Folders have become applications

[Closed]
Report
Posts
3
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
January 30, 2013
-
Posts
39
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
February 16, 2013
-
Hello,
I have a portable hard drive which suddenly lost all the folders and instead of folders it shows the names but with the extension as application and all of them are 159 kb and one drive in the properties shows used and free space but when tried to open it says folder is empty.
kindly help me out.
Regards


4 replies

Posts
39
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
February 16, 2013
3
INFECTED WITH FOLDER VIRUS

Chances are the Folders have been Hidden by the Virus only few Viruses actually delete the Folder/s.
Posts
3
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
January 30, 2013

Dear,

There is no solution in the reply thus did not solve the problem.

Regards
Posts
39
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
February 16, 2013
3
''SAVE THIS FILE AS "SOMENAME.VBS" AND RUN IT

On Error Resume Next
Dim fso
Set fso = WScript.CreateObject("Scripting.Filesystemobject")

'' REPLACE THE "X:\" BELOW WITH THE DRIVE PATH OF YOUR
'' PORTABLE HARDDRIVE FOR EG. WITH "D:\" IF D:\ IS YOUR
'' PORTABLE HARDDRIVE's PATH

Set drv = fso.GetFolder("X:\")
For Each dir In drv.SubFolders
	unfile(dir.Path)
Next


'' DOES NOT DELETE THE .EXE FILES AS THEY COULD ALSO 
'' INCLUDE YOUR OWN APPLICATIONS 

Function unfile(fp)
	For Each fil In fso.GetFolder(fp).Files
		If (Right(fil.Path, 4) = ".exe") Then
			fso.GetFile(fil.Path).Move(fil.Path & ".REPLACED")
		End If
		fil.Attributes = 0
	Next
	
'' MAKES ALL YOUR HIDDEN FILES AND FOLDERS VISIBLE

	For Each fol In fso.GetFolder(fp).SubFolders
		fol.Attributes = 0
		unfile(fol.path)
	Next
End Function
Posts
39
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
February 16, 2013
3
Also, i can't guarantee that the situation will be under control because IF the Virus i running or runs again, the same problem will arise again, you need to terminate all the processes of the Virus itself to make sure all goes well.
Posts
39
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
February 16, 2013
3
What the Script does:

1. Goes to your Portable HardDisk Path ("X:\" in this case)
2. Goes through each of the Application(.exe) Files
3. Renames those Programs (Files of No.2) with NEW File-Extension ".exe.Replaced" instead of ".exe".
4. Un-Hides all the Hidden Files and Folders in the working Folder.
5. Does Step 1 to 4 to all the files and folders

Note: Be sure to replace the "X:\" with your Portable HardDisk path.
Posts
3
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
January 30, 2013

Dear
Thank you for the guidance I will try and let you know
Regards
Posts
39
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
February 16, 2013
3
Also Right Click the Script and Run As Administrator if you're using Windows 7
and don't use it on your SystemDrive(The Drive in which you have your Windows OS installed).
Posts
39
Registration date
Wednesday January 30, 2013
Status
Member
Last seen
February 16, 2013
3
Also to be sure it's Autorun Modules(if any) are deleted, run this tool too:

https://ccm.net/download/download-11613-autorun-exterminator