how to make system files non-system

[bigalt]

I'm trying to recover from the w32/klez.e@mm virus which renamed a bunch of exe's and made them system, read-only, hidden, etc.

I can take off all of those flags except for system. Anyone know how to do that?

 

[db]

hmm, been awhile.
might have to go in dos and remove all attributes first, then make r+ h+ s+

 

[bigalt]

they are currently system files. I would like to make them normal files.

how do you remove attributes in dos?

 

[FatMan42]

bigalt - you need the attrib command. It's used like this...

Displays or changes file attributes.

ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H] [drive:][path][filename]
[/S [/D]]

+ Sets an attribute.
- Clears an attribute.
R Read-only file attribute.
A Archive file attribute.
S System file attribute.
H Hidden file attribute.
[drive:][path][filename]
Specifies a file or files for attrib to process.
/S Processes matching files in the current folder
and all subfolders.
/D Processes folders as well.

...so, if you want to make virus.exe in c:\stuff directory non-system, you'd do the following. C:\stuff>attrib -S virus.exe. The /s switch allows you to catch the contents all subfolders and /d operates on the folders themselves.