?
Solved

"System" and "Hidden" attributes mysteriously appearing on folders

Posted on 2006-12-01
7
Medium Priority
?
333 Views
Last Modified: 2010-04-03
In the last few days we have had a rash of "System" (S) and "Hidden" (H) attributes appearing on data files and folders on a Virtual Server running Server 2003.  I realize anyone who has appropriate Rights can change the attributes to a folder to "Hidden", but the owners of these folders swear they have not done this.  Secondly, it is a lot more complex for someone to assign a "System" attribute to a file or folder; so it is highly unlikely anyone of our Users would even have the knowledge to do this.

Any ideas of what could cause this phenomenon?

Thanks,

Bruce Leypoldt
The Egging Company
0
Comment
Question by:Bruce_Leypoldt
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 16

Accepted Solution

by:
Brian Pringle earned 2000 total points
ID: 18058137
This is usually caused by a virus or by spyware/adware/malware.  Download either Lavasoft AdAware or Spybot and run it.

Lavasoft AdAware
http://www.lavasoftusa.com/


Spybot Search & Destroy
http://www.safer-networking.org/en/spybotsd/index.html
0
 

Author Comment

by:Bruce_Leypoldt
ID: 18097949
I am running Windows Defender and it didn't pick up anything.  We also have Symantec Anti-Virus Corporate Edition, and it didn't pick up anything either.
0
 

Expert Comment

by:lmstua
ID: 18396471
We are experiencing the same problem on one server for 2 days now.  Yesterday we did a full scan using McAfee with current dat files.  I also spent several hours on the phone with Microsoft.  We eventually used the DOS attrib command to correct the problem but it is recurring today.  Any other ideas?  I'm getting ready to call Microsoft again right now.
0
 
LVL 3

Expert Comment

by:quinks
ID: 18465030
Leave Filemon running on the computers you think are causing this and see what happens.
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
Many businesses neglect disaster recovery and treat it as an after-thought. I can tell you first hand that data will be lost, hard drives die, servers will be hacked, and careless (or malicious) employees can ruin your data.
This video teaches viewers how to encrypt an external drive that requires a password to read and edit the drive. All tasks are done in Disk Utility. Plug in the external drive you wish to encrypt: Make sure all previous data on the drive has been …
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…
Suggested Courses
Course of the Month9 days, 21 hours left to enroll

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question