Show Hidden Files or Folders by virus

Caution:   

I recently meet people whose files has been hide by virus, after i did some analysis, I found out the files are still there but a virus had modified the file properties to ‘Hidden’ and hide all files in the thumb drive, although i tried to “Show Hidden Files” but the virus does not allow me to view them.

Folder Hide has been hidden by virus.

Solution:
I. Show Individual Files or Folders:

1. Insert the thumb drive to an empty USB slot. check your for drive letter. For an example your USB drive is assigned to , F:

2. Press Windows + R, and type cmd then press Enter

3. Type in command below,

    attrib -s -h -r f:/*.* /s /d

4. Press Enter and wait for the command to execute.

5. Open the thumb drive and you should see the files or folders that were hidden by the virus back to normal as picture below.

Folder Hide that was hide by virus, now back to normal state.

*Example: -s -h -a f:/Hide /s /d then press Enter. 

*Case folders or files name with space, you can type: -s -h -a f:/"Hide file Folder Name" /s /d then press Enter.

Note: 

*Folders or files name with space you must use quotation mark. "." 
*Hide is a folder in my USB drive that has been hidden by virus.

II. Show Hidden Files or Folders in the Whole Drive

1. Insert your USB drive in USB slot, Example your USB is assigned to drive F:

2. Press Windows + R Key and type cmd then press Enter

3. Type F: 

4. Press Enter

5. Type attrib /s /d -s -h -a

5. Press Enter


*Example: F:\>attrib /s /d -s -h -a

Attribute Command Parameters

• -  means clears an attribute
• H means hidden file attribute
• S means system file attribute
• A means archive file attribute
• R means read-only file attribute
• /S means process matching current folder and all subfolders
• /D means process folders

Tips on how to be safe and secure

• Update your Antivirus 
• Never install unknown software 
• Disable your Autorun if necessary