locked
Missing Folder Options RRS feed

  • Question

  • Hello There, Im new here and Recently cleaned a virus that infected my machine via Active X In Interenet Explorer.

      I cleaned the virus out but now When i got to Folder and click "Organize" the option "Folder and Search Options" Is no longer highlighted. I checked the event log and saw this:


    I got this before i fixed the problem:

    - System




    - Provider




    [ Name] Microsoft-Windows-Security-Auditing




    [ Guid] {54849625-5478-4994-a5ba-3e3b0328c30d}




    EventID 5038




    Version 0




    Level 0




    Task 12290




    Opcode 0




    Keywords 0x8010000000000000



    - TimeCreated




    [ SystemTime] 2008-12-05T07:42:44.817Z




    EventRecordID 33190




    Correlation



    - Execution




    [ ProcessID] 4




    [ ThreadID] 52




    Channel Security




    Computer Romeo-Laptop




    Security

    - EventData




    param1 \Device\HarddiskVolume1\Windows\System32\zazagenu.dll







    and this after i fixed the problem:



    - Provider




    [ Name] Microsoft-Windows-Security-Auditing




    [ Guid] {54849625-5478-4994-a5ba-3e3b0328c30d}




    EventID 4624




    Version 0




    Level 0




    Task 12544




    Opcode 0




    Keywords 0x8020000000000000



    - TimeCreated




    [ SystemTime] 2008-12-05T07:46:07.934Z




    EventRecordID 33219




    Correlation



    - Execution




    [ ProcessID] 672




    [ ThreadID] 804




    Channel Security




    Computer Romeo-Laptop




    Security
    - EventData



    SubjectUserSid S-1-0-0



    SubjectUserName -



    SubjectDomainName -



    SubjectLogonId 0x0



    TargetUserSid S-1-5-7



    TargetUserName ANONYMOUS LOGON



    TargetDomainName NT AUTHORITY



    TargetLogonId 0x27cce



    LogonType 3



    LogonProcessName NtLmSsp



    AuthenticationPackageName NTLM



    WorkstationName



    LogonGuid {00000000-0000-0000-0000-000000000000}



    TransmittedServices -



    LmPackageName NTLM V1



    KeyLength 0



    ProcessId 0x0



    ProcessName -



    IpAddress -



    IpPort -



    So now i dont know what to do.. is there a way To restore that option. Please let me know.. Thank you
    Saturday, December 6, 2008 3:04 PM

Answers

  • Hi,

     

    First update your anti-virus program to its latest version and then perform a full virus scan to make sure all viruses are deleted.

     

    If the issue persists, please use one of the following two methods to troubleshoot the issue:

     

    Method 1 Using Registry Editor

    ====================

    1.    Launch Regedit.exe and navigate to:

     

    HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer

    -and-

    HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer

     

    2.    Delete the NoFolderOptions value (if found) from the above locations.

     

    3.    Exit the Registry Editor.

     

    4.    Restart the computer and test the result.

     

    Method 2 Using Group Policy Editor

    ======================

    Group Policy Editor is not available in Windows XP Home Edition and Windows Vista Home Editions. For all editions of Windows XP and Windows Vista, you may use the .reg file (under paragraph "Registry fix") to remove the Policy setting.

     

    Note that this only resets the NoFolderOptions per-user Policy, whereas NoFolderOptions can be a per-machine setting as well.

     

    1. Launch GPEDIT.MSC.

     

    2. Navigate to the following branch:

     

    User Configuration | Administrative Templates | Windows Components | Windows Explorer

     

    3. Double-click Removes the Folder Options menu item from the Tools menu.

     

    4. Set it to Not configured.

     

    5.    Restart the computer and test the result.

     

    Note: If viruses still exist on your computer, the issue may remain or reappear. Therefore, please make sure all viruses are deleted before trying the above methods.

     

    Hope it helps.

     

    Tim Quan - MSFT

     

    Monday, December 8, 2008 8:22 AM
    Moderator