missing folder options.....

[amysiko]

My friend pc been infected by virus name RontokBro@Mn, it spread by data transfer, where pen drive are used widely here. There is no worry to those who have antivirus in their system and keep them update, but to the one who are not of course the system will get infected. So here the story;

That virus just infects my friend pc, and his antivirus software doesn’t detect it at all because he never update for his virus definitions. All he knows that he can’t view all hidden file on his system. He asks for my opinion and I’m asked him to update for his antivirus software and run the full scan for his system. There are a lot of file infected, not just only by that virus, but there are many more malicious program that can harm a system. The ones that should be deleted have been delete and ones that doesn’t, get quarantine. So the system is free now, but the option to view the hidden file just been disabling by that virus. So I’m trying to change the registry value from the run console, the run console also was disabling.

So what can I do then to help him see his hidden file?

[Paul Komski]

but the option to view the hidden file just been disabling by that virus
Is the option grayed or just not visible in folder options?

[amysiko]

Is the option grayed or just not visible in folder options?

not visible at all.....

[Paul Komski]

It would appear to be reg value changes as per http://www.sarc.com/avcenter/venc/data/w32.rontokbro@mm.html
6.
# Modifies the value:

"DisableRegistryTools" = "1"
"DisableCMD" = "2"

in the registry subkey:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\
Policies\System

7.
# Modifies the value:

"NoFolderOptions" = "1"

in the registry subkey:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\
Policies\Explorer\

So at least try setting the NoFolderOptions value to 0 in no. 7.

[amysiko]

So at least try setting the NoFolderOptions value to 0 in no. 7.

but i can't run the 'RUN' console on that pc. Start>Run>Regedit
that option just been disable by that @#@$ virus...

when i type 'regedit' on the run pop up screen, there will be a message said that it was been disable by an administator, but on that moment i'm log in as an administrator....so i can't change the registry value at all.

[Paul Komski]

If this is WinXP I would first try a system restore or else do a repair installation; http://www.michaelstevenstech.com/XPrepairinstall.htm

[amysiko]

yup, it is win xp, i'll try it...

[amysiko]

hmmm..... no restore point availble, i've restore that pc for the previous state, it still got effected....

[BRIJ MOHAN]

missing folder options

[amysiko]

what do you mean sir??the problem that i've faced before was solved..
do you experiences the same thing??i've find the way to solve it with little registry tweaking....:)

[Budfred]

what do you mean sir??the problem that i've faced before was solved..
do you experiences the same thing??i've find the way to solve it with little registry tweaking....:)
This person is probably a SPAMmer just testing out the board prior to a SPAM attack... Usually nonsense messages like that are from SPAMmers...

[amysiko]

ohh...so sorry sir, how can u simply judge people like that, it not nice, but im not blaming you since there are lot of people in this cyber world.....no one know others better....im really faced that problem before, and after doing some reading by my own i have already solved it,...sometimes there are too late reply or response from you guys here....but i dont mind, anyone have their own business that have to finish first.....where at the same moment i have to solve the problem quickly....and when there are reply for my postage, i have already get the answer....so, what should i do?? if u are in my condition what do u feel??sorry mr budfred, im not blaming you........

[Budfred]

ohh...so sorry sir, how can u simply judge people like that, it not nice, but im not blaming you since there are lot of people in this cyber world.....no one know others better....im really faced that problem before, and after doing some reading by my own i have already solved it,...sometimes there are too late reply or response from you guys here....but i dont mind, anyone have their own business that have to finish first.....where at the same moment i have to solve the problem quickly....and when there are reply for my postage, i have already get the answer....so, what should i do?? if u are in my condition what do u feel??sorry mr budfred, im not blaming you........

There are a number of different ways we try to determine if someone is a SPAMmer... A single post from a new member that doesn't make sense is usually placed by a SPAMbot and there isn't even a person to go with it.... As a Mod for this forum, it is my responsibility to try to sort those things out and deal with the SPAMmers as quickly as possible... If you notice, this involves one post that made no sense and a person never came back to respond further... It is quite likely that this is a bot...

If you ask a question here and then go and research and find the answer, you end up wasting the time of the people who offer to help you... Do the research first and then ask here if you can't find the answer...

[amysiko]

ohh..well sir there is no reply from you guys after 22/03/06, and i thougt the post is already closed...FYI,i subscibed for any replies that made by this forum members regarding to any post that made by me...but, after a real long waiting, there still no answer..and on 06/02/07, suddenly this mr. Brij Mohan reply the post, so what i do just tellin the truth, that i have solved the problem.....

[amysiko]

ohh..well sir there is no reply from you guys after 22/03/06, and i thougt the post is already closed...FYI,i subscibed for any replies that made by this forum members regarding to any post that made by me...but, after a real long waiting, there still no answer..and on 06/02/07, suddenly this mr. Brij Mohan reply the post, so what i do just tellin the truth, that i have solved the problem.....
Budfred:=If you ask a question here and then go and research and find the answer, you end up wasting the time of the people who offer to help you... Do the research first and then ask here if you can't find the answer...
what should i do?? should i just waiting??if you are in my condition, what do you do sir??

[karthik]

Check this
http://www.pcguide.com/vb/showthread.php?t=48675
------------------------------------------------
And you people speaking of spams please do not spam the thread. It counts 6 posts! and 7 including this

[Budfred]

amysiko,

I think you may have misunderstood what I originally said... What I was doing was warning you that the response you got was basically useless, it was probably from a bot, not a person... I wasn't trying to say you did anything wrong...

what should i do?? should i just waiting??if you are in my condition, what do you do sir??I would start with doing my own research and then I would post here if I couldn't find the answer to my question...

[magnet]

for complete solution for folder option missing
and registry editing
here is the link
[url]drvamsikrishna.blogspot.com/2007/02/solution-for-folder-options-missing_28.html/url]

this will solve your problem

[Budfred]

magnet,

Even a casual review of this forum and certainly a quick read of this thread would have told you that we are very suspicious of people who post links to what are probably their products on their first post... If your intentions are honorable, I suggest your post further about that...

[Whyzman]

Amysiko, how did you solve the problem? I see you used some registry tweaks...

Forums all over the web are easy targets for SPAMers. The SPAMmers use software programs to find web forums, register, and then post advertisements for their products. The computers with the SPAMmers software are always connected to the web...like a robot they never get tired.

We try to make it difficult for the robot software to register in our PC Guide Forums. If the robot sofware can register in our forums, then it will try to post a reply into one of the forums. Sometimes the post will be nonsense...like what happened with BRIJ MOHAN posting in your thread.

It is our experience that the robot software will do this type of posting before launching a SPAM attack into one or more of our forums.

If you look in the Bit Bucket (http://www.pcguide.com/vb/forumdisplay.php?f=39) you will see SPAM from many software robot programs (we call them "bots").

[fyi_mohit]

Heres The solution That I tried

Step 1) Open Notepad.
Step 2) Paste This Text into Notepad.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"NoFolderOptions"=dword:0000000

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Restrictions]
"NoBrowserOptions"=dword:00000000

Step 3) Go to File, Save as... "Folder Options.reg".
(You might wanna save it to your desktop.)

Step 4) Double-click the .reg file, and click Yes to add the settings to the registry.
Step 5) Reboot.
Step 6) Go to Control Panel and check...

Or In Case This Dosn't Work
Paste This in Notepad
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"NoFolderOptions"=dword:00000000

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Restrictions]
"NoBrowserOptions"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\Explorer]
"NoFolderOptions"=dword:00000000

and repeat Step 3, 4, 5 and 6 respectively.

Mohit Sharma
(F.Y.I.)

Contact for Anyother Problem: fyi_mohit at yahoo.com

[amysiko]

Whyzman:=Amysiko, how did you solve the problem? I see you used some registry tweaks...


i just go to run...type regedit, after it was being enable....
after that go to:HKCU\Software\Microsoft\Windows\CurrentVersions \Policies\
and under system and explorer i just delete any string value that related to the problem like NoFolderOptions,DisableTaskManager n etc...

to enable regedit, i juz type this code on notepad than change the extension with .inf, then right click, choose install.....and here the code..:

[version]
signature="$chicago$"
provider"urnamehere"

[defaultinstall]
addreg=unhookregkey

[UnhookRegKey]
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies \System,DisableRegistryTools,0x00000020,0

but i've to stop the virus first from running, or all the thing that i take here is useless....so thats the way i takes on enabling anything that was being disable by virii or trojans...this malcodes jus making me tired, and script kiddies juz making me more tired,and i just do this, if my or my friend antivirus not detect the virus...well i just use avg antivirus coz it is free i'm not working yet, and on my linux machine, i dont use any...

[Serosis]

And the thread necromancy award goes to...

Anyways, I have the same issue, it is caused by a virus, and funny enough most Anti-Virus don't catch it.

It runs a process called "555575188.exe" along with IE, it starts up every time no matter how many times you delete it, and the name always changes (the number). There is also a startup process that links to the same file called "Diagnostic Manager". Another thing, this virus tends to kill it's own process just to start it again with a new number set.

I got my folder options back, but now I wanna know how to get rid of this annoyance. Formatting is not an option, also no system restore points.

[Budfred]

And the thread necromancy award goes to...

Anyways, I have the same issue, it is caused by a virus, and funny enough most Anti-Virus don't catch it.

It runs a process called "555575188.exe" along with IE, it starts up every time no matter how many times you delete it, and the name always changes (the number). There is also a startup process that links to the same file called "Diagnostic Manager". Another thing, this virus tends to kill it's own process just to start it again with a new number set.

I got my folder options back, but now I wanna know how to get rid of this annoyance. Formatting is not an option, also no system restore points.Please start you own thread in the Applications and Security forum... Post a log as explained here:

http://www.pcguide.com/vb/showthread.php?t=60009