Fix the phenomenon of hidden files in the explorer virus

Plug the USB into the computer as usual and suddenly find no data present;While the drive capacity is still occupied . Using all kinds of ways is still not done, do not rush to Format USB but please calmly review this article to be able to save your data.

1. Analysis of phenomena

- Currently the virus hides data on USB is spreading very fast in the network community and there are many variations with the common consequence often: hide all data on USB that you can not any way displayed again, when Copying new data to USB still works but it will inevitably evaporate after the copy process is complete .

- You use an extremely powerful Antivirus scanning program on this USB, you can see that the virus is destroyed but the data is not visible: at this time, many people believe that it is safe to use USB Format to thoroughly destroy the virus but forget that using this method means your valuable data will be gone forever.

- First of all, if you encounter this situation, you should update the latest Antivirus program to scan the whole USB to kill all the detected Viruses: the data is still not displayed even if you use the function Show hidden files and folders in Windows Explorer .

- Before we show you how to fix it, let's analyze a bit about the properties of files and folders on Windows so that we can better understand the mechanism of this virus. Normally Windows normally manages data types including File and Folder with 3 basic properties of concern:

1. Hidden (hidden attribute)
2. Read-Only (read-only attribute)
3. System (system properties, not displayed when browsing files as regular files)

For the first two properties you can view, change it by right-clicking and selecting Properties (of the file or folder). But the third attribute will normally be irreversible: to change it, you must use the Command Line (DOS command line window) or another similar software. This third attribute is the attribute that the virus adds to all the documents on your USB so that it does not appear.

- You can refer to one of the following ways to show the data is hidden by virus.

2. Some remedies:

2.1 By hand:

- Go to Start -> Run -> type cmd -> Enter .

- Next move the current folder to the drive (or your folder is hidden) by typing the command:

X: [path]

- Here X: is the drive name, " [path] " - the path may not be available (usually because the virus hides all the data on the drive, so we may not need to care about this argument).

-> Example: Here you need to move to drive G, type " G: " (G here is a USB drive)

- When you are standing in the root of the virus infected drive (finished already) we start using the command to change the properties with all files and directories:

" attrib -s -h -a * / s / d '

- After typing the above command, reopening the drive / folder will see all your files and folders appear again.

2.2. Use the Tool - Fix:

* FixAttrb (BKAV tool):

- This tool is very easy to use: activate the program to select the drive / folder as it works right away.

* UnHide Folder XP 1.0 (author Nguyen Quan):

- This is a tool to overcome quite a good situation of virus turning directory into shortcut shortcut.

- Activate the tool> click the Choose folder button to put the path to the USB drive: you can select some additional properties on the main interface> click Scan hidden to start the program (after data If you do, you can delete the shortcuts that the virus created.

* Tool USB Hidden Folder Fix 1.1 :

- Click the Browse button to enter the path to the USB drive> click the Yes button ! UnHide the Folders! Let the program start working.

3. Summary:

Experience shows that depending on the situation that the virus causes on your USB, you can choose which method to restore the data. If there is no support tool available in your hand, choose manually by the command line, if you see a USB shortcut that appears in the folder, use UnHide Folder XP 1.0 ; If there is nothing left on the drive root, use Tool USB Hidden Folder Fix 1.1 for the best results (most important thing is to make sure your USB has been cleared of the virus before proceeding.) Practice one of the above options), wish you success.