BleepingComputer.com: How to re-hide system folders after using unhide.exe?

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

How to re-hide system folders after using unhide.exe?

#1 User is offline   ancient3 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 11
  • Joined: 11-January 09

Posted 12 October 2011 - 12:27 PM

Hi Guys

I used unhide.exe after a virus I had... it done the trick.
However, is there an easy way to re-hide all the system files that were hidden before?

Thanks for any help.

#2 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,775
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 12 October 2011 - 03:28 PM

Hello, depending on your Operating System you should just need to reverse the change that was made.
Look at your system in this guide and put the checkmark back in the box.

How to see hidden files in Windows
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#3 User is offline   ancient3 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 11
  • Joined: 11-January 09

Posted 12 October 2011 - 04:32 PM

Hi

Thanks for the reply, the checlboxes are ticked, ie the protected operating system files. However other files that were hidden are not now and I can't remember which files they were ie c:/users appdata etc.

Thanks.

#4 User is offline   f0xh0und 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 8
  • Joined: 11-December 11

Posted 12 December 2011 - 05:36 PM

sorry for the bump... i'd like to know the answer to this too, please!! :)

#5 User is offline   f0xh0und 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 8
  • Joined: 11-December 11

Posted 13 December 2011 - 08:29 PM

wow... guess nobody knows... or cares > : ( (me, personally, i don't like having normally, not only hidden, but ESPECIALLY hidden system folders (that won't show up when you show hidden folders in windows explorer folder options) showing (and accessible)!

This post has been edited by f0xh0und: 13 December 2011 - 08:30 PM


#6 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,517
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 13 December 2011 - 10:08 PM

Unhide.exe will unhide (attrib -H) all files on any fixed disks that are present after an infection and cleaning has left them hidden and invisible. Unhide is indiscriminate and it will make all files visible with attrib -H. This includes all files hidden by the malware as well as those which are normally hidden by the operating system or hidden by the user.

Only files that are +S (system) will not have their hidden attribute removed by unhide.exe. This is because the majority of legitimate Windows files that are hidden are also +S. For example, Desktop.ini is a system file and the tool is designed not to remove hidden attribute for system files.

There is no way to effectively whitelist the files that need to be hidden normally as they are different for every computer. The attrib -H change which makes file visible is reversible for normally hidden files. To hide the files in Windows, you can reverse the steps provided in How to see hidden files in Windows. For other files not governed by Windows Folder Options you will have to manually rehide them. To do that, right-click on the file, choose properties and check the Attributes box next to Hidden.
Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#7 User is offline   f0xh0und 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 8
  • Joined: 11-December 11

Posted 13 December 2011 - 10:47 PM

thank you for your reply quietman7. i guess i can live with SOME non hidden files (the only ones i know that were normally hidden were the ones i listed (and those are only on the root c: drive -- god only knows what else that should've stayed hidden that are now 'unhidden' (like in my program files folders :S ). oh well... :\

#8 User is offline   f0xh0und 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 8
  • Joined: 11-December 11

Posted 13 December 2011 - 10:52 PM

what about the fact that if i hide, say, $recycle.bin it appears when i 'show hidden files and folders' in windows explorer (whereas, before, it remained hidden)??? :|

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users