Restoring files HIDE by Virus.

Some virus do hide file and folder in flashdisk that  connected to a  computer or laptop infected by virus. And then we tried  to scan the  flashdisk using antivirus program. We are very happy  because antivirus  can detect and remove virus in the flashdisk, but it  doesn’t return our  files and folder hidden by the virus. I hope the  virus did not delete  the files, just make it hidden. If your files was  deleted by virus, we  need a tool to restore files. If the files was  hidden, we need to  restore our files manually using command prompt.  This tutorial is for  Windows 7 user.

Virus has modified the attribut of folders and files  to be hidden.  So, we will try to modify the folders and files attribut  to restore.
 Open command prompt from START MENU > RUN. Type CMD  and hit  enter. Go to the drive, for example your flashdisk is on drive  E. Type  “e:” and enter.
The command we use to restore files is ATTRIB. Type this command :
attrib –s –h *.* /S /D and hit enter.
Finished. If you want the easier way to restore your files, you could use Smadav Antivirus. It can detect hidden files in your flashdisk and restore them.


ATTRIBDisplays or changes file attributes.

ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H] [+I | -I] [drive:][path][filename] [/S [/D] [/L]] + Sets an attribute. - Clears an attribute. R Read-only file attribute. A Archive file attribute. S System file attribute. H Hidden file attribute. I Not content indexed file attribute. [drive:][path][filename] Specifies a file or files for attrib to process. /S Processes matching files in the current folder and all subfolders. /D Processes folders as well. /L Work on the attributes of the Symbolic Link versus the target of the Symbolic Link

No comments:

Post a Comment