How to read files not through win DLLs but directly from sectors/partition?

Discussion in 'Windows 7 Help and Support' started by pstein, Nov 16, 2012.

  1. pstein

    pstein Honorable Member

    Joined:
    Mar 20, 2010
    Messages:
    347
    Likes Received:
    0
    I assume I have a trojan which replaced a certain windows core DLL by a modified version.

    When I list all files in a directory (e.g. C:\widnows\system32\) in Windows Explorer then certain files are not visible.
    Yes, I checked unhide hidden files on unprotect system files in WinExp options.

    So actually ALL files must be visible which is not the case.

    Is there a win-explorer-like tool which does not use this faked win DLL and instead read all files DIRECTLY from hard disc sectors?

    At least some backup tools do this for performance reasons.
    But these backup tools are no usable for investigating and listing files like Windows Explorer does.

    Peter
     
  2. patcooke

    patcooke Microsoft MVP
    Staff Member Premium Supporter Microsoft MVP

    Joined:
    May 16, 2010
    Messages:
    5,456
    Likes Received:
    268
    Try running the system file checker:

    Run a command prompt by right clicking it and running as administrator then entering the command:

    sfc /scannow
     

Share This Page

Loading...