Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Hidden System32 folder from b.bat worm


  • This topic is locked This topic is locked

#1
KidsDad

KidsDad

    New Member

  • Member
  • Pip
  • 2 posts
I am unable to unhide my System32 file. I have tried to follow the instructions in a previous post between Chiu and austin_o on May 28, 2005. I have tried using Windows Explorer | Tools | Folder Options | View Tab to View Hidden files and System Files, and I have tried from the command prompt using the attrib command.

Help please.

KidsDad
5/31/05
  • 0

Advertisements


#2
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Welcome KidsDad to Geeks to Go!

Please follow these steps. Then post back in this topic with a HijackThis log made in normal mode.
  • 0

#3
KidsDad

KidsDad

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
I completed all of those steps before hand. I should have stated that in my original post.

I solved the problem. A previous post on Geekstogo helped.

I deleted the code that the worm placed in my hosts file by editing the hosts file in DOS. I am not an expert at that and I am very rusty on it. However, I managed to do it by trial and error, deleting all of the code that the worm placed below the the line that contained
127.0.0.1 localhost
in C:\WINNT\system32\drivers\etc

That and various cleanup softwares and reboots got my system32 folder visible again. Note that I never was able to get it visible using the attrib command in dos.

Thanks for getting back to me.
  • 0

#4
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Thanks for the feedback. Glad to hear everything is OK now.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP