Solution to hiding files after virus infection by USB flash drive with file suffix changed to exe

Source: Internet
Author: User

After finishing the course yesterday, I went to the instructor to copy the courseware. I didn't expect to copy it back and found that the file name and suffix On My USB flash drive were changed to exe. I immediately realized that my disk was poisoned, this was the first time for me to take place. I felt quite nervous and immediately used rising star to kill viruses. What puzzled me was that after the virus was eliminated, there were not many files left on the USB flash drive, but the occupied space has not changed. I think the file may be hidden, so I used the folder option in the tool to display the file, but the hidden property of the file is gray, this method cannot always be used to show hidden files. How can this problem be solved? I have found the following solutions:

1. Use a USB flash drive virus exclusive tool, suchUSB flash drive Virus killer tool USB cleanerIt can modify the file properties hidden by viruses and kill the USB flash drive virus. USB cleaner is a pure green auxiliary antivirus tool. It detects and removes more than 70 types of USB flash drive viruses, provides a wide-spectrum scan of the USB flash drive virus, and immune the USB flash drive virus. It fixes and displays hidden files and system files, safely detach the drive letter of a Mobile Disk and other functions to fix and remove the USB flash drive virus in a comprehensive manner. at the same time, USB cleaner can quickly process the new USB flash drive virus. USB cleaner is a good helper for you to learn, work, and entertain.

2. Use anti-virus software to kill the virus. Enter cmd in "start -- run", open the command prompt of the system, enter the drive letter in it, and enter the USB drive to be modified. The related settings are as follows:

 

C: \ Documents ents and Settings \ Administrator> J: // enter the J disk directory

J: \> DIR/A // This command is used to view all the files in the current directory.

J: \> attrib folder name-r-H-S/D

The "folder name" is the name of the hidden folder on the prefix drive without a suffix. If Multiple folders are to be restored, in the command prompt, you can choose from the up and down arrow of the keypad.
J: \> name of the attrib folder-r-H-S/D. Just set the folder name.

If it is not a folder but another program, enter the following command:
J: \> attrib *. *-r-H-S/D

3. Open notepad and copy the following content:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Hidden \ showall]

"Checkedvalue" = DWORD: 00000001

Save the file name: "show hidden files. reg, (make sure to remove "Hide extensions of known file types" from "Folder Options"), double-click to run this file, and then go to "Folder Options" to set display of hidden files.

4. Copy the following line of code to notepad, save it as unhiding the file. bat, and double-click it to run it.

 

For/F "delims =" % I in ('dir/AH/S/B ') Do attrib "% I"-S-H

 

 

Command description:

For/F "delims =" % I in Loop

DIR/s displays all files in the current directory and subdirectory

Parameter/AH file with hidden attributes

Parameter/B is displayed as a short file name

Do attrib "% I"-s-h unhide the system properties of this file/folder

5. Use the Registry to modify hidden attributes

6. display the hidden folder by using the folder option in the tool, copy the content in the folder, and place it in the re-created folder. Then, delete the original folder and click OK, first, we need to kill the virus in the USB flash drive.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.