XP - Users home directory contents invisible

[pg07143]

I have a PC (XP Home SP3) in which the customer used MBam to remove malware. The machine seems to be running fine, but there are missing (actually invisible) folders/files... The contents of the user's home directory appear to be missing if I look using windows explorer (totally empty). However, if I open a command prompt, I can navigate inside the folders and view files that don't show in explorer. Also, I only see two programs listed when I go to 'Start'->'All Programs' (FF and MBam).

Has anybody run into a similar situation? If so, how did you resolve?

TIA!

Scott

[ZenTree]

Had a virus recently which just made them hidden. You haven't said in your OP so I will ask, have you checked show hidden files (and even system files whilst we are at it)

[pg07143]

I haven't checked for hidden files. I'll do that as soon as I get back home. Thx!

[mraikes]

I've been using a little program called "unhide.exe". I just run it and walk away for a few minutes. When I come back, everything's visible again. Unfortunately I don't recall where I found it.

Of course you can do the same thing from the command line, something like "attrib -h -r -s /s /d c:\*.*"

[mein]

I had a client with a virus that did this yesterday.

Unhide.exe can be found on bleepingcomputer.com

The problem is it will unhide all the files even those that should be hidden.

I carried out a system restore first to ensure the attributes were correct. Then did a full scan and removal of the virus.

[SmithFamilyDesigns]

I'm currently working pn a machine with this issue. System restore (if available) then remove virus, otherwise the attrib command above should be fine on the users folder (and all users for the start menu)

Sent from my HTC Vision using Tapatalk

[mraikes]

Originally Posted by mein

......
...............
The problem is it will unhide all the files even those that should be hidden.

................

This is true, but I don't know that it matters. I've never encountered any file that had to be hidden to work correctly.

Of course files are usually hidden only to keep end users from dinking around with them. But the odds of them deliberately digging into previously hidden directories and doing damage is pretty slim. Not impossible, but rare enough that I haven't had it occur.

[mein]

Originally Posted by mraikes

This is true, but I don't know that it matters. I've never encountered any file that had to be hidden to work correctly.

Of course files are usually hidden only to keep end users from dinking around with them. But the odds of them deliberately digging into previously hidden directories and doing damage is pretty slim. Not impossible, but rare enough that I haven't had it occur.

I agree it's not critical, but I knew this customer would not understand why his directories now had files that didn't exist before. Just easier to get it as close to normal as possible.

[AtYourService]

I had 2 virus removals in this week that both had the same virus that hid the contents of c drive , i ended up just using attrib after i cleaned it out

[Elemdee]

I've got one of these coming in tomorrow. Can't wait.