Command to reveal hidden files on USB drive

Ben -  
MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention   -
Hello everyone!
Here's my issue
I have a USB drive with important data to recover that shows an empty folder, but I'm sure it contains data, so I ran the following command in the cmd >>
X: (enter) (X is the drive name)
attrib *.* -s -h /D /S (enter)

This gives me a lot of lines with Access denied at the beginning. I then removed my USB drive and plugged it back in, and some files showed up, but then the computer crashed and the files disappeared on their own.
I would like to know how to proceed when the CMD shows access denied for this command
Thank you for your help
Best regards

6 réponses

MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention   1 292
 
Hello,

Have you connected it to another PC? It might be infected

-> Download USBFix on your DESKTOP (at the bottom of the page => Download free
UsbFix is detected by some antivirus programs as being an infection, it's a false positive, temporarily disable your antivirus

-> Important -> Connect all external devices (USB sticks, external hard drives, MP3/MP4 players, smartphone, SD card, ....)

-> Launch the file by right-clicking -> Run as administrator

-> Click on Start a scan then on Full scan

-> Click on the Cleanup option and let the tool work

-> The UsbFix.txt report will appear. Post the report in your next response
The report can be found under C:\UsbFix\Log

-> If the Desktop does not reappear, press Ctrl+Alt+Del, Tab "File", "New task", type explorer.exe and confirm

--
Security contributor.
1
Ben
 
Thank you for your response, I'll check it right away
By the way, I am on Windows Vista and yes, I plugged the USB stick into another PC running Windows 10 but the PC says Unknown USB Device (Descriptor Request Failed)..
0
mohux Posted messages 28 Status Membre
 
So I managed to get this USB fix to work even though it bugged a bit when it got to the analysis step of the drive
It gives me this
What should I do? Repair the items?
Thanks to you
0
MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention   1 292 > mohux Posted messages 28 Status Membre
 
RE_

It corresponds well to a removable support infection, but it's surprising that USBFix can't handle it.

Try running USBFix in safe mode

=> Press the shift key (the arrow up above Ctrl at the bottom left)
=> While holding it down, restart the PC
=> You'll reach the startup options, release shift
=> Click on Troubleshoot => Advanced options => Startup Settings => Restart
=> The PC restarts, press the 4 or F4 key (5 or F5 if logging in with a Microsoft account)
=> You will reach the desktop in safe mode
=> Connect your USB drive
=> See if it's the same
0
mohux Posted messages 28 Status Membre > MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention  
 
I went into safe mode, here’s what the computer displays
PS: in normal mode it only displayed 1 detected item (the first one named ItunesHelper)
So should I click on repair the items now?

0
MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention   1 292 > mohux Posted messages 28 Status Membre
 
Yes, if you can bypass the two warning windows on your capture.
1
MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention   1 292
 
RE_

On which PC are you having the issue?

If it's on Vista, the key is accessible, proceed with the procedure on Vista.

If it's on Win10 and it's not recognized, it might be defective.

1
mohux Posted messages 28 Status Membre
 
Re
The PC running Windows 10 recognizes the USB key (but shows error code 43) and some files still appear (those that were displayed during the bug on Windows Vista)
Another issue, the PC running Vista does not want to download USBFix. The following message appears
0
MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention   1 292 > mohux Posted messages 28 Status Membre
 
Maybe VISTA is too old to manage the site.

If you click on at the top right, is it there?

Otherwise, download it on WIN10 and follow the procedure by plugging the USB drive into Win10.
1
mohux Posted messages 28 Status Membre > MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention  
 
The little icon corresponds to an extension for tracking emails.... otherwise, I checked the downloads, but there’s nothing.
Apparently, even on Windows 10, it gives the same message. What a hassle...
0
mohux Posted messages 28 Status Membre > MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention  
 
By the way!
I initially clicked on download and then canceled the download to check the reliability of the tool first. Since then, every time I try to download, the message in the screenshot appears.
0
mohux Posted messages 28 Status Membre > MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention  
 
The visible files on the USB drive are shortcut files... Doesn't that resemble a type of virus by any chance?
0
MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention   1 292
 
RE_

Windows Vista and important data do not mix well :-(

https://www.zdnet.fr/actualites/la-fin-du-support-etendu-de-windows-vista-c-est-pour-le-11-avril-39849864.htm

--
Security contributor.
0
Ben
 
How to do it? Do I need to switch to Windows 7 or Windows 10 first before making the change?
Because on my PC running Windows 10, going into device details shows Unknown USB Device (Device Descriptor Request Failed)..
0
MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention   1 292
 
RE_

You have a virus on your PC, but since Macintosh has taken over your case, I'll let him explain how to get rid of it.

Good luck!!!

--
Security Contributor.
0
Anonymous user
 
Hello
You shouldn't have given up
See you!
0
bazfile Posted messages 58432 Registration date   Status Modérateur Last intervention   20 245 > Anonymous user
 
Hello.
@ Macintosh.
MisteryBean warned me about what was happening on this post.
Hello
You shouldn't have given up
See you

Wrong answer, unlike MisteryBean who is a security contributor, you have no competence in this area, which is why I deleted all your other messages
Stick to the topics you are knowledgeable about, not on those you have no understanding of at all, so I ask you to refrain from intervening in the Virus/security forum or on a topic that has already been taken care of, as it will prevent others from leaving with a still infected PC.

@mohux.
MisteryBean will continue to handle your problem, as a computer worm is a rather serious infection that needs to be treated by someone qualified in the area, which is the case with MisteryBean.
0
MisteryBean Posted messages 8947 Registration date   Status Modérateur Last intervention   1 292
 
RE_

To complete, here is the virustotal detection of ItuneHelper.vbe which is the payload of the worm and some explanations about this infection.

--------------------
-------------------------------------------

So, we will try to proceed in order. I would like you to post the USBFix report as I asked you before Macintosh's intervention, along with the FRST reports:
https://forums.commentcamarche.net/forum/affich-37555797-commande-pour-fichiers-caches-dans-cle-usb#31

--------------------
-------------------------------------------

Then, without plugging in the USB stick, run a FRST scan on the Vista PC and post the two reports (see procedure above)

--------------------
-------------------------------------------

So, three reports expected:

=> USBFix from Win10
=> FRST and Addition from Vista


--
Security contributor.
0