Some Hidden/System Folders Not Showing in Windows Explorer

[hunt]

Archived from groups: microsoft.public.windowsxp.configuration_manage,microsoft.public.windowsxp.general (More info?)

I am experiencing some trouble viewing a few "hidden/system" folders from
Windows Explorer. I have my Folder View Options set to show all "hidden" and
"system" files, but there are a few, that are not visible/accessible in W
Explorer. I can see them in ThumbsPlus, but it will only show files that are
"image" files. My Folder Options settings are: "Display the contents of system
folders" checked, "Hide protected operating system files," unchecked, and "
Show hidden files and folders" in "Hidden files and Folders" marked.

My problem is with one .dll & one .CAB file, that NAV marks as adware files,
but cannot delete through the NAV interface. The Search function doesn't show
these files, or their folders. The folders are: "C:\WINDOWS\Downloaded Program
Files\HDPlugin1018.dll" and "The compressed file MediaGatewayX.dll within C:
\Documents and Settings\[User Name]\Local Settings\Temporary Internet
Files\Content.IE5\XJFDZ9B4\bridge-c521[1].cab."

OS is XP-Media Edition, SP-1. What setting/option am I overlooking? I have
Admin privileges for the OS setup. Any thoughts would be greatly appreciated.

TIA
Hunt

PS if I have posted to the incorrect NG's for this question, please accept my
apologies and direct me to the correct one(s).

 

[Guest]

Archived from groups: microsoft.public.windowsxp.configuration_manage,microsoft.public.windowsxp.general (More info?)

Hunt wrote:
> I am experiencing some trouble viewing a few "hidden/system" folders from
> Windows Explorer. I have my Folder View Options set to show all "hidden" and
> "system" files, but there are a few, that are not visible/accessible in W
> Explorer. I can see them in ThumbsPlus, but it will only show files that are
> "image" files. My Folder Options settings are: "Display the contents of system
> folders" checked, "Hide protected operating system files," unchecked, and "
> Show hidden files and folders" in "Hidden files and Folders" marked.
>
> My problem is with one .dll & one .CAB file, that NAV marks as adware files,
> but cannot delete through the NAV interface. The Search function doesn't show
> these files, or their folders. The folders are: "C:\WINDOWS\Downloaded Program
> Files\HDPlugin1018.dll" and "The compressed file MediaGatewayX.dll within C:
> \Documents and Settings\[User Name]\Local Settings\Temporary Internet
> Files\Content.IE5\XJFDZ9B4\bridge-c521[1].cab."
>
> OS is XP-Media Edition, SP-1. What setting/option am I overlooking? I have
> Admin privileges for the OS setup. Any thoughts would be greatly appreciated.

You're not overlooking any setting. The Download Program Files folder
and Temporary Internet Files folder both have special viewing properties
that mean they don't display in Explorer the true contents of the folders.

To empty Temporary Internet Files in IE select Tools, Internet
Options... This will bring up the Internet Options set of tabs. On the
general tab click the Delete Files... button. In the dialog that pops
up also check Delete all offline content and click OK. This should
clear the offending file(s) under Temporary Internet Files. Browse the
folder from a command prompt to verify using the /a switch on dir to see
the entire contents.

For downloaded program files try removing the contents from the command
prompt.

You might also want to read the Quick Fix Protocol for parasite removal
at http://www.aumha.org/a/quickfix.htm. This will list the tools needed
and how to use them to quickly clean your system, as well as
recommendations on what to do if there is still adware on your system
after you have completed the process.
--
Tom Porterfield
MS-MVP Windows
http://support.telop.org

Please post all follow-ups to the newsgroup only.

 

[hunt]

Archived from groups: microsoft.public.windowsxp.configuration_manage,microsoft.public.windowsxp.general (More info?)

