Link to home
Start Free TrialLog in
Avatar of Seni
Seni

asked on

How to unhide folders on Win 2008 using CMD

Hi,

I think i have been attacked by virus and some folders have change attribute to Hidden and I have tried some CMD command unsuccessful, I have tried (attrib –h *.*  and many other cmd command related to attrib)
How to I fix this?
Note: the folder is not accessible to all my 1500 workstatios
Avatar of slappy901i
slappy901i

did you make sure that the share wasn't unshared?
attrib -h *
Avatar of Seni

ASKER

do i need to unshare before running the cmd command?
Have you checked permissions on the folder? Changed ownership? change ownership to the AD administrator and give modify to Domain users. Does that work? Security permissions will have to be set...even to List or read the directory(s).
no... do not unshare it.

Check the permissions of the folder in question. You can also use the /s switch to unhide all folders recursivley. In otherwords all files and subfolders.
Avatar of Seni

ASKER

checked all that, but remember am talking about hidden attribute folders which i think has nothing to do with security
I understand,


attrib *.* -h /s

Avatar of Seni

ASKER

ok Slappy
but what will be the full command which goes with that switch?
I just tested it on one of my test boxes that is 2008.
Oh, try this as well

attrib *.* -H /s /d

The /d switch also process folders.. Sorry I forgot about that above.
Avatar of Lucian Constantin
First thing you should do is to get rid of that virus, otherwise you could try change the attribute in vain - the virus will set them back to hidden.
Second thing - do you try to run the command as administrator or at least an user that has the necessary right do do that attribute change?...
luconsta is right, I made the mistake of assuming that you are running these commands under elevation. Be sure you run these commands elevated. You can also use the runas process to force elevation.
Avatar of Seni

ASKER

yes am doing all this while login as admin, what specific virus and removal tool plese
For "specific removal tool" you have to find the virus first - this implies an antivirus solution that could at least identify that virus and maybe also cure the virus, just search the market for one appropriate for you and even in the trial period could be very usefull to clean up - for example I have used BitDefender for Business that has an administrative console and installed the antivirus remotely on 20 workstations and in the evaluation period for 30 days I have cleaned up the Confiker virus from my network.

One other thing to remember - some tools should be "run as administrator" even you are logged as Admin, because in Win7/Win2008 even the Administrator is running with lower priviledges.

Another thing to try - disconnect that server from network and try to run command to the console of that server - to check if the "server" is the problem or maybe another workstation that could be virused is playing with your files.
SOLUTION
Avatar of Seni
Seni

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
In this case try run this command:

ATTRIB -H -S *.* /S

and see if is working
Avatar of Seni

ASKER

Google the solution and I manage to resolve the problem by using iReset tool (http://www.sergiwa.com/modules/mydownloads/singlefile.php?cid=2&lid=10)