How to unhide folders hit Win32/Dorkbot.D worm?
Solution 1
You cannot uncheck the Hidden attribute because the affected files/folders also have the System attribute enabled.
Steps to fix
- Right click in the root folder/drive of the affected items while holding the Shift key and click Open Command Window Here
- Enter the following command in the command prompt:
for /f %F in ('dir /a:hs /b') do attrib -h -s %F
When the command finishes executing, your files should be restored and the Hidden attribute checkbox will also be enabled.
Solution 2
You may also try this simple windows script for unhiding files and directories. It only prompts the user to input the drive letter then executes the vbscript.
Run your notepad, copy the code below, then save it as unhide.vbs
pc_drive = InputBox("Input drive letter" & vbnewline & "example: E:\", "Drive","E:\")
ryt = Right(pc_drive,2)
If Len(pc_drive) <> 3 or ryt <> ":\" Then
Call MsgBox("Either your input was invalid or the drive you specified doesn'texist",vbokonly,"Error")
End If
Set FSO = CreateObject("Scripting.FileSystemObject")
ShowSubfolders FSO.GetFolder(pc_drive)
Sub ShowSubFolders(Folder)
str =""
For Each Subfolder in Folder.SubFolders
str =str & " " & Subfolder.Path
subFolder.Attributes = 0
ShowSubFolders Subfolder
Next
End Sub
You could save it in your USB drive for more accessibility. Instruction how to use it can be found in the link below.
Windows Script For Unhiding Folders Hidden By Worm Virus
Related videos on Youtube
J.Olufsen
Passion for crafting state of the art software that makes an impact
Updated on September 18, 2022Comments
-
J.Olufsen over 1 year
After
Win32/Dorkbot.D worm
the folders become hidden and have system attributes (marked as critical system files). Cannot unhide folders using standard File Option dialog window. How to restore previous folders' attributes?-
Zoredache almost 12 yearsReinstall from your backup?
-
J.Olufsen almost 12 yearsThat's is the backup HDD, which is infected
-
-
Oliver Salzburg over 11 yearsAnd what does that do exactly?
-
Ramhound over 11 years@OliverSalzburg - Exactly what the accepted answer does.
-
Hiral Vadodaria about 11 yearsWhat if you'll have "%F" instead of %F? Also, be sure to re-read your text when you'll post and format it a little. It will be much easier to read. I did it for you, though.