Solved

Files Attributes Changed after virus

Posted on 2013-05-28
5
352 Views
Last Modified: 2013-06-11
Attributes on shared files on a server were changed after virus infection. They have read only and system attributes. How can I change them back to allow users to access and write to these files?

Thanks,
SR
0
Comment
Question by:splitrockit
  • 2
  • 2
5 Comments
 
LVL 35

Expert Comment

by:Joseph Daly
Comment Utility
Are they set to hidden and system? If so we had that same virus and this powershell script should help you out.

gci \\server\share -force | foreach {$name = $_.name
$name = "\\server\share\$name"
attrib $name -s -h}

This will take a main path and the iterate through all files and folders removing the hidden and system attributes.
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
Comment Utility
A simple:

attrib *.* /s -s -h

from a command prompt at the top level of the folder should be just as effective.
0
 

Author Comment

by:splitrockit
Comment Utility
I have some roaming profiles that are set to read only. I have run the commands listed. They still remain read only. I have full ownership of the files. If I change them manually it shows the command run. But the file still remains read only. Any suggestions?

Thanks,
SR
0
 
LVL 76

Expert Comment

by:Alan Hardisty
Comment Utility
Are the users logged in and thus using the profiles when you are running the command or logged out and not using the profiles?
0
 

Author Closing Comment

by:splitrockit
Comment Utility
Thanks
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now