You Guys
    and thanks a lot


  21. #15
    Join Date
    Nov 2007
    Location
    Arab world!
    Posts
    6,169
    Blog Entries
    4
    Rep Power
    10

    Default

    It's a file not a folder it's named "service".
    Open it with notepad and check if it related to any program you have or what!
    Don't worry a lot it's just for verification.
    The virus seems not exist now at your system.

Similar Threads

  1. Replies: 0
    Last Post: 23-03-2012, 07:11 PM
  2. How You Can Know that Your Processor Doesn't Support VT...???
    By hopy_braya in forum Programs & Maintenance
    Replies: 0
    Last Post: 19-01-2012, 11:34 PM
  3. Replies: 0
    Last Post: 11-05-2010, 01:31 PM
  4. Replies: 0
    Last Post: 19-01-2010, 03:40 PM
  5. [Req.]Anti-virus for windows server
    By maw_1984 in forum Programs & Maintenance
    Replies: 4
    Last Post: 25-03-2008, 02:41 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

أقسام المنتدى

الروابط النصية

تابع جروبنا على الفيس بوك

صفحة Egypt Engineers على الفيس بوك

تابعنا على linkedin

جروبنا على الياهو جروب