1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: folders there files gone?

Discussion in 'Virus & Other Malware Removal' started by ekih, Feb 16, 2007.

Thread Status:
Not open for further replies.
Advertisement
  1. ekih

    ekih Thread Starter

    Joined:
    Dec 8, 2002
    Messages:
    135
    I am working on a friends computer and have found that the folders in "my doc" are there but there are no files in them.
    When going to the C:\drive and double clicking on it the window comes up saying that these files are hidden are you sure you want to view. Something like that.
    When I have gone to Control Panel/ Folder Options/View, I have tried to select show hidden files and folders.
    When I tried that and closed the Folder Options after applying. It reverts back to do not show hidden file and folders.
    Even under Start/All Programs it still shows the programs but is empty when selecting any of them.
    I suspect that things are still there but I can't see them. I am really interested in my pictures folder.
    any thoughts?
     
  2. JSntgRvr

    JSntgRvr Moderator Malware Specialist

    Joined:
    Jul 1, 2003
    Messages:
    18,552
    First Name:
    José
    Hi, ekih :)

    Welcome to the forum.

    Assuming you are running Windows XP, download the enclosed folder and extract its contents to the desktop. It is a batch file. Once extracted double click on the batch file and a new document will be produced. Post its contents in a reply.
     

    Attached Files:

  3. ekih

    ekih Thread Starter

    Joined:
    Dec 8, 2002
    Messages:
    135
    Yes it is WinXP Pro SP2
    Below is the file produced.

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
    "Text"="@shell32.dll,-30500"
    "Type"="radio"
    "CheckedValue"=dword:00000001
    "ValueName"="Hidden"
    "DefaultValue"=dword:00000002
    "HKeyRoot"=dword:80000001
    "HelpID"="shell.hlp#51105"

    Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
    "ServerAdminUI"=dword:00000000
    "Hidden"=dword:00000002
    "ShowCompColor"=dword:00000001
    "HideFileExt"=dword:00000001
    "DontPrettyPath"=dword:00000000
    "ShowInfoTip"=dword:00000001
    "HideIcons"=dword:00000000
    "MapNetDrvBtn"=dword:00000000
    "WebView"=dword:00000001
    "Filter"=dword:00000000
    "SuperHidden"=dword:00000000
    "SeparateProcess"=dword:00000000
    "StartMenuInit"=dword:00000002
    "ListviewAlphaSelect"=dword:00000001
    "ListviewShadow"=dword:00000001
    "ListviewWatermark"=dword:00000001
    "TaskbarAnimations"=dword:00000001
     
  4. JSntgRvr

    JSntgRvr Moderator Malware Specialist

    Joined:
    Jul 1, 2003
    Messages:
    18,552
    First Name:
    José
    Hi, ekih :)

    Lets check the policies:

    Download the enclosed folder and extract its contents to the desktop. It is a folder containing a batch file. Once extracted double click on the batch file and a new document will be produced. Post its contents in a reply.
     

    Attached Files:

  5. ekih

    ekih Thread Starter

    Joined:
    Dec 8, 2002
    Messages:
    135
    Hope I got it attached. There is nothing to tell you that it is attached.
    Fairly long log file, didn't want to post it in this screen.
    J
     

    Attached Files:

  6. JSntgRvr

    JSntgRvr Moderator Malware Specialist

    Joined:
    Jul 1, 2003
    Messages:
    18,552
    First Name:
    José
    Hi, ekih :)

    Please create a Restore point:
    1. Click Start, point to All Programs, point to Accessories, point to System Tools, and then click System Restore.
    2. In the System Restore dialog box, click Create a restore point, and then click Next.
    3. Type a description for your restore point, such as "Before VirusScan", then click Create.

    The steps that I am about to suggest involve modifying the registry. Modifying the registry can be dangerous so we will make a backup of the registry first.

    Modification of the registry can be EXTREMELY dangerous if you do not know exactly what you are doing so follow the steps that are listed below EXACTLY. if you cannot preform some of these steps or if you have ANY questions please ask BEFORE proceeding.

    Backing Up Your Registry
    1. Go Here and download ERUNT
      (ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
    2. Install ERUNT by following the prompts
      (use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
    3. Start ERUNT
      (either by double clicking on the desktop icon or choosing to start the program at the end of the setup)
    4. Choose a location for the backup
      (the default location is C:\WINDOWS\ERDNT which is acceptable).
    5. Make sure that at least the first two check boxes are ticked
    6. Press OK
    7. Press YES to create the folder.
    Registry Modifications

    Download the enclosed folder. Save and extract its contents to the desktop. It is a Registry Entries file, RegPathfix.reg . Once extracted, double click on the RegPathfix.reg file and select Yes when prompted to merge it into the registry.

    Restart the computer and test the Folder Options.
     

    Attached Files:

  7. ekih

    ekih Thread Starter

    Joined:
    Dec 8, 2002
    Messages:
    135
    when double clicking on the regpathfix.reg file it just opens notepad with a thread for the reg.
    ?
     
  8. JSntgRvr

    JSntgRvr Moderator Malware Specialist

    Joined:
    Jul 1, 2003
    Messages:
    18,552
    First Name:
    José
    Hi, ekih :)

    Download the enclosed folder. Save and extract its contents to the desktop. It is a folder containing an .inf file, UnHookExec.inf . Once extracted, open the folder and right click on the UnHookExec.inf file and select Install. There will be no action during the installation.

    Once done, attempt to merge the regpathfix.reg into your registry, restart and try again.
     

    Attached Files:

  9. ekih

    ekih Thread Starter

    Joined:
    Dec 8, 2002
    Messages:
    135
    This time that worked for merging the fix.
    I still have the same problem though. I am not so concerned with the folder options, what I am really concerned about is the pictures in "My Pictures" file. All the folders are still there but everything is empty. I have looked at C:\Documents and Settings, and all the folders are there but nothing in the folders. This is for the 2 users, the admin account. Even sample pictures etc. are gone.
    I have also just noticed that I am not able to open the recycle bin.
    ?
     
  10. JSntgRvr

    JSntgRvr Moderator Malware Specialist

    Joined:
    Jul 1, 2003
    Messages:
    18,552
    First Name:
    José
    Hi, ekih :)

    The fact that you have had to rewrite the file association to run the registry script is showing us that is due to corrupted information in the registry. We will need to check various parts in the registry.

    Download the enclosed folder. Save and extract its contents to the desktop. It is a batch file, Query.bat . Once extracted, double click on the batch file and a new document will be produced.

    Post the contents of that document in a reply.
     
  11. ekih

    ekih Thread Starter

    Joined:
    Dec 8, 2002
    Messages:
    135
    Hi JSntgRvr
    Will do but I don't see an enclosed folder.
     
  12. JSntgRvr

    JSntgRvr Moderator Malware Specialist

    Joined:
    Jul 1, 2003
    Messages:
    18,552
    First Name:
    José
    Hi, ekih :)

    That's been happening lately, and I don't know if is it me. Here you go.
     

    Attached Files:

  13. ekih

    ekih Thread Starter

    Joined:
    Dec 8, 2002
    Messages:
    135
    I am out of town till fri. will do this fri night or sat morn.
    thanks
     
  14. JSntgRvr

    JSntgRvr Moderator Malware Specialist

    Joined:
    Jul 1, 2003
    Messages:
    18,552
    First Name:
    José
  15. ekih

    ekih Thread Starter

    Joined:
    Dec 8, 2002
    Messages:
    135
    here you go
     

    Attached Files:

  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/544717

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice