How to find hidden/cloak files in Windows 2003?

Posted by homemdelata on Server Fault See other posts from Server Fault or by homemdelata
Published on 2010-05-10T22:24:17Z Indexed on 2010/05/10 22:34 UTC
Read the original article Hit count: 230

Here is the point.

I set Windows to display all the hidden files and protected operating system files but even after that, my antivirus (Kaspersky) is still getting a ".dll" file on "c:\windows\system32" saying it's a riskware 'Hidden.Object'.

I tried to find this file everytime but it's not there. So I asked one of the developers to create a service that verifies the folder each 5 seconds and, if it founds the file, copies to another place.

After a lot of research I just found out that every file with this same name on this specific server gets cloak, doesn't matter the file extension.

How can I found this kind of file? How can I "uncloak" it? How can I know what this file is doing?

© Server Fault or respective owner

Related posts about hidden-files

Related posts about windows-server-2003