Virus hides all files.....how to unhide the right ones and keep others hidden?

[xxsilk109xx]

I have seen lots of computers come in the past week or two with a virus that hides all files on the hard drive, making the start menu, desktop and all other folders appear to have disappeared.

Well removing the virus is not tough, but I know that there are certain files and folders that windows needs to remain hidden, so un-hiding everything is not smart or does it matter?

Is there a tool or something that will unhide everything but what is not suspossed to be unhidden?

Thanks!
Travis

 

[MobileTechie]

There is unhide.exe

Seems to do a pretty good job.

 

[Jory]

http://download.bleepingcomputer.com/grinler/unhide.exe

That will work if you know the files are hidden, but some variants of that malware actually move the shortcuts to a temp folder, or just outright deletes them if I'm not mistaken.

Makes sure you run TDSSKiller too since a variant of that rootkit is typically installed along with it.

 

[joydivision]

It just changes the folder to attributes to make it hidden. I could make a program which does that quite easily.

However for some reason I am finding only about 30% of these have TDS installed.

 

[xxsilk109xx]

i will check out unhide.exe, I remember there was a proggie for this but could not remember what it was called. Thanks!

 

[Adept PC Repair]

Also, in the Folder Options, I believe as long as you keep "Hide Protected Operating System Files" even if they are unhidden they still won't show.

 

[Appleby]

This thread is a HUGE help. It's several pages, but worth the read!

http://www.technibble.com/forums/showthread.php?t=27015