[GiacJr]

My mum's flash drive got a virus on it, and i wanted to try and get to the virus.
It was in G:\driver\usb\usb_driver, so I typed G:\driver into the address bar.
I got into the G:\driver folder, but nothing was there..so I typed G:\driver\usb.
And it took me to the recycle bin.
So using a .bat file I had made up from another time, I unhid the \driver folder that was in G:\.
Then once i had easy access into it, i unhid the \usb folder. I had a .bat file that reversed the recycle bin hiding trick, which had been done to \usb....but it didn't work.
So now i'm stuck with a folder that has had the recycle bin hiding trick done to it, and i need to find a way to undo it.

Click
There's a pic showing my problem.

For those interested;
the script to unhide folders:

attrib -h -s driver

The script I used to try and undo the recycle bin trick:

attrib -h -s "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}"
ren "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" usb

Any help IS appreciated!!

[BananasGoMoo]

try using your antivirus to delete it.

[GiacJr]

Well, I would have tried this, but I want to get TO the virus, not delete it.

[The_Mega_ZZTer]

There is no "ren" command in Windows. The command is "rename"

Did you try to delete the driver folder? That would be the easiest option. If you encouter errors in Explorer try "rmdir /s G:\driver" in cmd.exe

You can also try "del G:\driver\usb\desktop.ini" as desktop.ini is used for folder customizing and could be used to make the folder act like the Recycle Bin from within explorer. However cmd.exe would be unaffected so you could still reach the folder that way.

Or, just use the movefile tool by Sysinternals to delete G:\driver on boot, and then reboot and it will be gone (as long as Windows mounts it as the same drive letter. If it doesn't, use Drive Management in My Computer > right click > Manage to manually assign it a different drive letter and it should get the same letter next boot).

OR just backup the drive and wipe it and put the files back.

[BananasGoMoo]

GiacJr posted:

Well, I would have tried this, but I want to get TO the virus, not delete it.

why do you not want to delete it?

[GiacJr]

the virus has already been removed, but i scanned the \usb folder with AVG, and there's still 2 files in there.
I want to get to them. :x

[The_Mega_ZZTer]

Ha, the file he was trying to get to was the desktop.ini file I mentioned, which was making the folder act like the recycle bin like I thought.

[GiacJr]

I figured out a way; I put the \usb folder into a .rar, then I opened the .rar. Inside was this:
desktop.ini
inside this:
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}


thanks for your help guys :) all folders to do with it have been removed