Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

What`s Hidden Extension Viros Files?


  • Please log in to reply
17 replies to this topic

#1 taenamo

taenamo

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 20 November 2007 - 09:40 AM

i get it in a computer shop.... after i insert my flash drive to there usb and open it in my home.. there was a file that unkown to me.. has a extension file AVI. i scan it with free edi avg. and it was describe as a hidden extension

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,600 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:27 AM

Posted 20 November 2007 - 11:16 AM

File Extension .AVI

To unhide file extensions, you need to Reconfigure Windows XP to show hidden file extensions. Double-click on My Computer, go to Tools > Folder Options and click on the View tab. Scroll down and uncheck "Hide file extensions for known file types", and hit Apply > OK.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 taenamo

taenamo
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 23 November 2007 - 06:53 AM

ei quitman,

i did what you told me to do,but before i could click the apply button the window gone or it is like when you minimize a window.but isnt.
and when i apply it already. it automatical back to hide it... is it a viruz???

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,600 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:27 AM

Posted 23 November 2007 - 06:57 AM

Go to Start > Run and type: cmd
press Ok
At the command prompt, copy/paste:
cd \
dir /as /ah
press Enter.
Please advise what files are showing.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 taenamo

taenamo
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 24 November 2007 - 02:28 PM

quitman,i cant paste it.. cmd automatically close when i try to paste it....

after i open the cmd after a few seconds it close automatically

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,600 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:27 AM

Posted 24 November 2007 - 03:41 PM

Go to Start > Run and type: cmd
press Ok
At the command prompt, copy/paste:
cd \
dir /as /ah >>"C:\Output.txt"
press Enter.
A text file named output.txt will be saved in the root directory (C:\Output.txt).
Open the text file, copy and paste the contents into your next reply.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 taenamo

taenamo
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 24 November 2007 - 04:23 PM

i cant paste anything... it automatically close the program..

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,600 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:27 AM

Posted 24 November 2007 - 06:54 PM

Please download MsnCleaner.zip and save to you Desktop.
  • Extract (unzip) the file to your desktop. (click here if your not sure how to do this) but DO NOT use it yet.
  • Reboot your computer in "SAFE MODE" using the F8. To do this restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A boot menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".
  • Double-click MsnCleaner.exe to run the tool.
  • Click the "Analyze" button.
  • A report will be created after the scan and will be saved to C:\MsnCleaner.txt.
  • If it finds an infection, click the "Deleted" button.
  • Reboot normally and post the contents of MsnCleaner.txt in your next reply.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 taenamo

taenamo
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 26 November 2007 - 07:26 AM

it only detect this...




- Logfile MSNCleaner 1.4.8 by www.forospyware.com
- Created Logfile: 11/26/2007 on 2:19:44 PM
- Operative System: Windows XP
- Boot mode: Normal
_________________________________________

Detected files: 1
Deleted file: 0
Undeleted Files: 0

C:\autorun.inf

#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,600 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:27 AM

Posted 26 November 2007 - 10:11 AM

autorun.inf is what I was looking for it to find and remove.

Now please insert your flash drive as it appears you may have a flash drive infection.

Download Flash_Disinfector.exe by sUBs and save it to your desktop.
  • Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
  • The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
  • Wait until it has finished scanning and then exit the program.
  • Reboot your computer when done.
Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder...it will help protect your drives from future infection.

Then perform at least one of these online Virus scans:
(The following require Internet Explorer to work. Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component.)
BitDefender Online Scanner <- Add a check by "Autoclean".
ESET Nod32 Online Scanner <- Vista compatible but Internet Explorer must be Run as Administrator.
F-Secure Online Scanner <- Be sure to follow the directions on the F-Secure page for proper Installation. (also checks for rootkits).

If you still cannot Reconfigure Windows XP to show hidden files, folders do this.

Go to Start Run and type: regedit
  • Click OK.
  • On the left side, click to highlight My Computer at the top.
  • Go up to File Export
    • Make sure in that window there is a tick next to "All" under Export Branch.
      Leave the "Save As Type" as "Registration Files".
      Under "Filename" put RegBackup.
  • Choose to save it to C:\
  • Click save and then go to File Exit.
Click on the link below:
http://www.kellys-korner-xp.com/xp_tweaks.htm
Scroll down to #129 and click "Restore Folder Options Under Tools" in the left column. Go to File, choose "Save page as" All Files and save folderoptions.reg to your desktop. Double-click on that file and choose "Yes" to merge it into the registry when prompted. Once you get a successful message delete the file and reboot.

Let me know if that resolves the problem.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#11 taenamo

taenamo
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 28 November 2007 - 06:12 AM

thx quitmen, i already resolve it :thumbsup:

#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,600 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:27 AM

Posted 28 November 2007 - 10:14 AM

Good job.

Now you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recent Restore Point.
  • Go to Start > Run and type: Cleanmgr
  • Click "OK".
  • Click the "More Options" Tab.
  • Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#13 taenamo

taenamo
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 09 December 2007 - 07:22 AM

ei quitmen,

their been something wrong.if i insert some CD in the drives,it didnt autoplay like it usually do.i have to manually right click it then play it

#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,600 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:27 AM

Posted 09 December 2007 - 10:08 AM

As you have already found out, keeping Autorun enabled on USB and other removable drives has become a significant security risk due to the increasing number of malware variants that can infect them and transfer the infection to your computer. Autorun is intended as a convenience to automatically start an installer when removable media is inserted into the computer but I recommend disabling the Autorun feature on removable drives as a method of prevention.

Are you sure you want to enable that feature again?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#15 taenamo

taenamo
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 10 December 2007 - 06:08 AM

i see.... if i ever want it back,what should i do??i'll just delete the mscleaner backup folder????




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users