USING THE ATTRIB COMMAND TO HIDE AND UN-HIDE FILES/FOLDERS

_______________________________________________________________________
ATTRIB
===============================================================
    After studying this command you come to understand the operation of common viruses
hides you files and folders in your removable media (Flash disk, Hard Disk and so on).

And also learn how to unhide the hidden files manually using the attrib command.
Displays or changes file attributes, that also include making file/folders visible or hidden

ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H]

Command Pattern [drive:][path][filename] [/S [/D] [/L]]

Example c:/tutorial/test.txt

c:                 represents drive:
/tutorial/         represents path
filename         represents filename

  +   Sets an attribute.
  -   Clears an attribute.
 
 
  R   Read-only file attribute.
  A   Archive file attribute.
  S   System file attribute.
  H   Hidden file attribute.
      Specifies a file or files for attrib to process.
  /S  Processes matching files in the current folder
      and all sub-folders.
  /D  Processes folders as well.

USAGE EXAMPLE
 attrib +h *
attrib    - is the command for the attribution of files or folders
  +        - indicates the action should be postive, that is make active
  h        - means to hide
  *          - star or wildcard it a character that indicates that, the action should include everything
within that folder.

HIDING FILES USING THE ATTRIB COMMAND

UN-HIDING FILES USING THE USING THE ATTRIB COMMAND

Command
 attrib +h *
attrib    - is the command for the attribution of files or folders
  -        - indicates the action should be Negative, that is make deactivate "h"
  h        - means to hide
  *          - star or wildcard it a character that indicates that, the action should include everything
within that folder.

Note: you can only hide and unhide folders by using the ( /s /d ) switches.

USEFUL ATTRIB COMMAND

attrib -s -h -r /s /d *.*

This command will show all the hidden files hid by virus in your removable media.

But before running this command you will need to change the command execution
folder to the removable media path. If your removable media is F: for example, you will need to
use the command F:
cd means change working directory/folder and F: is the device drive letter, that is the path or location

    After doing this the command prompt will change its location to my removable media "F"


Print PDF