How Did It Get
Hidden?

NOT ALL PAGES ARE CONVERTED TO CELL PHONE FORMAT!

Home     Sitemap

<

www.diy-computer-repair.net logo

What is the FileHider Virus?

FileHider Virus is still active, is your Anti Virus up to date? If not then do it before trying to repair the damage...

Before you reset the attribute you have to eradicate it, does that make sense?

A question that has a lot of popularity in my old Q & A forum is about the filehider virus that sets the "Hidden" attribute on files and folders, then locks out the Explorer from removing the hidden attribute.

Then why can't some people understand this?

From: http://www.virus-database.com/description/1186-filehider.1067.shtml about the this virus. This web site is no longer available.

The current FileHider Virus is an updated version of the old DOS FileHider.1067, the updated version not only hides files it also modifies the Explorer program to keep it from removing the hidden attribute of files and folders by intercepting INT 21h (interrupt 21h is the instruction to read file attributes). Then it writes itself to the end of any executable file that is opened or executed while the OS is running. Although not destructive it is annoying and may display messages such as:

Good machine you have!
Monochrome is out! Try VGA graphics!
Making day out of night again?
Give me a rest!
Your disk is quite full, isn't it?

Insure your AV programs are up to date. To eradicate this virus from a computer running the Windows OS you should be in the 'Safe Mode'.

A file attribute is the setting that tells the Operating System what a user can do to a file, it is a set of bits that are attached to the file name in the MFT (Master File Table) when the file is created, changed, or when security is applied.

The attribute bits are:

  • Read Only

  • System

  • Hidden

  • Archive

  • Compressed

Although Explorer will only show the Read Only and Hidden attributes.

For more information on Anti Virus programs see the Self Computer Repair Unleashed 2nd Edition Manual.

You need this in your IT Tool Box! Get yours today...

The 5 Steps to high quality and cheap
DIY Computer Repairs


Get It Today...

The easiest way to reset the attribute is to use Explorer (you should be in the 'Safe Mode') and right click on the folder that was affected by the virus, go to Properties, remove the check box from "Hidden" then click apply. When the window opens asking if you want to remove the attribute from the folder or the contents click the radio button that says "Apply changes to this folder, subfolders, and files".

Do not do this to the Root of the Boot drive, this will remove the hidden attribute from the system files and you really don't want to do that.

If you are comfortable with the command line - you should be in the 'Safe Mode' - (DOS box) you could use the attrib.exe command (from the C:\Windows\System32\ folder) in each folder that has had the hidden file attribute set, this would take a little longer than using the Explorer program but will have the same results.

If you suspect that there are hidden files in a folder use the attirb.exe program to find them, check the help file by typing attrib.exe /? or attrib.exe /help at the command prompt to see a list of options and commands for the program.



Emergency Repair
D
isk (ERD) - Will Yours Work?

Emergency
Repair Disk


Custom made for you...



You keyboard isn't thirsty, and it doesn't need calcium. Milk and other liquids will ruin a keyaboard!


This Web
Site is a
labor of Love
!
But Love
doesn't pay
the bills!

Please chip in $5 to keep it live...

Need A Checklist?

Need A Repair Manual?


    Page copy protected against web site content infringement by Copyscape
 

You can:


Return to
previous page:



 

 

 

 


Thank you for visiting my web site, and please come back again.

This website is not intended for children under the age of 18

Author of this web site: Monte Russell


FTC Endorsement Rules
All testimonials on the DIY Computer Repair web site are from customers who were not paid to comment on any products!


The Flag of The United States of America!   Proudly Made in The U. S. A.

Copyright and Registered to www.diy-computer-repair.net, all thieves will be prosecuted to the fullest extent of international law!www.diy-computer-repair.net

From the Desert South West ~ Arizona, U. S. A.
Copyright DIY-Computer-Repair.Com 2006-2016

 

"You found this web site through:"

Active Search Results


Return to top of FileHider Virus

Now what part of the message about the FileHider Virus is confusing?





Home    About    Sitemap
Fix It Blog!

From the Desert South West ~ Arizona, USA
Copyright www.diy-computer-repair.net 2006-2015