How to Locate Viruses Using the Attrib Command

PDF download Download Article
PDF download Download Article

This wikiHow teaches you how to find and remove a virus that you know by name from your Windows computer. To do so, open the Command Prompt as an administrator and type your directory name. Find your virus, and then run the delete prompt.

Quick Steps

  1. Open the Command Prompt.
  2. Type your directory name and press Enter .
  3. Type attrib -r -a -s -h *.* and press Enter .
  4. Find your virus name.
  5. Type del [virus name] and press Enter .

For popular FAQs on using command prompt to locate viruses, jump to more common questions .

Part 1
Part 1 of 2:

Opening Command Prompt

PDF download Download Article
  1. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/9\/95\/Locate-Viruses-Using-the-Attrib-Command-Step-1-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-1-Version-2.jpg","bigUrl":"\/images\/thumb\/9\/95\/Locate-Viruses-Using-the-Attrib-Command-Step-1-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-1-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    Click the Windows logo in the bottom-left corner of the screen, or press the ⊞ Win key on your keyboard.
    • For Windows 8, place your mouse cursor in the top-right corner of the screen, then click the magnifying glass icon when it appears.
  2. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/f\/f6\/Locate-Viruses-Using-the-Attrib-Command-Step-2-Version-3.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-2-Version-3.jpg","bigUrl":"\/images\/thumb\/f\/f6\/Locate-Viruses-Using-the-Attrib-Command-Step-2-Version-3.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-2-Version-3.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    Doing so will search your computer for the Command Prompt app, which will pop up at the top of the search menu.
    • If you're using Windows XP, you'll instead click the Run app on the right side of the Start menu.
    Advertisement
  3. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/1\/15\/Locate-Viruses-Using-the-Attrib-Command-Step-3-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-3-Version-2.jpg","bigUrl":"\/images\/thumb\/1\/15\/Locate-Viruses-Using-the-Attrib-Command-Step-3-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-3-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    It resembles a black box. Doing this will invoke a drop-down menu.
    • If you're using Windows XP, you'll instead type cmd.exe into the Run window.
  4. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/c\/cb\/Locate-Viruses-Using-the-Attrib-Command-Step-4-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-4-Version-2.jpg","bigUrl":"\/images\/thumb\/c\/cb\/Locate-Viruses-Using-the-Attrib-Command-Step-4-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-4-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    It's near the top of the drop-down menu. Doing so will open Command Prompt with administrator privileges.
    • You'll need to confirm this choice by clicking Yes when prompted.
    • If you're using Windows XP, you'll click OK to open Command Prompt.
    • You won't be able to run Command Prompt in administrator mode if you're on a restricted, public, or networked computer (e.g., a library or school computer).
    5. Advertisement
Part 2
Part 2 of 2:

