help with hidden files

jaxx1

jaxx1

jaxx1

Associate
Joined
4 Nov 2009
Posts
74
hi hope this makes sence,

recentley my home comp went a bit...off beat to say the least. kaspersky detected a virus.........did the norm things and now it says no threats detected.

but heres the strange thing....i panic cause all my desktop icons/shortcuts vanished along with all and every document file inc pics, vids, everything. i clicked windows to which i discovered no options on the left and the only programme that was there on the list was windows recovery. this interface looked dodgy to and said i have X amount of viruses and trojans after a 2 secon scan and now its promting me to but a premium package to get rid of it....not something windows would do, so didnt click it.



anyway i went to control panel/add remove programes and all my programes are there. and when clicking in my documents, view hidden folders eveythings there. videos play and pics view just like norm, but there all hidden and appear with a transparant view.


anyone

thanks in advance.
 
pump,


sure someone knows. dont fancy going somewere that cost £50 just to turn it on. not the most interesting post i know but any help would be appreciated cheers
 
i am no expert but i will try.
it sounds like you are still infected with a virus.

i would boot into safe mode (at startup, keep tapping f8 key and at menu, select safe mode with networking)
backup any important files onto a dvd or external hard drive

download malwarebytes http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
and do a full scan.
also wile in safe mode, go here http://support.kaspersky.com/kis2011/tools?qid=208282160
this tells you how to make a rescue cd.
this will be bootable and will scan the pc before windows starts, so has a better chance of detecting it
 
Download rkill, run it and see what it finds. I use the .scr file as the .exe can be stopped working by some trojans. Only takes a couple of seconds to do (literally). Post the results on here. :)
 
thanks for the advice, im currently using my laptop. on the comp in question i dont have any 'visible' programmes. i can get to the internet by:

control pannel/security centre/check for windows update

this brings IE up, although i norm use firfox. will this be a prob?

on a side note i have copied my 2 drives to an external hard drive. but these files are still hidden, been scanned with kaspersky and spybot. should i download rkill on my laptop and scan the external hard drive?

thanks for the help
 
I have used rkill off a USB flash drive before. If you have one, download it to your laptop (the .scr version) coppy it onto the pen drive then plug it in to your pc. It should work. It will not remove it, it will just tell you where it is hiding and stop it from working. It is a very basic program but will find most things, but that is all it does, find things and 'kills' them, until you reboot. If you just reboot the virus would come back as it has not been removed. You will have to remove it permanently with mbam, once rkill has stopped the virus from mbam working.
 
Last edited:
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 18/05/2011 at 22:41:31.
Operating System: Microsoft Windows XP


Processes terminated by Rkill or while it was running:



Rkill completed on 18/05/2011 at 22:41:49.











just followed your instructions on my laptop. doesnt come up with 'everythings ok' or anything. although my laptops fine.

so same on the PC? ive had to install it though but it doesnt seem to appear anywere after the command prompt screen. does it just install itself for the scan. in which case i should be ok on the PC, thats if it lets it install in the 1st place. the 'rkill' file is currently in my downloaded file in my docs.

thanks
 
would a trojan/malware be stoping kaspersky from updating? gets to 30% then back to 1%. so rkill will find the prob, then update kaspersky, then full system scan...that the idea?
 
19052011313.jpg




http://imageshack.us/photo/my-images/204/19052011314.jpg/


ive had to leave it running on the PC, im on night at the mo. the results on the laptop had 3 aswell (thought it was completley clean). when hitting remove will this remove just the malware or the whole thing/file? pics above are from the PC, after running rkill on the PC it didnt help kaspersky to update pass 30%?
 
Last edited:
i have created a rescue disk with Kaspersky as advised, burnt the .iso file to a cd, reset windows, pressed esc which lead to a boot menu. but ive tried booting from every thing there and it loads just as norm. what am i doing wrong?
 
There is a virus that changes the attributes of all your files to hidden and read only, that's why they appeared when you choose View Hidden Files. This also hides icons because they are just a file in a folder named desktop in your profile. You can manually change the attributes back but no quick way to do wholesale, need to take a top level folder change permissions and tell it to cascade to subfolders. Windows Directory and System Restore, etc. will not like this. Best to do a system restore to before the virus struck then run combofix because it will remove rootkit viruses that Malwarebytes misses.
 
can this be performed by selecting system restore before start up? my system restore tool within the OS looks lyk a 3rd party tool, evens tells me to buy a full version...staying away from that one!
 
Do you have Windows 7, if so hit F8 a few times just after BIOS but before Windows logo appears. Select Repair Computer then when prompted login with an Admin Account. Choose System Restore from the menu and pick a date before it all went awry.
 
windows XP m8, ive done what you said and now all the files are viewable as normal inc the desktop icons (had to do them manually though! when unchecking the 'hidden' icon at the bottom under properties of a folder it gave the option to apply to all sub folders so great news), i managed to restore the firefox icon to display in thre windows menu as before by going to add remove programes in control pannel and clicking show. didnt have time to look at any more.
so things are looking up at the min. now i tried to use the kaspersky rescue disk but i aint having any look (prob dont really know how to use it properly) although i had the option to restore to an earlier date by clicking F (forgot no.) on the HP screen before windows loads up. it said i could restore without losing any files (backed up anyway). should i give this a shot? id be a lot happier if i could get past 30% when updating kaspersky. 9th may was last update! also everytime i load up i get this appearing on the screen:

catalystcontroller.jpg
[/URL] Uploaded with ImageShack.us[/IMG]
 
I think the restore sounds like the easiest and cleanest option, as long as you are happy all your files are backed up elsewhere in case something goes wrong with the restore or it doesn't back up everything. I suspect it may take you back to a clean install, if you are lucky it will work like system restore and you can get a point in time install. Just make sure you pick a point before all the problems started. If that works get combofix from BleepingComputer and run that to make sure nothing nasty is still around. After that you can then put on MalwareBytes and run a quick scan daily and a full scan every week.
 
You must log in or register to reply here.
Back
Top Bottom