Go Back   Technibble Forums > General Computers > Tech-to-Tech Computer Help

  Technibble Sponsor

Reply
 
Thread Tools Display Modes
  #1  
Old 04-05-2011, 02:11 PM
pg07143's Avatar
pg07143 pg07143 is offline
 
Join Date: Jan 2010
Location: Pittsburgh, Pennsylvania
Posts: 49
pg07143 is an unknown quantity at this point
Default XP - Users home directory contents invisible

I have a PC (XP Home SP3) in which the customer used MBam to remove malware. The machine seems to be running fine, but there are missing (actually invisible) folders/files... The contents of the user's home directory appear to be missing if I look using windows explorer (totally empty). However, if I open a command prompt, I can navigate inside the folders and view files that don't show in explorer. Also, I only see two programs listed when I go to 'Start'->'All Programs' (FF and MBam).

Has anybody run into a similar situation? If so, how did you resolve?

TIA!

Scott
Reply With Quote
  #2  
Old 04-05-2011, 02:25 PM
ZenTree ZenTree is offline
 
Join Date: Aug 2010
Location: UK
Posts: 616
ZenTree will become famous soon enough
Default

Had a virus recently which just made them hidden. You haven't said in your OP so I will ask, have you checked show hidden files (and even system files whilst we are at it)
Reply With Quote
  #3  
Old 04-05-2011, 03:14 PM
pg07143's Avatar
pg07143 pg07143 is offline
 
Join Date: Jan 2010
Location: Pittsburgh, Pennsylvania
Posts: 49
pg07143 is an unknown quantity at this point
Default

I haven't checked for hidden files. I'll do that as soon as I get back home. Thx!
Reply With Quote
  #4  
Old 04-05-2011, 04:03 PM
mraikes's Avatar
mraikes mraikes is online now
 
Join Date: Sep 2009
Location: Albuquerque, NM
Posts: 1,834
mraikes is a jewel in the roughmraikes is a jewel in the roughmraikes is a jewel in the roughmraikes is a jewel in the rough
Default

I've been using a little program called "unhide.exe". I just run it and walk away for a few minutes. When I come back, everything's visible again. Unfortunately I don't recall where I found it.

Of course you can do the same thing from the command line, something like "attrib -h -r -s /s /d c:\*.*"
__________________
----------------------------
Darn-Computer! Computer & Laptop Repair

"You can't buy happiness, but you can buy a ukulele. And that's pretty close." Thomas Jefferson
Reply With Quote
  #5  
Old 04-05-2011, 07:27 PM
mein's Avatar
mein mein is offline
 
Join Date: Sep 2010
Location: Aberdeen, Scotland
Posts: 112
mein is an unknown quantity at this point
Default

I had a client with a virus that did this yesterday.

Unhide.exe can be found on bleepingcomputer.com

The problem is it will unhide all the files even those that should be hidden.

I carried out a system restore first to ensure the attributes were correct. Then did a full scan and removal of the virus.
Reply With Quote
  #6  
Old 04-05-2011, 07:32 PM
SmithFamilyDesigns's Avatar
SmithFamilyDesigns SmithFamilyDesigns is offline
 
Join Date: Apr 2011
Location: Phoenix
Posts: 289
SmithFamilyDesigns is an unknown quantity at this point
Default

I'm currently working pn a machine with this issue. System restore (if available) then remove virus, otherwise the attrib command above should be fine on the users folder (and all users for the start menu)

Sent from my HTC Vision using Tapatalk
__________________
"Never argue with a fool; onlookers may not be able to tell the difference."

http://www.SmithFamilyDesigns.com
Reply With Quote
  #7  
Old 04-05-2011, 08:08 PM
mraikes's Avatar
mraikes mraikes is online now
 
Join Date: Sep 2009
Location: Albuquerque, NM
Posts: 1,834
mraikes is a jewel in the roughmraikes is a jewel in the roughmraikes is a jewel in the roughmraikes is a jewel in the rough
Default

Quote:
Originally Posted by mein View Post
......
...............
The problem is it will unhide all the files even those that should be hidden.

................

This is true, but I don't know that it matters. I've never encountered any file that had to be hidden to work correctly.

Of course files are usually hidden only to keep end users from dinking around with them. But the odds of them deliberately digging into previously hidden directories and doing damage is pretty slim. Not impossible, but rare enough that I haven't had it occur.
__________________
----------------------------
Darn-Computer! Computer & Laptop Repair

"You can't buy happiness, but you can buy a ukulele. And that's pretty close." Thomas Jefferson
Reply With Quote
  #8  
Old 04-05-2011, 09:22 PM
mein's Avatar
mein mein is offline
 
Join Date: Sep 2010
Location: Aberdeen, Scotland
Posts: 112
mein is an unknown quantity at this point
Default

Quote:
Originally Posted by mraikes View Post
This is true, but I don't know that it matters. I've never encountered any file that had to be hidden to work correctly.

Of course files are usually hidden only to keep end users from dinking around with them. But the odds of them deliberately digging into previously hidden directories and doing damage is pretty slim. Not impossible, but rare enough that I haven't had it occur.
I agree it's not critical, but I knew this customer would not understand why his directories now had files that didn't exist before. Just easier to get it as close to normal as possible.
Reply With Quote
  #9  
Old 04-07-2011, 03:57 PM
AtYourService AtYourService is offline
 
Join Date: Mar 2009
Location: CT
Posts: 915
AtYourService will become famous soon enough
Default

I had 2 virus removals in this week that both had the same virus that hid the contents of c drive , i ended up just using attrib after i cleaned it out
Reply With Quote
  #10  
Old 04-11-2011, 04:43 PM
Elemdee's Avatar
Elemdee Elemdee is offline
 
Join Date: Mar 2010
Posts: 773
Elemdee is on a distinguished road
Default

I've got one of these coming in tomorrow. Can't wait.
Reply With Quote
Reply

Tags
hidden folders

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 11:11 PM.


Powered by vBulletin®
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Technibble.com is based out of MELBOURNE, AUSTRALIA.