Locating and Deleting Viruses

PDF download Download Article
  1. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/2\/2e\/Locate-Viruses-Using-the-Attrib-Command-Step-5-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-5-Version-2.jpg","bigUrl":"\/images\/thumb\/2\/2e\/Locate-Viruses-Using-the-Attrib-Command-Step-5-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-5-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    This will typically be the letter on the disk drive (e.g., "C:").
  2. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/4\/48\/Locate-Viruses-Using-the-Attrib-Command-Step-6-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-6-Version-2.jpg","bigUrl":"\/images\/thumb\/4\/48\/Locate-Viruses-Using-the-Attrib-Command-Step-6-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-6-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    This will change the Command Prompt's search location to your selected directory.
  3. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/f\/fe\/Locate-Viruses-Using-the-Attrib-Command-Step-7-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-7-Version-2.jpg","bigUrl":"\/images\/thumb\/f\/fe\/Locate-Viruses-Using-the-Attrib-Command-Step-7-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-7-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    The "attrib" command forces all hidden, read-only, archived, and system files to display in Command Prompt, and the "-r -a -s -h *.*" section of the command removes these attributes from non-legitimate files.
    • Any legitimate system files won't have their attributes removed, and you'll see "Access Denied" listed to the left of them.
  4. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/0\/05\/Locate-Viruses-Using-the-Attrib-Command-Step-8-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-8-Version-2.jpg","bigUrl":"\/images\/thumb\/0\/05\/Locate-Viruses-Using-the-Attrib-Command-Step-8-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-8-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    Doing so will display all previously hidden system files' names.
  5. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/4\/4f\/Locate-Viruses-Using-the-Attrib-Command-Step-9-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-9-Version-2.jpg","bigUrl":"\/images\/thumb\/4\/4f\/Locate-Viruses-Using-the-Attrib-Command-Step-9-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-9-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    If you know the virus' name, you'll simply need to scroll up to it. Otherwise, look for files ending in ".inf" and ".exe" that don't look familiar.
    • Before proceeding, be sure to double-check any file names you suspect of being viruses by looking them up.
    • Common virus names include "autorun.inf" and "New Folder.exe". [1]
  6. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/f\/f3\/Locate-Viruses-Using-the-Attrib-Command-Step-10-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-10-Version-2.jpg","bigUrl":"\/images\/thumb\/f\/f3\/Locate-Viruses-Using-the-Attrib-Command-Step-10-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-10-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    Doing so will remove the virus from your computer. [2]
    • For example: to delete the "autorun.inf" virus, you'd type in del autorun.inf .
  7. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/c\/c1\/Locate-Viruses-Using-the-Attrib-Command-Step-11-Version-2.jpg\/v4-460px-Locate-Viruses-Using-the-Attrib-Command-Step-11-Version-2.jpg","bigUrl":"\/images\/thumb\/c\/c1\/Locate-Viruses-Using-the-Attrib-Command-Step-11-Version-2.jpg\/aid1471465-v4-728px-Locate-Viruses-Using-the-Attrib-Command-Step-11-Version-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/3.0\/\">Creative Commons<\/a><br>\n<\/p><p><br \/>\n<\/p><\/div>"}
    The virus should no longer affect your system. You may even notice a slight increase in computer running speed or app response time.
    8. Advertisement

Common Questions: Removing Viruses with CMD

Can I find malware with the Command Prompt?

You can find viruses and malware with the Attrib command in Command Prompt. Once located, you can delete them from your computer.

How do I clean my computer using CMD?

Use the command: attrib -r -a -s -h *.* to find any viruses on your computer. If you find any, use the command: del [virus name] .

What is the CMD.exe virus?

This virus mimics the Command Prompt, an application that comes with your device. If you suspect you have a virus, consider running an antivirus scan if nothing comes up in the Command Prompt.

Video

Tips

Submit a Tip
All tip submissions are carefully reviewed before being published
Name
Please provide your name and last initial
Submit
Thanks for submitting a tip for review!

You Might Also Like

How to
Navigate to a Different Folder in the Command Prompt
How to
Format a USB Using CMD (Command Prompt)
How to
Change a Windows Password Using Command Prompt
How to
Add Users from CMD
How to
Use Windows Command Prompt to Run a Python File
How to
Open a Folder in Command Prompt (CMD)
How to
Reboot from Command Prompt on Windows
How to
Run a Windows Batch File from the Command Line (CMD)
How to
Use Net Send
How to
Copy Files in Command Prompt
How to
Watch Star Wars on Command Prompt
3 Ways to Open Command Prompt with Keyboard on Windows
How to
Run an EXE File at the Windows Command Prompt
5 Simple Ways to Open the Command Prompt in Windows
Advertisement

References

  1. ↑ https://fossbytes.com/remove-virus-using-cmd/
  2. ↑ http://www.easeus.com/resource/use-cmd-remove-virus-windows-10.html

About This Article

Article Summary X

1. Type "cmd" into the Windows search bar.
2. Right-click Command prompt .
3. Click Run as administrator .
4. Click Yes .
5. Type "cd ' and press Enter .
 6. Type "attrib –r –a –s –h *.*" and press Enter .
7. Look for the virus in the list of files.
8. Type "del " and press Enter .

Did this summary help you?
In other languages
Thanks to all authors for creating a page that has been read 729,133 times.

Is this article up to date?

Advertisement