In article <OWP1tvBqFHA.3104@TK2MSFTNGP12.phx.gbl>, tpporter@mvps.org says...
>
>Hunt wrote:
>> I am experiencing some trouble viewing a few "hidden/system" folders from
>> Windows Explorer. I have my Folder View Options set to show all "hidden"
and
>> "system" files, but there are a few, that are not visible/accessible in W
>> Explorer. I can see them in ThumbsPlus, but it will only show files that
are
>> "image" files. My Folder Options settings are: "Display the contents of
system
>
>> folders" checked, "Hide protected operating system files," unchecked, and "
>> Show hidden files and folders" in "Hidden files and Folders" marked.
>>
>> My problem is with one .dll & one .CAB file, that NAV marks as adware
files,
>> but cannot delete through the NAV interface. The Search function doesn't
show
>> these files, or their folders. The folders are: "C:\WINDOWS\Downloaded
Program
>
>> Files\HDPlugin1018.dll" and "The compressed file MediaGatewayX.dll within
C:
>> \Documents and Settings\[User Name]\Local Settings\Temporary Internet
>> Files\Content.IE5\XJFDZ9B4\bridge-c521[1].cab."
>>
>> OS is XP-Media Edition, SP-1. What setting/option am I overlooking? I have
>> Admin privileges for the OS setup. Any thoughts would be greatly
appreciated.
>
>You're not overlooking any setting. The Download Program Files folder
>and Temporary Internet Files folder both have special viewing properties
>that mean they don't display in Explorer the true contents of the folders.
>
>To empty Temporary Internet Files in IE select Tools, Internet
>Options... This will bring up the Internet Options set of tabs. On the
>general tab click the Delete Files... button. In the dialog that pops
>up also check Delete all offline content and click OK. This should
>clear the offending file(s) under Temporary Internet Files. Browse the
>folder from a command prompt to verify using the /a switch on dir to see
>the entire contents.
>
>For downloaded program files try removing the contents from the command
>prompt.
>
>You might also want to read the Quick Fix Protocol for parasite removal
>at http://www.aumha.org/a/quickfix.htm. This will list the tools needed
>and how to use them to quickly clean your system, as well as
>recommendations on what to do if there is still adware on your system
>after you have completed the process.
>--
>Tom Porterfield
>MS-MVP Windows
>http://support.telop.org
>
>Please post all follow-ups to the newsgroup only

Tom,

Thank you for the response. I had deleted the Temp Internet files, including
the offline content, however NAV still sees that DLL. I will remove the
Download Files via the C:\ prompt and check out the URL that you list.

Again, thanks,
Hunt

 

[Guest]

Archived from groups: microsoft.public.windowsxp.configuration_manage,microsoft.public.windowsxp.general (More info?)

On 23 Aug 2005 18:41:04 GMT, noone@hunt.com (Hunt) wrote:

>I am experiencing some trouble viewing a few "hidden/system" folders from
>Windows Explorer. I have my Folder View Options set to show all "hidden" and
>"system" files, but there are a few, that are not visible/accessible in W
>Explorer. I can see them in ThumbsPlus, but it will only show files that are
>"image" files. My Folder Options settings are: "Display the contents of system
>folders" checked, "Hide protected operating system files," unchecked, and "
>Show hidden files and folders" in "Hidden files and Folders" marked.

>My problem is with one .dll & one .CAB file, that NAV marks as adware files,
>but cannot delete through the NAV interface. The Search function doesn't show
>these files, or their folders. The folders are: "C:\WINDOWS\Downloaded Program
>Files\HDPlugin1018.dll" and "The compressed file MediaGatewayX.dll within C:
>\Documents and Settings\[User Name]\Local Settings\Temporary Internet
>Files\Content.IE5\XJFDZ9B4\bridge-c521[1].cab."

>OS is XP-Media Edition, SP-1. What setting/option am I overlooking? I have
>Admin privileges for the OS setup. Any thoughts would be greatly appreciated.

There are several contexts where you won't see stuff:

1) Namespace vs. file system abstraction layers

Windows Explorer is a namespace browser, and that may vary when
compared to a true file system browser. Some namespace items have no
file system equivalents, e.g. "My Computer", while others are
editorialized interpretations of file system realities, e.g. Control
Panel, or other namespaces that see the contents of a single file as
if they were a collection of separate "files"

2) Alternate Data Streams and other NTFS hiddenware

ADS have zero UI whatsoever, which is why they are so attractive to
malware. Use a dedicated ADS scanner such as Merjin's ADS Spy.

3) Rootkit effects

Malware that's active can defend itself - hardly a news flash that,
but it seems to have taken the industry by surprise for some reason.
The work "rootkit" is used for sware that changes what you see from
what there is, but that sort of functionality can be built into any
malware, if the author has the requisite smarts (i.e. can download
off-the-peg source code and paste it into the new malware project).


For these reasons, I'd scan the system "from orbit", i.e. formally,
i.e. without running ANY code off the infected HD first. That way,
the malware can't be active and can't hide itself. Anything short of
this is smoke rings; nice if it works, no surprise when it doesn't.

http://cquirke.mvps.org/whatmos.htm refers.

MS offer zilch to help you with this, but Bart does...

http://www.nu2.nu/pebuilder/

http://www.911cd.net/forums//index.php?s=2d8129076720e6e30cc2031100d2b258&showforum=30

....or if you're up to speed with Linux, you can scan (but not clean)
from that as your mOS.



>-------------------- ----- ---- --- -- - - - -
Running Windows-based av to kill active malware is like striking
a match to see if what you are standing in is water or petrol.
>-------------------- ----- ---- --- -- - - - -