This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Help with Hijack.FolderOptions?

16 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi again, Oldman Errrr…. The log is the one called "CBS" right? Its kind of….bigger than the combined works of shakespear. Should I post it anyway?… Also wondering, Do I have all clear yet? are there any final tests I should preform?
Hi forgottenv,

Yes that's the file. It will show everything that SFC /SCANNOW did or wasn't able to do.

If you want to see what files it couldn't repair we can do this. This will create a smaller log.

  • Click your start button > All Programs > Accessories
  • then right click on Command Prompt and click on Run as administrator
  • In the elevated command prompt, copy and paste the bolded line

    findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >%userprofile%\Desktop\sfcdetails.txt

  • Hit enter.
This will place a file called sfcdetails.txt on your desktop.

Your logs look fine. We can clean up the tools after you post back.
Weird. For some reason it doesnt work.

It tells me FINDSTR: Cannot open Pinto\Desktop\sfcdetails.txt
and nothing happens… :unsure:

Any other ideas?
Hi Oldman, Sorry for the slow reply… Kind of got distracted! :smack: Glad you didnt close the thread! The log was 12mb but compressed down into 598kb Unfortunately 98kb too large to attach… ouch. Permission to split it into a two part .rar file or something thereabouts?
And compressing it as a rar got the size down enough to attach. Unfortunately the forum said I wasn't allowed to attach this type of file for some reason, So I renamed it a .zip to trick it into letting me attach. Hopefully you'e okay with that Thanks!

Attachments:

Hi forgottenv,

Thanks for your patience.

I finally got through that log. The only reference to not being able to repair a file was in the case of files being in use and a reboot was required.

Unable to complete Verify and Repair transaction because some of the files that need to be repaired are in use. A reboot is required to complete this operation.

It would seem the tool was finally successful.

2010-09-17 22:16:38, Info CSI 0000007c [SR] Repairing corrupted file [ml:520{260},l:28{14}]"\??\C:\Windows"\[l:24{12}]"explorer.exe" from store
2010-09-17 22:22:06, Info CSI 000002cb [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:22{11}]"wininit.exe" from store
2010-09-17 22:22:21, Info CSI 000002ea [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:22{11}]"wininit.exe" from store
2010-09-17 22:22:21, Info CSI 000002ec [SR] Repairing corrupted file [ml:520{260},l:28{14}]"\??\C:\Windows"\[l:24{12}]"explorer.exe" from store
2010-09-17 22:22:22, Info CSI 000002f7 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:22{11}]"wininit.exe" from store
2010-09-17 22:22:22, Info CSI 000002f9 [SR] Repairing corrupted file [ml:520{260},l:28{14}]"\??\C:\Windows"\[l:24{12}]"explorer.exe" from store


Let's clean up the tools and your old Restore Points and send you on your way.

From your desktop, please delete, if present
  • any notepads/logs that we created
  • MBRCheck

Create a new System Restore Point

  • Click your Start button
  • Right click My Computer and click properties
  • Click on the System Protection
  • Check to make sure that you have System Protection turned on for the listed available disk, that you want to create a restore point for
  • Click on the Create button
  • Type in a description for the restore point
  • When the restore point has finished being created, click on the Close button

Clear the old System Restore points
  • Click Start, type Cleanmgr.exe and press ENTER
  • Select the C:\ drive from the list and click OK
  • Click Disk Cleanup
  • Click Clean up System files
  • Click the More Options tab
  • Click Clean up under System Restore and Shadow Copies.
  • On the confirmation screen click Delete
  • click OK on the Disk Cleanup Screen
  • On this confirmation screen and click Delete Files.
This will remove all Restore Points except the most recent one.

Open OTL then click the Clean Up button. You may get prompted by your firewall that OTL wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will do some clean up tasks and delete some of the tools you have downloaded plus itself.

I suggest you keep MBAM, keep it updated and use it regularly.

Some Recommendations and prevention tips

Basic security consists of 1 antivirus program, 1 resident antispyware program, 1 on demand antispyware program and a firewall.

* If you are behind a router Windows firewall should be fine. Otherwise a 3rd party firewall with outbound monitoring is recommended.

Click FIREWALL for links and tutorials to good, free and paid for firewalls. (Note: Zone Alarm is becoming bloatware)

You should also use Spyware Blaster to help immunize your computer.

- SpywareBlaster will add a large list of programs and sites into your Internet Explorer
settings that will protect you from running and downloading known malicious programs.

OR

A guide to understanding and using the hosts file.

Learn how your Hosts file can protect you and how you can protect it.
Besides the Hosts file information, there are links to a very good updated hosts file, a host file manager. and some programs that can protect your hosts file.
HOSTS

Please read the info on disabling the DNS Client before installing a custom hosts file.

-Secure your Internet Explorer

From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
  • Change the Download signed ActiveX controls to Prompt
  • Change the Download unsigned ActiveX controls to Disable
  • Change the Initialize and script ActiveX controls not marked as safe to Disable
  • Change the Installation of desktop items to Prompt
  • Change the Launching programs and files in an IFRAME to Prompt
  • Change the Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.

- Keeping your Windows up-to-date is crucial to your computer's security. Please go to the Windows Update Site (using Internet Explorer) and download and install all critical updates on a regular basis

- Ensure that Automatic Update is turned on so you get all the latest patches.
Click start, control panel, click Security Center.

- Keep your antivirus program updated, as well as any other security programs you have.

-More tips and programs can be found HERE

- You may also want to read this article By Tony Klein
http://www.freedomlist.com/forum/viewtopic.php?t=22879

We will keep this thread open for a couple of days. Please post back if you have any problems or questions. Please post back when you have finished so this thread can be marked "Resolved".

Take care :adios:
Hi Oldman, Sorry to let you know…Appears I have one final issue. Under the system protection tab, Everything is unselectable and it says that "System restore has been disabled by my system administrator" Which is strange because I thought that was…me? Could you assist me in re-enabling it? Thanks!
Hi forgottenv,

Let's try this first.

Click start

a. Type gpedit.msc in the Startmenu Searchbox and press Enter. It'll open Group Policy Editor.

b. Now navigate to:

c. Computer Configuration -> Administrative Templates -> System -> System Restore

d. In right-side pane, make sure both "Turn off Configuration" and "Turn off System Restore" options are set to "Not Configured". If one or both of them is set to "Enabled", double-click on the option and set its value to "Not Configured".

Is System restore accessable now?
I checked the group policy editor, and both of the settings were already set to "Not Configured" Damnit…looks like it's something else. …and I thought I was home-free too :P
Hi forgottenv, Try . Go back to Computer Configuration | Administrative Templates | System | System Restore Since the above setting is already set to Not configured, set it to Enabled and click Apply. Then revert back the setting to Not configured, and click Apply, OK. Did that help?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI