How data gets hidden?

pradeep.pawar
Member • Jan 12, 2014

How data gets hidden?

My pen drive and my phone's memory card were detected by malware, after scanning all the data in them was still not visible or was hidden. In my computer the occupied space and free space were showing properly but data was not shown after opening these both flash drives.
I rebooted by system and checked these flash drive in linux what I found that there was a folder with no name and after double clicking it all my data in those flash drive was visible to me I copied all the data from both the flash drives and kept on my local hard drive, reformatted the flash drives and put them back and then I was able to see all my data normally as earlier.
Only thing which hits my mind after removal of malware why the data was not visible and how could have the malware done so. Does this also happens to the data on local drive too or only on flash drive? and how data was visible in linux?

Replies

Howdy guest!

Dear guest, you must be logged-in to participate on CrazyEngineers. We would love to have you as a member of our community. Consider creating an account or login.

Replies

Anoop Kumar

Member • Jan 12, 2014
pradeep.pawar
Only thing which hits my mind after removal of malware why the data was not visible and how could have the malware done so. Does this also happens to the data on local drive too or only on flash drive? and how data was visible in linux?
Because it changed the file attributes of your all the files, Linux uses different attribute to get whether a file is hidden or not.
In command prompt navigate to your pen drive
and run following. (hope your attrib shell file is not corrupted.)
```
attrib -h -r -s /s /d g:\*.* 
```
What this command is doing see on #-Link-Snipped-#
Are you sure? This action cannot be undone.
Cancel
pradeep.pawar

Member • Jan 12, 2014
Anoop Kumar
Because it changed the file attributes of your all the files, Linux uses different attribute to get whether a file is hidden or not.
In command prompt navigate to your pen drive
and run following. (hope your attrib shell file is not corrupted.)
```
attrib -h -r -s /s /d g:\*.* 
```
What this command is doing see on #-Link-Snipped-#
thanks Anoop but can you tell me what attributes are exactly and how it changed?
Are you sure? This action cannot be undone.
Cancel