How data gets hidden?

pradeep.pawar
@pradeeppawar-RAMDdD โ€ข Oct 27, 2024

My pen drive and my phone's memory card were detected by malware, after scanning all the data in them was still not visible or was hidden. In my computer the occupied space and free space were showing properly but data was not shown after opening these both flash drives.
I rebooted by system and checked these flash drive in linux what I found that there was a folder with no name and after double clicking it all my data in those flash drive was visible to me I copied all the data from both the flash drives and kept on my local hard drive, reformatted the flash drives and put them back and then I was able to see all my data normally as earlier.
Only thing which hits my mind after removal of malware why the data was not visible and how could have the malware done so. Does this also happens to the data on local drive too or only on flash drive? and how data was visible in linux?

Replies

Welcome, guest

Join CrazyEngineers to reply, ask questions, and participate in conversations.

CrazyEngineers powered by Jatra Community Platform

  • Anoop Kumar

    @anoop-kumar-GDGRCn Jan 12, 2014

    pradeep.pawarOnly thing which hits my mind after removal of malware why the data was not visible and how could have the malware done so. Does this also happens to the data on local drive too or only on flash drive? and how data was visible in linux?

    Because it changed the file attributes of your all the files, Linux uses different attribute to get whether a file is hidden or not.
    In command prompt navigate to your pen drive
    and run following. (hope your attrib shell file is not corrupted.)

    attrib -h -r -s /s /d g:\*.* 

    What this command is doing see on #-Link-Snipped-#

  • pradeep.pawar

    @pradeeppawar-RAMDdD Jan 12, 2014

    Anoop KumarBecause it changed the file attributes of your all the files, Linux uses different attribute to get whether a file is hidden or not.
    In command prompt navigate to your pen drive
    and run following. (hope your attrib shell file is not corrupted.)
    attrib -h -r -s /s /d g:\*.* 
    What this command is doing see on #-Link-Snipped-#

    thanks Anoop but can you tell me what attributes are exactly and how it changed?