asked on

Folders hidden after virus

I have a PC that had a couple viruses (one was the TDSS rootkit) but was able to remove all of them. Trend and MAlwarebytes scan come up clean. My problem is that one of the effects of the viruses was to make all the folders in the "Documents and Settings" and "Program Files" folders hidden. There may be others that I just haven't found yet. Is there any way to undo all these changes without going through one by one and removing the hidden check box?

rsimsee

I recently had a client with TDSS and they had the same issue. The first time I "thought" I had gotten rid of it a system restore also unhid all of the directories. However, when I finally exterminated the issue, the folders and contents were left hidden and I was done messing with system restore, so I just manually unhid everything that needed to be unhidden.

Basically I just went to thier profile directory and selected the Favorites and My Documents directories and right clicked and unchecked the hidden box. This automatically asked me if I wanted to perform the change on just those items, or everything in the subdirectories too, which I did, and all was well with the world...

Killing the inventors of these rootkits would not be murder in my book...

ASKER CERTIFIED SOLUTION

younghv

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Ibrahim Bazarwala

Hi,
hide the folder then run the attrib "C:\Documents and Settings\User" -h /s
Above is the example for how you can make unhide 'user' folder inside the Documents and settings. You can apply same setting for the program files.
In your case the command will be
attrib c:\program files -h /s
attrib c:\Documents and Settings -h /s
Note:There must be a space between -h and /s

tmckinney01

ASKER

Perfect!