How to find hidden/cloak files in Windows 2003?
- by homemdelata
Here is the point.
I set Windows to display all the hidden files and protected operating system files but even after that, my antivirus (Kaspersky) is still getting a ".dll" file on "c:\windows\system32" saying it's a riskware 'Hidden.Object'.
I tried to find this file everytime but it's not there. So I asked one of the developers to create a service that verifies the folder each 5 seconds and, if it founds the file, copies to another place.
After a lot of research I just found out that every file with this same name on this specific server gets cloak, doesn't matter the file extension.
How can I found this kind of file? How can I "uncloak" it? How can I know what this file is doing?