New
#1
halp! virus set my all files to hidden and now i cant reverse it!
So yesterday I got the follow worms/virii:
-packed.vmpbad!gen1
-trojan.gen
-w32.imautorun
I realized this when this Magway FC popup kept coming up and i was wondering what the hell it was. I tried to get to the task manager but it wasnt present as a choice when i hit ctrl+alt+delete (w7). i tried to get to msconfig and my computer restarted itself.
When it restarted all of my files (in the programs menu, all my media and pictures) almost everything in my hard drive was gone! i chekced how much space my hd had and figured out all my stuff was just hidden and not erased. I couldnt access system restore even to disable it, couldnt get to folder options, etc.
Soo since AVG failed me i d/led norton and eradicated the virii.
Then I used Malwarebytes to get rid of these registry infections:
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8eygnigr-kxu6-3de9-1ijd-cwgvhwklmkyw} (Generic.Bot.H) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer\nofolderoptions (Hijack.FolderOptions) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows NT\SystemRestore\disableconfig (Windows.Tool.Disabled) -> Delete on reboot.
Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer\NoFind (Hijack.Find) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows NT\SystemRestore\DisableConfig (Windows.Tool.Disabled) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Files Infected:
C:\Program Files\Adobe\Adobe Photoshop CS5 (64 Bit)\keygen.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\Program Files (x86)\hackhound.txt (Malware.Trace) -> Quarantined and deleted successfully.
__________________________________________________ ______________
Now i can get to folder options to show all hidden files, and i can see all of my hidden files (basically everything in my hard drive). however, when i right click > properties, the "hidden" check box under attributes is greyed out and i can un-hide the file (let alone any file).
What can i do?
TO BE CLEAR: the virus made it so that all of my files (including pictures, music, movies) are hidden, however i can go to folder options and set "view hidden files" to on and i can see all of the hidden files. what i want to do is uncheck the box on the hidden attribute for all of em so that they are NOT hidden files anymore