1 reply to this topic

[shakuni]

<history lesson>
Recently my computer (that runs windows) was infected by a virus.After researching a little bit i found that it copied itself in %systemroot%\windows\system32 directory.But even after enabling "show hidden files" i could not find it.Then I realised that may be disabling "hide protected operating system files" would show it ,and there it was.So I booted in safe mode and deleted its exe files and registry entries.
</history lesson>

My question is that how can i change the attributes of the file so that it becomes protected OS file.is there some api for it?

[White Scorpion]

<history lesson>
Recently my computer (that runs windows) was infected by a virus.After researching a little bit i found that it copied itself in %systemroot%\windows\system32 directory.But even after enabling "show hidden files" i could not find it.Then I realised that may be disabling "hide protected operating system files" would show it ,and there it was.So I booted in safe mode and deleted its exe files and registry entries.
</history lesson>

My question is that how can i change the attributes of the file so that it becomes protected OS file.is there some api for it?

You change the file attributes to s for system.

You can do this manually with attrib +s <filename> in the command prompt or you can set it using SetFileAttributes.