Previous Topic Next Topic

Folders have become applications

Closed
nhbabar Posts 3 Registration date Wednesday January 30, 2013 Status Member Last seen January 30, 2013 - Jan 30, 2013 at 11:41 AM
AcerLappy Posts 39 Registration date Wednesday January 30, 2013 Status Member Last seen February 16, 2013 - Jan 30, 2013 at 08:38 PM
Hello,
I have a portable hard drive which suddenly lost all the folders and instead of folders it shows the names but with the extension as application and all of them are 159 kb and one drive in the properties shows used and free space but when tried to open it says folder is empty.
kindly help me out.
Regards


4 responses

Answer 1 / 4
AcerLappy Posts 39 Registration date Wednesday January 30, 2013 Status Member Last seen February 16, 2013 3
Jan 30, 2013 at 11:52 AM
INFECTED WITH FOLDER VIRUS

Chances are the Folders have been Hidden by the Virus only few Viruses actually delete the Folder/s.
Answer 2 / 4
nhbabar Posts 3 Registration date Wednesday January 30, 2013 Status Member Last seen January 30, 2013
Jan 30, 2013 at 12:00 PM
Dear,

There is no solution in the reply thus did not solve the problem.

Regards
Answer 3 / 4
AcerLappy Posts 39 Registration date Wednesday January 30, 2013 Status Member Last seen February 16, 2013 3
Jan 30, 2013 at 12:29 PM 
''SAVE THIS FILE AS "SOMENAME.VBS" AND RUN IT

On Error Resume Next
Dim fso
Set fso = WScript.CreateObject("Scripting.Filesystemobject")

'' REPLACE THE "X:\" BELOW WITH THE DRIVE PATH OF YOUR
'' PORTABLE HARDDRIVE FOR EG. WITH "D:\" IF D:\ IS YOUR
'' PORTABLE HARDDRIVE's PATH

Set drv = fso.GetFolder("X:\")
For Each dir In drv.SubFolders
	unfile(dir.Path)
Next


'' DOES NOT DELETE THE .EXE FILES AS THEY COULD ALSO 
'' INCLUDE YOUR OWN APPLICATIONS 

Function unfile(fp)
	For Each fil In fso.GetFolder(fp).Files
		If (Right(fil.Path, 4) = ".exe") Then
			fso.GetFile(fil.Path).Move(fil.Path & ".REPLACED")
		End If
		fil.Attributes = 0
	Next
	
'' MAKES ALL YOUR HIDDEN FILES AND FOLDERS VISIBLE

	For Each fol In fso.GetFolder(fp).SubFolders
		fol.Attributes = 0
		unfile(fol.path)
	Next
End Function
AcerLappy Posts 39 Registration date Wednesday January 30, 2013 Status Member Last seen February 16, 2013 3
Jan 30, 2013 at 12:33 PM
Also, i can't guarantee that the situation will be under control because IF the Virus i running or runs again, the same problem will arise again, you need to terminate all the processes of the Virus itself to make sure all goes well.
AcerLappy Posts 39 Registration date Wednesday January 30, 2013 Status Member Last seen February 16, 2013 3
Jan 30, 2013 at 12:45 PM
What the Script does:

1. Goes to your Portable HardDisk Path ("X:\" in this case)
2. Goes through each of the Application(.exe) Files
3. Renames those Programs (Files of No.2) with NEW File-Extension ".exe.Replaced" instead of ".exe".
4. Un-Hides all the Hidden Files and Folders in the working Folder.
5. Does Step 1 to 4 to all the files and folders

Note: Be sure to replace the "X:\" with your Portable HardDisk path.
Answer 4 / 4
nhbabar Posts 3 Registration date Wednesday January 30, 2013 Status Member Last seen January 30, 2013
Jan 30, 2013 at 12:36 PM
Dear
Thank you for the guidance I will try and let you know
Regards
AcerLappy Posts 39 Registration date Wednesday January 30, 2013 Status Member Last seen February 16, 2013 3
Jan 30, 2013 at 08:25 PM
Also Right Click the Script and Run As Administrator if you're using Windows 7
and don't use it on your SystemDrive(The Drive in which you have your Windows OS installed).
AcerLappy Posts 39 Registration date Wednesday January 30, 2013 Status Member Last seen February 16, 2013 3
Jan 30, 2013 at 08:38 PM
Also to be sure it's Autorun Modules(if any) are deleted, run this tool too:

https://ccm.net/downloads/security-and-maintenance/5911-autorun-exterminator/