Question

  Asked: Nov 24 2007   11:19 AM GMT
  Asked by: Aliyani


"Show hidden files.." doesn't work!!!!???


Antivirus, worms, Hidden files

Hi,
One of our cmputers infected with p2p-worm.win32.malas.c that our antivirus detected and coruntine it but can't disinfect it!!!!
Now in this computer when I select "show hidden files .." it can't show hidden files and for the second time that I check this option I see that this is deselect!!!!!and I could't see hidden files!!!!!And I kow that this is the infect of this virus!!!!!
I can't delete it because it infect the svchost.exe file!!!!!
Could you please help me!!!!How can I clean this computer from this virus!!!!!
Thank you.
----
Regards
Mahnaz

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window

Answer Wiki (Improve, edit or add to this answer)


 RATE THIS ANSWER
+1
Click to Vote:
  •   1
  •  0



1) go to Run -> type regedit
2) now navigate to HKEY_LOCAL_MACHINE\SOFTWARE\
MICROSOFT\WINDOWS\
CURRENTVERSION\Explorer\
Advanced\Folder\Hidden
2) now you can see 2 keys NOHIDDEN and SHOWALL here
3) Set the CheckedValue of NOHIDDEN to 0 and CheckedValue of SHOWALL to 1
4) now try to select show hidden files and folders. This should show your hidden files and folders.
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Security and Microsoft Windows.

Looking for relevant Security Whitepapers? Visit the SearchSecurity.com Research Library.


Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

HCream  |   Nov 25 2007  11:47PM GMT

Remove the hard drive from the laptop and connect it to another computer as a slave drive(internal) or as an USB drive(external).

Do a full scan on the infected drive. Be sure “autorun” is not enable on the good computer and so is the Windows Recovery. You may need administrator privilege to access the drive if it’s in NTFS format.

Once the drive is disinfected and clear from bugs, reconnect it back to the laptop. You probably have to do a manual cleanup of the Windows registry to get rid of all references to the bug.