unable to set "show hidden files and folders"

[Adam Young]

I am unable to set "show hidden files and folders".
I am running XP Professional SP 2. Dell 1GHz Pentium system.

When I go to file option, click view, then click the button:
[x] show hidden files and folders, click apply, click OK.

Than, when I click file option, view, again,
the same button has been remove and enable the button - "Do not show hidden
files and options".

What did I do wrong? Is there something else I did not do?

Thank you.

 

[Adam Young]

I am unable to set "show hidden files and folders".
I am running XP Professional SP 2. Dell 1GHz Pentium system.

When I go to file option, click view, then click the button:
[x] show hidden files and folders, click apply, click OK.

Than, when I click file option, view, again,
the same button has been remove and enable the button - "Do not show
hidden
files and options".

What did I do wrong? Is there something else I did not do?

Thank you.

Then I go to regedit
Hkey_current_user\software\microsoft\windows\currentversion\explorer\advance
I changed the value of "Hidden" from 0 to 1.
But I am unable to make this value set to 1 permanently.

But, when I go to C:\Documents and Settings\
I cannot see the hidden folders. Then, I check and set file option,
check marked [x] show hidden files and folders. Still no hidden files.

When I go back to regedit, and the "hidden" value is now back to 0.

 

[CreateWindow]

Hi Adam,

Have a look here: http://www.techspot.com/vb/topic65215.html

Read the entire post. If you have a "good" XP machine somewhere, export the
.......\Advanced\Hidden..... Keys from HKLM and HKCU and import them to your
machine.

You may still have an active virus. Download the free AVG Antivirus and do a
sweep!

Good luck,
CreateWindow - http://mymessagetaker.com

 

[Adam Young]

Hi Adam,

Have a look here: http://www.techspot.com/vb/topic65215.html

Read the entire post. If you have a "good" XP machine somewhere, export
the ......\Advanced\Hidden..... Keys from HKLM and HKCU and import them
to your machine.

You may still have an active virus. Download the free AVG Antivirus and do
a sweep!

Good luck,
CreateWindow - http://mymessagetaker.com

OK, thank you a bunch. I got it fixed with the "Hidden\Showall\CheckedValue"
set DW = 1.

It the spyware "mppds.exe and mppds.dll" done me in.
I do not know how it got it.
Its not shown in any of the other virus scanner, except CA spyware scanner.

 

[Adam Young]

Read the entire post. If you have a "good" XP machine somewhere, export

OK, thank you a bunch. I got it fixed with the
"Hidden\Showall\CheckedValue" set DW = 1.

Well, I spoke too early. I still have this problem.
This "Show hidden file" is un-set every time after I boot.

Where can I set this once and it would not keep resetting at every boot?

Or, am I still have other bug in my system. Multiple scan with CA &
TrendMicro shown nothing. Thanks.

 

[CreateWindow]

Well,

Might be time to re-install. You could try rootkitrevealer I suppose. Whilst
that may find something - getting rid of it may not be easy.

Would be quicker to backup your data and start again.

You have run msconfig I guess? Uncheck all startup modules and see if that
helps. If its returning on re-boot, that would indicate a startup malware is
present?

Good luck
CreateWindow

 

[Adam Young]

Well,

Might be time to re-install. You could try rootkitrevealer I suppose.
Whilst that may find something - getting rid of it may not be easy.

Would be quicker to backup your data and start again.

You have run msconfig I guess? Uncheck all startup modules and see if that
helps. If its returning on re-boot, that would indicate a startup malware
is present?

Good luck
CreateWindow

Well, found I have mppds virus.
But unable to remove it from system.
I keep coming back.

I can delete the c:\windows\mppds.exe file.
But I cannot the c:\program files\common files\microsoft
shared\MSInfo\sysinfo1.dll.
I tried boot from XP system CD and run the Recovery Console, but will not
allow me to access any folder outside of c:\windows. Can you help?

 

[Elmo]

Well, found I have mppds virus.
But unable to remove it from system.
I keep coming back.

I can delete the c:\windows\mppds.exe file.
But I cannot the c:\program files\common files\microsoft
shared\MSInfo\sysinfo1.dll.
I tried boot from XP system CD and run the Recovery Console, but will not
allow me to access any folder outside of c:\windows. Can you help?

Have you tried running your a/v program in Safe Mode? And if it has the
option, schedule a boot scan.

 

[Adam Young]

Have you tried running your a/v program in Safe Mode? And if it has the
option, schedule a boot scan.

Joe, what is a/v program? Can you tell me what is the best way to start in
Safe mode? Thanks.

 

[Rock]

Joe, what is a/v program? Can you tell me what is the best way to start in
Safe mode? Thanks.

AV=AntiVirus. For safe mode restart the computer, as the BIOS splash screen
disappears repeatedly tap the F8 key until the Advanced options menu
appears. Select safe mode and press enter.

Here are some links for cleaning malware.

Malware Removal
http://www.elephantboycomputers.com/page2.html#Removing_Malware

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Richard Harper's Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

 

[Adam Young]

Our company and my boss is doing the right thing to keep our work
environment safe and orderly for us employees. We are not allow to run those
unknown virus or spyware or adware removal programs, except these
approved programs.

MicroTrend did not have any name for this, neither are McAfee & Norton has
name for this either.
Sophos called this Troj/QQPass-JDD. They do list the manual removal steps.
But did not say what to remove.

 

[Nightowl]

Sophos called this Troj/QQPass-JDD. They do list the manual removal steps.
But did not say what to remove.

Hi Adam

If you look under the Advanced tab on that Sophos page, you'll see
details of the files and registry entries created by the virus.

Good luck!

 

[cquirke (MVP Windows shell/user)]

On Thu, 26 Apr 2007 09:46:52 +1000, "CreateWindow"

Might be time to re-install. You could try rootkitrevealer I suppose. Whilst
that may find something - getting rid of it may not be easy.

Not a malware specialist, I see ;-)

One should suspect malware activity whenever unexpected things happen,
and if you're going to "just start again" every time, and then ASSume
your "data" restore doesn't restore the malware as well...

Better to do formal malware scans, even though MS provides blow-all
tools for this in XP. Fortunately, Bart does, though it can be hard
work integrating and updating scanners, etc.

That's the sort of value a malware-orientated tech may bring to the
party. The post I'm replying to, was not from such a tech.

You have run msconfig I guess? Uncheck all startup modules and see if that
helps. If its returning on re-boot, that would indicate a startup malware is
present?

Can check from Safe Cmd Only, if you really can't get a HD-independent
OS and tools to bear on the problem. That often works.

Someone's going to suggest "online scanners". These are as sensible
as a hostage victim shouting out "hang on, I'm sure I've got a gun in
my handbag somewhere" - ASSuming active malware is going to let you
reach the true av site, initiate a scan, and let itself be cleaned.

Google( Bart PE )

-------------------- ----- ---- --- -- - - - -

Running Windows-based av to kill active malware is like striking
a match to see if what you are standing in is water or petrol.

 

[CreateWindow]

Okay already,

Good old Bart! Yes, I have been using Bart's network boot disk for
ghosts for 8 years now. His PE is cool indeed.
OP's seeking help in this group would probably not know what a preinstalled
environment is.
Correct, I'm not a malware specialist, but I can write device driver code
for Longhorn beta 3 and Windows NT 3.0 and all in between.
I have never caught any virus or malware on my dev machine. I keep monthly
(30 GB) ghost images of my system drive so I can always go back - is that
paranoid?
Probably ;-)
Thanks for the tips,

CreateWindow