how to remove system attribute?

M

Maurizio

hello:
I've inserted mu USB Flash in another computer and I got virus that make
my data hidden as system files. how to remove this attibute?

(when selecting a folder, then clicking properties, the check box
"system" is checked and disabled, so I can't change it)

any help is appreciated

thanks
 
P

Philip Herlihy

hello:
I've inserted mu USB Flash in another computer and I got virus that make
my data hidden as system files. how to remove this attibute?

(when selecting a folder, then clicking properties, the check box
"system" is checked and disabled, so I can't change it)

any help is appreciated

thanks
I wonder if you've now transferred the virus to the machine on which
you're trying to fix the USB stick? It'll be a good idea to update and
run your antivirus, and also run one-off scanners like the excellent
Malwarebytes free offering, and/or McAfee Stinger.

Once you're satisfied about that, try using the ATTRIB command from a
command window. You shouldn't need to 'elevate' privileges on the
command window, as the USB stick will presumably be formatted with FAT.

One defence against USB-stick viruses is to create a folder on the
(clean) stick called autrorun.inf, and make it read-only. That will
prevent viruses creating the autorun.inf file which contains the
instructions to trigger the virus. It isn't foolproof, and some viruses
may "deal with" this precaution, but it'll thwart many of them.
 
P

Paul

Philip said:
I wonder if you've now transferred the virus to the machine on which
you're trying to fix the USB stick? It'll be a good idea to update and
run your antivirus, and also run one-off scanners like the excellent
Malwarebytes free offering, and/or McAfee Stinger.

Once you're satisfied about that, try using the ATTRIB command from a
command window. You shouldn't need to 'elevate' privileges on the
command window, as the USB stick will presumably be formatted with FAT.

One defence against USB-stick viruses is to create a folder on the
(clean) stick called autrorun.inf, and make it read-only. That will
prevent viruses creating the autorun.inf file which contains the
instructions to trigger the virus. It isn't foolproof, and some viruses
may "deal with" this precaution, but it'll thwart many of them.
http://www.techsupportforum.com/for...-files-hidden-checkbox-greyed-out-340015.html

"attrib -s -h [drive:][Path]*.* /s /d
to change only files in a specified path or directory"

*******

attrib /?

Displays or changes file attributes.

ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H] [drive:][path][filename] [/S [/D]]

+ Sets an attribute.
- Clears an attribute.
R Read-only file attribute.
A Archive file attribute.
S System file attribute.
H Hidden file attribute.
[drive:][path][filename]
Specifies a file or files for attrib to process.
/S Processes matching files in the current folder
and all subfolders.
/D Processes folders as well.

*******

You can do that kind of thing, from the command prompt.

Go to Start, type in "cmd.exe". You can right click on the
item that is found, and "Run as Administrator", if you
ever need an elevated command prompt. Philip is saying
to try it without elevation at first.

(What the command prompt window looks like.)

http://www.askdavetaylor.com/3-blog-pics/command-prompt.jpg

In the command prompt window, you can then give the
command to change the attributes.

Paul
 
B

bhorvath13

On Sat, 21 Jan 2012 13:36:35 +0200, Maurizio <[email protected]>
wrote:

There is a program called unhide.exe that will reset all attributes
other than Windows system files. Works good.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top