Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Hidden System32 folder from b.bat worm


  • This topic is locked This topic is locked

#1
KidsDad

KidsDad

    New Member

  • Member
  • Pip
  • 2 posts
I am unable to unhide my System32 file. I have tried to follow the instructions in a previous post between Chiu and austin_o on May 28, 2005. I have tried using Windows Explorer | Tools | Folder Options | View Tab to View Hidden files and System Files, and I have tried from the command prompt using the attrib command.

Help please.

KidsDad
5/31/05
  • 0

Advertisements


#2
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Welcome KidsDad to Geeks to Go!

Please follow these steps. Then post back in this topic with a HijackThis log made in normal mode.
  • 0

#3
KidsDad

KidsDad

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
I completed all of those steps before hand. I should have stated that in my original post.

I solved the problem. A previous post on Geekstogo helped.

I deleted the code that the worm placed in my hosts file by editing the hosts file in DOS. I am not an expert at that and I am very rusty on it. However, I managed to do it by trial and error, deleting all of the code that the worm placed below the the line that contained
127.0.0.1 localhost
in C:\WINNT\system32\drivers\etc

That and various cleanup softwares and reboots got my system32 folder visible again. Note that I never was able to get it visible using the attrib command in dos.

Thanks for getting back to me.
  • 0

#4
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Thanks for the feedback. Glad to hear everything is OK now.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP