I have this virus in my pc hard drive which hid all my files and folders and created their copy file with an executable(.exe) of the same. I did some research on internet and found out that this virus has to be removed using an antivirus that could detect it and then have to unhide my files using cmd prompt. Now I used Norton Antivirus and it cleaned the virus from my pc. all the shortcut and copy files are gone now. except that it shows all my files with a .exe extension and not with the original size of the file or folder. As a result the infected partition of my hard disk(126GB) which was almost full shows just 11GB of the memory being used. The rest of the memory it shows is free.
I am attatching a screen shot of what my files look like. the screen shot is of the image(.jpg) files which have an added .exe extension
Now, upto this point I was able to get along with the info but when it came to unhiding the files in cmd prompt, I just couldnt figure out what to do. Whenever I try unhiding my files using "D:\>attrib -h -s -r -a /s /d D:\*.*", D: being my drive which is infected, it shows "Access Denied - D:\System Volume Information". I just could not get beyond this point.
Please help me with this problem as I have some crucial data on my drive that I need to recover. Many many thanks in advance.
To help you and prescribe the remedy, I must make a diagnostic and to do so, I require a report.
1. Open this link and download ZHPDiag2 :
http://www.nicolascoolman.fr/download/zhpdiag/?wpdmdl=803 (Don't be alarmed is the site is in French, it sometimes happens, the tool will take your system language and allow the download if you get a warning message, ignore it.) Click on the download button
2. Save the file on your Desktop.
3. Double click on ZHPDiag.exe and follow the installation instructions.
(For Vista, Win 7 and 8 users, click right to ensure you execute with admin right)
4. Double click on the short cut ZHPDiag on your Destktop.
Not only with an image file, the .exe extension is with every file on my hard drive. The partition that has windows installed(C:/) works fine. The rest two partitions on my drive are affected.
Here's what it looks like when I try to open any file.