Re: weird system files

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 07/09/05


Date: Fri, 8 Jul 2005 23:49:44 -0400

As long as you're sure they're not virus files, or other malware, click Start, Run and enter CMD. Enter ATTRIB /? for the command line options for ATTRIB (Attribute). You can clear the System bit on one, or more files.

-- 
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"John" <JOhn6328@mchsi.com> wrote in message news:%23$aRSUDhFHA.320@TK2MSFTNGP09.phx.gbl...
> I'm pretty sure I'm virus free. I use Avast, PestPatrol, and Win Patrol. 
> I'm also very caeful. Also running XP 2 so it tells me if the virus 
> thing isn't up to date.
> 
> I believe it has something to do with transfering files from cd's and my 
> little hard disk usb port thing. They are all picture files.
> 
> I used sophos for awhile but had truoble updating it.
> 
> John
> 
> David H. Lipman wrote:
> 
>> From: "John" <JOhn6328@mchsi.com>
>> 
>> | I have a number of files marked as system files which shouldn't be.
>> | jpg's zip's other picture files doc files etc. etc. They were copied
>> | from disks of one sort or another.
>> |
>> | How does this happen? How can I reverse it? When I defrag it leaves
>> | these files spread out all over the disk. Every time I go to manipulate
>> | them in some way xp complains about it.
>> |
>> | Help
>> |
>> | Thanks
>> |
>> | John
>> 
>> 
>> Download MULTI_AV.EXE from the URL --
>> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>> 
>> It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
>> http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart scripts, one Link
>> (.LNK) file, this PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE.  It will
>> simplify the process of using up to 3 different Anti Virus Command Line Scanners to remove
>> viruses and various other malware.
>> 
>> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
>> This will bring up the initial menu of choices and should be executed in Normal Mode. This
>> way all the components can be downloaded from each AV vendor’s web site.
>> The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.
>> 
>> You can choose to go to each menu item and just download the needed files or you can
>> download the files and perform a scan in Normal Mode. Once you have downloaded the files
>> needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
>> during boot] and re-run the menu again and choose which scanner you want to run in Safe
>> Mode.  It is suggested to run the scanners in both Safe Mode and Normal Mode.
>> 
>> When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
>> file.
>> 
>> To use this utility, perform the following...
>> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
>> Choose; Unzip
>> Choose; Close
>> 
>> Execute; C:\AV-CLS\StartMenu.BAT
>> { or Double-click on 'Start Menu' in C:\AV-CLS }
>> 
>> NOTE: You may have to disable your software FireWall or allow WGET.EXE and/or FTP.EXE to go
>> through your FireWall to allow them to download the needed AV vendor related files.
>> 
>> * * *     Please report back your results  * * *
>> 
>>


Relevant Pages

  • Re: Virus in no access, hidden file
    ... There are anti virus News Groups specifically for this type of discussion. ... scanners for; ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ...
    (microsoft.public.windowsxp.general)
  • Re: aim virus: my startup acts like its being used for the first t
    ... the only virus software i have is norton...should i got ahead with this ... > Please download and use the following utility. ... > scanners as well as scanners from McAfee and Sophos. ... > This will bring up the initial menu of choices and should be executed in Normal Mode. ...
    (microsoft.public.security.virus)
  • Re: Infected with Bloodhound.W32.EP ... HELP
    ... | My laptop has been infected with the Bloodhound.W32.EP virus. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.scripting.virus.discussion)
  • Re: Virus in no access, hidden file
    ... > There are anti virus News Groups specifically for this type of discussion. ... > scanners for; ... > This will bring up the initial menu of choices and should be executed in Normal Mode. ... > download the files and perform a scan in Normal Mode. ...
    (microsoft.public.windowsxp.general)
  • Re: YourSiteBar and PSgaurd
    ... | I used AVG to clean the virus infected files. ... Sophos, Trend and McAfee Anti Virus Command Line Scanners to ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ...
    (microsoft.public.windowsxp.security_admin)