Recover Virus Infected Hidden Files from Pen Drive or Flash Drive
Today my Pen Drive was hitted by a series of Trojan Viruses, so I use Avast to clear the viruses.
After scan get completed, I found the Flash Drive was completely empty with no data at all.
But used disc space is showing a lot of data.
I swithed on ‘Show Hidden files’ option in ‘Folder Options’ but no use.
I did some research and came to know that these files are hidden by Trojan Viruses within registry values.
This behavior can be changed using Command Prompt. Let’s see how it works.
Open Run (Win+R) and type cmd and press Enter.
A command Prompt will appear, type cd\ and hit enter.. This command will let the command applicable to Root directories and sub folders also.
Not type I: and Enter {Note: Type your driver letter in the place of I. (ex H, G.. etc}
Type dir/ah and Enter. This Command useful to identify the directories effected by the viruses.
Now type attrib –h –s /s /d and hit Enter [attrib –h{space}-s{space}/s{space}/d]
After a few seconds you can see your driver letter again this means the process is completed.
Now you get back all your data.
Tip:
This process is applicable not only for Pen Drive or Flash dives like External Hard Disc, but also applicable for your system drives too.
After applying this command, some of the strange folders you have never seen may appear but don't worry, they are system related files, just hide them if you don't want or try delete if possible.
After scan get completed, I found the Flash Drive was completely empty with no data at all.
But used disc space is showing a lot of data.
I swithed on ‘Show Hidden files’ option in ‘Folder Options’ but no use.
I did some research and came to know that these files are hidden by Trojan Viruses within registry values.
This behavior can be changed using Command Prompt. Let’s see how it works.
Open Run (Win+R) and type cmd and press Enter.
A command Prompt will appear, type cd\ and hit enter.. This command will let the command applicable to Root directories and sub folders also.
Not type I: and Enter {Note: Type your driver letter in the place of I. (ex H, G.. etc}
Type dir/ah and Enter. This Command useful to identify the directories effected by the viruses.
Now type attrib –h –s /s /d and hit Enter [attrib –h{space}-s{space}/s{space}/d]
After a few seconds you can see your driver letter again this means the process is completed.
Now you get back all your data.
Tip:
This process is applicable not only for Pen Drive or Flash dives like External Hard Disc, but also applicable for your system drives too.
After applying this command, some of the strange folders you have never seen may appear but don't worry, they are system related files, just hide them if you don't want or try delete if possible.
 |
| STEP 1 |
 |
| STEP 2 |
 |
| STEP 3 |
 |
| STEP 4 |
 | |
| STEP 5 |
 |
| STEP 6 |
 |
| STEP 7 |
 |
| STEP 8 |
