|
|
nak tanya ttg hidden files nih.......
1-- di hard disk pc saya......saya dapati ada 19 objects (plus 33 hidden)....di my document saya lak...ada 8 object (plus 616 hidden)......leh tak terangkan kat saya perkara nih ok ke tak??? maksud saya gan adanya byk files2 hidden nih...bahaya ke tak??? or ok ke camner????
2- saya nak buka tgk laaa apa yg byk hidden tuh....tp saya tak leh nak buka this hidden cos....bila tekan control panel - apprearance & themes - Folder Options - view tab ........tak ada pun utk hidden or show files....so camner yaaa????? |
|
|
|
|
|
|
|
|
|
|
|
Reply #1 Eddlisa_uyuk's post
mostly, hidden files are important files. they are hidden because the developers don't want regular users to accidentally change it, unless they know what they do. to view hidden files, do this:
open My Computer --> Tools --> Folder Options --> click on View tab --> under Advanced settiings, under Hidden files and folders, select radio button for Show hidden files and folders --> click OK all the way.
|
|
|
|
|
|
|
|
|
|
|
|
Reply #1 Eddlisa_uyuk's post
something fishy about those hidden files. Did you intentionally hid those files? Or they just suddenly hidden? If you have no idea how they were hid in the 1st place, they could be viruses. Lately, they are viruses that created executables with 'folder'-like icon and they are hidden.
Please reboot in safe mode, then in explorer, do the following:
(1) Show hidden files/folder
(2) uncheck "Hide extension for know types"
Browse your my documents for anomalies |
|
|
|
|
|
|
|
|
|
|
|
Originally posted by oobi at 8-7-2007 03:22 AM 
mostly, hidden files are important files. they are hidden because the developers don't want regular users to accidentally change it, unless they know what they do. to view hidden files, do this ...
tp....kat my computer saya...under tools....
hanya ada 3 item iaitu - map network drive, dissconnect network drive, sychcronize....
no folder option...camner yaa??? |
|
|
|
|
|
|
|
|
|
|
|
Originally posted by neotoxin at 8-7-2007 07:28 AM
something fishy about those hidden files. Did you intentionally hid those files? Or they just suddenly hidden? If you have no idea how they were hid in the 1st place, they could be viruses. Latel ...
no, i didn't hide those files, i don't know, maybe they suddenly hidden....
i have done the scan virus....using the active virus shield....no virus at all
i have follow urs by reboot in safe mode, then in explorer,
but no tab under tools or others for Show hidden files/folder,
so i can't uncheck "Hide extension for know types" |
|
|
|
|
|
|
|
|
|
|
|
Reply #4 Eddlisa_uyuk's post
that was virus doing for sure.
Try this 1st (if possible):
(1) boot in safe-mode (again!  )
(2) go to start menu -> run.. and type "gpedit.msc" (w/o quotes)
(3) browse for 'User configurations' -> Windows components -> Windows explorer
(4) double-click on "Removes the folder options menu item fromthe tools menu" and set it to "Disabled".
(5) Hopefully now, your folder options menu is visible.
(6) in folder options dialog box, select View tab and set it to unhide files/folder, show file extension, and unhide protected system files (see pic)
(7) please find any anomalies in your computer (suspicious files, hidden exes, autoruns, batch files, registries). There could be plenty of them
If the 1st method did not favor you, try booting your computer in a non-windows environment for example using "winternals erd commander" or knoppix. The rest would be too much to discuss here
The main thing is to avoid autoruns of the virus files during windows start-up. Check for:
(1) autorun.ini in all drives and partition (delete them) - check for related files in the autorun.ini
(2) open regedit and check for the following key
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon. The key "Shell" should contain only "explorer.exe", key "userinit" shall only contain "C:\WINDOWS\system32\userinit.exe,". Delete if more than those entries appears
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Check this for suspicious key and value. Jot down the suspicious value and find the suspicious files in your drives. delete them
- HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Check this for suspicious key and value. Jot down the suspicious value and find the suspicious files in your drives. delete them
(3) Check startups in C:\Documents and Settings\Administrator\Start Menu\Programs\Startup, C:\Documents and Settings\All Users\Start Menu\Programs\Startup, C:\Documents and Settings\Default User\Start Menu\Programs\Startup, C:\Documents and Settings\{any other user}\Start Menu\Programs\Startup
Delete any suspicious entries
after removing all autoruns and startups, reboot windows in normal mode and install a reliable antivirus (I recommend Symantec Antivirus Corporate Edition - get it from warez sites ). Do a definition updates and run a full scan |
|
|
|
|
|
|
|
|
|
ikan_mas86 This user has been deleted
|
Reply #7 Eddlisa_uyuk's post
biasanya xde sebab dah kene virus BRontok laa tu,
ko pakai antivirus x?
pakai antivirus ape? |
|
|
|
|
|
|
|
|
|
|
|
Reply #7 Eddlisa_uyuk's post
UyuK:
Cara lain
(1) mcm dh citer kat atas tu, boot dlm non-windows environment. Yg ni aku paling suka guna "Winternals ERD Commander"
atau,
(2) bukak HDD tu, slave kat komputer lain yg ada antivirus yg reliable. Pastu run full scan. Pastu kena buat editing kat gpedit.msc
Kalu gagal jugak, bley jumpa aku |
|
|
|
|
|
|
|
|
|
|
|
Originally posted by ikan_mas86 at 9-7-2007 06:42 AM
biasanya xde sebab dah kene virus BRontok laa tu,
ko pakai antivirus x?
pakai antivirus ape?
pakai antivirus active virus shield - kaspersky |
|
|
|
|
|
|
|
|
|
|
|
Originally posted by kmkd at 9-7-2007 08:05 AM 
try search tajuk yang lebih kurang sama dengan hidden file, yang buat tajuk tu vampire aj.. aku dah bagi link untuk reg tweeker..
ni link dia
http://rapidshare.com/files/14265255/RegTweaker_v ...
dah jumpa tajuk tuh...thanks...tgh try lagi |
|
|
|
|
|
|
|
|
|
|
|
Originally posted by neotoxin at 9-7-2007 08:12 AM
UyuK:
Cara lain
(1) mcm dh citer kat atas tu, boot dlm non-windows environment. Yg ni aku paling suka guna "Winternals ERD Commander"
atau,
(2) bukak HDD tu, slave kat komputer lain yg ada ...
ok...thanks, tgh try gak |
|
|
|
|
|
|
|
|
|
|
|
tips
aritu pc aku kena sumting, Task Manager xleh bukak, xde property My Computer... edit jam pon xleh. Regited restricted by Admin. walhal aku ler admin.
solved with simple method. create another user dgn power as Admin gak. then delete your previous user yg infected tu. tp backup la ape2 yg patut, mcm My Docs, desktop,. ala, copy je kat C:\
p/s: klu tau program ape yg kacau tu, try cari small program name "Taskkill". aku lupa dl kt mane. |
|
|
|
|
|
|
|
|
|
|
|
Reply #18 tukul_kaku's post
|
baru lepas format kan? format je lagi sekali, tapi make sure sebelum format tu buang dulu virus punya autorun kat partition yg lain sama ada guna knoppix (linux) atau ERD Commander, atau slave kat pc lain |
|
|
|
|
|
|
|
|
|
|
|
Originally posted by neotoxin at 9-7-2007 07:31 PM
baru lepas format kan? format je lagi sekali, tapi make sure sebelum format tu buang dulu virus punya autorun kat partition yg lain sama ada guna knoppix (linux) atau ERD Commander, atau slave ka ...
so mmg kena buang dulu virus kat all partition laaa, baru format balik |
|
|
|
|
|
|
|
|
|
|
|
i dah ikut apa yg di bgth....and i guna RegTweaker....
so folder option dah ada.....hidden files pun dah leh off on...
thanks |
|
|
|
|
|
|
|
|
|
|
|
|
tapi tak silap aku kalau kau reboot, nanti kene buat balik regtweeker tu.. yang tu just nak senangkan process buang virus je |
|
|
|
|
|
|
|
|
|
| |
|
Post time 8-7-2007 03:12 AM
变色卡
Post time 8-7-2007 03:22 AM
Author
