Free Republic
Browse · Search
News/Activism
Topics · Post Article

To: Long Cut

//I'm no expert (but there are certainly some on this thread), however, I'd assume that the files it found are "hidden" somehow from your "search" function. In my case, they were in the "restore" system folder, and I had to disable it before I could begin deleting the offenders. If it's enabled, it won't allow you to mess with it.//

Well, I use 'dir /a' as my file finder; I suppose something could tamper with it, but I don't know that spyware thingies tamper with DOS.


109 posted on 06/05/2004 10:16:09 PM PDT by supercat (Why is it that the more "gun safety" laws are passed, the less safe my guns seem?)
[ Post Reply | Private Reply | To 99 | View Replies ]


To: supercat
Well, I use 'dir /a' as my file finder; I suppose something could tamper with it, but I don't know that spyware thingies tamper with DOS

Under certain circumstances, that's the ONLY way to see the files. Microsoft's filesystems (NTFS - and if you're using WindowsME (not sure about Win9x) FAT32) has an "undocumented" attribute known as "SuperHidden." This hides a file, even if you're folders are set to show all files. However, a "dir /a" will show these files. BTW, if you do a search on Microsoft's knowledgebase for the word "superhidden," you will not get a single hit! IIRC, Nimda was the first virus to take advantage of this, as well as the ability to block showing the extension of the file in Windows Explorer!

Mark

123 posted on 06/05/2004 11:05:24 PM PDT by MarkL (The meek shall inherit the earth... But usually in plots 6' x 3' x 6' deep...)
[ Post Reply | Private Reply | To 109 | View Replies ]

Free Republic
Browse · Search
News/Activism
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson