Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Folders turned into .exe files and not opening by double clicking  (Read 30161 times)

0 Members and 1 Guest are viewing this topic.

legend3000bc

    Topic Starter


    Rookie

    Few days ago i used a USB drive and after that all my folders have turned into .exe files and not opening by double clicking although i can open them from run box and from address bar. When i double click on them to open i get message its not a valid Win32 application. Surprisingly all my C drive folders are opening properly. I am using windows 7 ultimate 64 bit and have scanned my system from kaspersky antivirus, SUPERantispyware and Hijackthis. I have deleted all the trojans found and have also cleaned my system from CCleaner but the folders are still not opening. I tried to restore my system but that did not help either. Please suggest what needs to be done. Thanks

    mr-bisquit

    • Guest
    Re: Folders turned into .exe files and not opening by double clicking
    « Reply #1 on: April 16, 2010, 12:31:35 PM »
    Can you rename them?

    legend3000bc

      Topic Starter


      Rookie

      Re: Folders turned into .exe files and not opening by double clicking
      « Reply #2 on: April 17, 2010, 08:27:16 AM »
      when i try to rename them i get a message that there is already a folder with the same name but when i select the option of show hidden files and folders it does not show any hidden folders. If i give them a different name and remove the .exe then windows does not know the program to open it with... :(

      SuperDave

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Thanked: 1020
      • Certifications: List
      • Experience: Expert
      • OS: Windows 10
      Re: Folders turned into .exe files and not opening by double clicking
      « Reply #3 on: April 17, 2010, 10:58:54 AM »
      Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

      1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
      2. The fixes are specific to your problem and should only be used for this issue on this machine.
      3. If you don't know or understand something, please don't hesitate to ask.
      4. Please DO NOT run any other tools or scans while I am helping you.
      5. It is important that you reply to this thread. Do not start a new topic.
      6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
      7. Absence of symptoms does not mean that everything is clear.

      Download Panda USB and AutoRun Vaccine and save it to your desktop.

      * Extract (unzip) the file to your desktop and a folder named USBVaccine will be created.
      * Open that folder and double-click on USBVaccine.exe to start the program.
      * Click Run
      * Click the button to Vaccinate computer.
      * Insert your USB flash drive.
      * When the name of the drive appears in the dialog box, click the button to Vaccinate USB drive(s).
      * Exit Panda USB and AutoRun Vaccine when done.

      Note: Computer AutoRun Vaccination will prevent any AutoRun file from running, regardless of whether the removable device is infected or not. USB Vaccination disables the autorun file so it cannot be read, modified or replaced by malicious code. The Panda Resarch Blog advises that once USB drives have been vaccinated, they cannot be reversed except with a format. If you do this, be sure to back up your data files first or they will be lost during the formatting process.
      ================================

      You have or had what has been identified as a flash drive infection.

      Please download Flash_Disinfector from HERE
      • First, download it to your desktop.
      • Now double click it to run it and will tell it you what to do when you open it.
      • It will temporarily kill explorer.exe and your desktop will go blank.
      • Let Flash_Disinfector do it's job and it will restart explorer.exe for you.
      • It will make a dummy autorun.inf in the root of every drive.
      • You can now delete Flash_Disinfector.exe.
      Windows 8 and Windows 10 dual boot with two SSD's

      legend3000bc

        Topic Starter


        Rookie

        Re: Folders turned into .exe files and not opening by double clicking
        « Reply #4 on: April 18, 2010, 10:14:59 AM »
        Thank you for the reply Dave and i really appreciate your help. I do not have the USB drive which caused the issue so should i follow the mentioned steps on my computer since the folders affected are of my system. Please suggest. Thanks.

        SuperDave

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Thanked: 1020
        • Certifications: List
        • Experience: Expert
        • OS: Windows 10
        Re: Folders turned into .exe files and not opening by double clicking
        « Reply #5 on: April 18, 2010, 11:48:12 AM »
        Yes. The normal thing we do is to disinfect the thumb/flash drive then disinfect the computer itself. Since you don't have the thumb drive, go ahead and do the other procedure.
        Windows 8 and Windows 10 dual boot with two SSD's

        legend3000bc

          Topic Starter


          Rookie

          Re: Folders turned into .exe files and not opening by double clicking
          « Reply #6 on: April 19, 2010, 08:17:15 AM »
          I followed the mentioned steps, after running the AutorunVaccine when i run the Flash Disinfector on my system i get a message "Detected: Trojan.agent.ATV" and it gives location in C: drive and also a message that "Windows cannnot find 'nircmd'. Make sure you typed the name correctly and then try again." Please suggest what to do next. Thanks.

          SuperDave

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Thanked: 1020
          • Certifications: List
          • Experience: Expert
          • OS: Windows 10
          Re: Folders turned into .exe files and not opening by double clicking
          « Reply #7 on: April 19, 2010, 11:17:55 AM »
          Can you run HJT and post a log for me?
          Windows 8 and Windows 10 dual boot with two SSD's

          legend3000bc

            Topic Starter


            Rookie

            Re: Folders turned into .exe files and not opening by double clicking
            « Reply #8 on: April 20, 2010, 08:44:58 AM »
            Attached is the HJT scan log.

            [recovering disk space - old attachment deleted by admin]

            SuperDave

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Thanked: 1020
            • Certifications: List
            • Experience: Expert
            • OS: Windows 10
            Re: Folders turned into .exe files and not opening by double clicking
            « Reply #9 on: April 20, 2010, 01:25:22 PM »
            Please download Malwarebytes Anti-Malware from here.

            Double Click mbam-setup.exe to install the application.
            • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
            • If an update is found, it will download and install the latest version.
            • Once the program has loaded, select "Perform Full Scan", then click Scan.
            • The scan may take some time to finish,so please be patient.
            • When the scan is complete, click OK, then Show Results to view the results.
            • Make sure that everything is checked, and click Remove Selected.
            • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
            • Please save the log to a location you will remember.
            • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
            • Copy and paste the entire report in your next reply.
            Extra Note:

            If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
            =================================
            Download Security Check by screen317 from one of the following links and save it to your desktop.

            Link 1
            Link 2

            * Unzip SecurityCheck.zip and a folder named Security Check should appear.
            * Open the Security Check folder and double-click Security Check.bat
            * Follow the on-screen instructions inside of the black box.
            * A Notepad document should open automatically called checkup.txt
            * Post the contents of that document in your next reply.

            Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.
            =====================
            Open HijackThis and select Do a system scan only

            Place a check mark next to the following entries: (if there)

            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =


            Important: Close all open windows except for HijackThis and then click Fix checked.

            Once completed, exit HijackThis.

            Windows 8 and Windows 10 dual boot with two SSD's

            legend3000bc

              Topic Starter


              Rookie

              Re: Folders turned into .exe files and not opening by double clicking
              « Reply #10 on: April 21, 2010, 04:42:04 AM »
              This is the scan log
              --------------------------------------------------------------------------------------------
              Malwarebytes' Anti-Malware 1.45
              www.malwarebytes.org

              Database version: 4014

              Windows 6.1.7600
              Internet Explorer 8.0.7600.16385

              4/21/2010 3:50:52 PM
              mbam-log-2010-04-21 (15-50-52).txt

              Scan type: Full scan (B:\|C:\|D:\|E:\|F:\|)
              Objects scanned: 196197
              Time elapsed: 53 minute(s), 33 second(s)

              Memory Processes Infected: 0
              Memory Modules Infected: 0
              Registry Keys Infected: 0
              Registry Values Infected: 0
              Registry Data Items Infected: 0
              Folders Infected: 0
              Files Infected: 0

              Memory Processes Infected:
              (No malicious items detected)

              Memory Modules Infected:
              (No malicious items detected)

              Registry Keys Infected:
              (No malicious items detected)

              Registry Values Infected:
              (No malicious items detected)

              Registry Data Items Infected:
              (No malicious items detected)

              Folders Infected:
              (No malicious items detected)

              Files Infected:
              (No malicious items detected)

              ------------------------------------------------------------------------------------------------
              This is the Security Check by screen317 log


               Results of screen317's Security Check version 0.99.3 
               Windows 7  (UAC is enabled)
               Internet Explorer 8 
              ``````````````````````````````
              Antivirus/Firewall Check:

               Windows Firewall Enabled! 
               Quick Heal AntiVirus   
               WMI entry may not exist for antivirus; attempting automatic update.
              ```````````````````````````````
              Anti-malware/Other Utilities Check:

               Malwarebytes' Anti-Malware   
               HijackThis 2.0.2   
               CCleaner     
               Java(TM) 6 Update 19 
               Adobe Flash Player 10 
              Adobe Reader 9.3.1
              ````````````````````````````````
              Process Check: 
              objlist.exe by Laurent

               QUICKH~1 QUICKH~1 onlinent.exe 
              ````````````````````````````````
              DNS Vulnerability Check:

               Request Timed Out (Wireless Internet connection/Disconnected Internet/Proxy?)

              ``````````End of Log````````````

              SuperDave

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Thanked: 1020
              • Certifications: List
              • Experience: Expert
              • OS: Windows 10
              Re: Folders turned into .exe files and not opening by double clicking
              « Reply #11 on: April 21, 2010, 12:59:22 PM »
              Please download ComboFix from BleepingComputer.com

              Alternate link: GeeksToGo.com

              Rename ComboFix.exe to commy.exe before you save it to your Desktop
              Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here
              Click Start then copy paste the following command into the search box & hit enter: "%userprofile%\desktop\commy.exe" /stepdel
              As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. This will not install in Vista. Just continue scanning, and skip the console install.
              When finished, it shall produce a log for you.  Please include the contents of C:\ComboFix.txt in your next reply.

              If you have problems with ComboFix usage, see How to use ComboFix
              Windows 8 and Windows 10 dual boot with two SSD's

              legend3000bc

                Topic Starter


                Rookie

                Re: Folders turned into .exe files and not opening by double clicking
                « Reply #12 on: April 21, 2010, 01:50:53 PM »
                Attached is the ComboFix log. After running combofix all my folders of the root directory are back but folders of the subdirectory are still missing and there are just .exe files by the same name. Please tell what to do next

                [recovering disk space - old attachment deleted by admin]

                SuperDave

                • Malware Removal Specialist
                • Moderator


                • Genius
                • Thanked: 1020
                • Certifications: List
                • Experience: Expert
                • OS: Windows 10
                Re: Folders turned into .exe files and not opening by double clicking
                « Reply #13 on: April 21, 2010, 05:38:43 PM »
                P2P - I see you have P2P software installed on your machine. (uTorrent) We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It is certainly contributing to your current situation.

                Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

                I would strongly recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.
                ===============================
                Note: the below instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your system

                Delete these files/folders, as follows:

                1. Go to Start > Run > type Notepad.exe and click OK to open Notepad.
                It must be Notepad, not Wordpad.
                2. Copy the text in the below code box by highlighting all the text and pressing Ctrl+C

                Code: [Select]
                KillAll::

                File::
                c:\windows\UC.PIF
                c:\windows\RAR.PIF
                c:\windows\PKZIP.PIF
                c:\windows\PKUNZIP.PIF
                c:\windows\NOCLOSE.PIF
                c:\windows\LHA.PIF
                c:\windows\ARJ.PIF


                3. Go to the Notepad window and click Edit > Paste
                4. Then click File > Save
                5. Name the file CFScript.txt - Save the file to your Desktop
                6. Then drag the CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below. Important: Perform this instruction carefully!



                ComboFix will begin to execute, just follow the prompts.
                After reboot (in case it asks to reboot), it will produce a log for you.
                Post that log (Combofix.txt) in your next reply.

                Note: Do not mouseclick ComboFix's window while it is running. That may cause your system to freeze
                =======================================
                Please download RootRepeal from GooglePages.com.
                • Extract the program file to your Desktop.
                • Run the program RootRepeal.exe and go to the Report tab and click on the Scan button.


                • Select ALL of the checkboxes and then click OK and it will start scanning your system.

                • If you have multiple drives you only need to check the C: drive or the one Windows is installed on.
                • When done, click on Save Report
                • Save it to the Desktop.
                • Please copy/paste the contents of the report in your next reply.
                Please remove any e-mail address in the RootRepeal report (if present).

                Windows 8 and Windows 10 dual boot with two SSD's

                legend3000bc

                  Topic Starter


                  Rookie

                  Re: Folders turned into .exe files and not opening by double clicking
                  « Reply #14 on: April 22, 2010, 12:57:12 AM »
                  I ran the ComboFix Script which gave me a log but RootRepeal would not run. It gave me this error message when I opened the program:

                  FOPS - DeviceIoControl Error! Error Code = 0xc0000024
                  Extended Info (0x000000dc)

                  And these messages when I tried to run the scan:

                  Could not initialize driver! Please contract the author!

                  and after cliclking ok getting message Error dumping SSDT (0xc0000024)

                  Please suggest what to do next. Also i have uninstalled the P2P software to get rid of this issue.


                  [recovering disk space - old attachment deleted by admin]

                  SuperDave

                  • Malware Removal Specialist
                  • Moderator


                  • Genius
                  • Thanked: 1020
                  • Certifications: List
                  • Experience: Expert
                  • OS: Windows 10
                  Re: Folders turned into .exe files and not opening by double clicking
                  « Reply #15 on: April 22, 2010, 01:08:12 PM »
                  Ok. Let's try this one.

                  Download GMER Rootkit Scanner from here.

                  •Double click the .exe file. If asked to allow gmer.sys driver to load, please consent
                  •If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO


                   
                  Click the image to enlarge it

                  •In the right panel, you will see several boxes that have been checked. Uncheck the following ...
                     *Sections
                     *IAT/EAT
                     *Drives/Partition other than Systemdrive (typically C:\)
                     *Show All (don't miss this one)
                  •Then click the Scan button & wait for it to finish
                  •Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file
                  •Save it where you can easily find it, such as your desktop, and post it in reply
                  **Caution**
                  Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

                  Windows 8 and Windows 10 dual boot with two SSD's

                  legend3000bc

                    Topic Starter


                    Rookie

                    Re: Folders turned into .exe files and not opening by double clicking
                    « Reply #16 on: April 23, 2010, 08:41:54 AM »
                    Attached is the GMER Rootkit Scanner log.

                    [recovering disk space - old attachment deleted by admin]

                    SuperDave

                    • Malware Removal Specialist
                    • Moderator


                    • Genius
                    • Thanked: 1020
                    • Certifications: List
                    • Experience: Expert
                    • OS: Windows 10
                    Re: Folders turned into .exe files and not opening by double clicking
                    « Reply #17 on: April 23, 2010, 04:39:42 PM »
                    I'd like us to scan your machine with ESET OnlineScan

                    •Hold down Control and click on the following link to open ESET OnlineScan in a new window.
                    ESET OnlineScan
                    •Click the button.
                    •For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
                    • Click on to download the ESET Smart Installer. Save it to your desktop.
                    • Double click on the icon on your desktop.
                    •Check
                    •Click the button.
                    •Accept any security warnings from your browser.
                    •Check
                    •Push the Start button.
                    •ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
                    •When the scan completes, push
                    •Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
                    •Push the button.
                    •Push
                    A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

                    Windows 8 and Windows 10 dual boot with two SSD's

                    legend3000bc

                      Topic Starter


                      Rookie

                      Re: Folders turned into .exe files and not opening by double clicking
                      « Reply #18 on: April 24, 2010, 05:09:34 PM »
                      I scanned my system with ESET OnlineScan but it did not find any threat or infected files.

                      [recovering disk space - old attachment deleted by admin]

                      SuperDave

                      • Malware Removal Specialist
                      • Moderator


                      • Genius
                      • Thanked: 1020
                      • Certifications: List
                      • Experience: Expert
                      • OS: Windows 10
                      Re: Folders turned into .exe files and not opening by double clicking
                      « Reply #19 on: April 24, 2010, 06:17:42 PM »
                      Quote
                      I scanned my system with ESET OnlineScan but it did not find any threat or infected files.
                      Well, that's good news. If there are no other issues, it's time for some clean-up. You can delete Security Check, RootRepeal, Panda USB, Flash Disinfector, HJT. You may keep MBAM, if you wish. Update it and run it weekly to keep your computer clean.

                      To uninstall ComboFix

                      • Click the Start button. Click Run. For Vista: type in Run in the Start search, and click on Run in the results pane.
                      • In the field, type in commy /uninstall
                      (Note: Make sure there's a space between the word commy and the forward-slash.)

                      • Then, press Enter, or click OK.
                      • This will uninstall ComboFix, delete its folders and files, hides System files and folders, and resets System Restore.
                      Clean out your temporary internet files and temp files.

                      Download TFC by OldTimer to your desktop.

                      Double-click TFC.exe to run it.

                      Note: If you are running on Vista, right-click on the file and choose Run As Administrator

                      TFC will close all programs when run, so make sure you have saved all your work before you begin.

                      * Click the Start button to begin the cleaning process.
                      * Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
                      * Please let TFC run uninterrupted until it is finished.

                      Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.

                      Uninstall GMER

                      Click on Start > Run and type in or copy/paste all of the Red text into the Run box.

                      %windir%\gmer_uninstall.cmd

                      Click OK to remove GMER.

                      Use the Secunia Software Inspector to check for out of date software.

                      •Click Start Now

                      •Check the box next to Enable thorough system inspection.

                      •Click Start

                      •Allow the scan to finish and scroll down to see if any updates are needed.
                      •Update anything listed.
                      .
                      ----------

                      Go to Microsoft Windows Update and get all critical updates.

                      ----------

                      I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

                      SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
                      * Using SpywareBlaster to protect your computer from Spyware and Malware
                      * If you don't know what ActiveX controls are, see here

                      Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

                      Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

                      Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
                      Safe Surfing!
                      Windows 8 and Windows 10 dual boot with two SSD's

                      legend3000bc

                        Topic Starter


                        Rookie

                        Re: Folders turned into .exe files and not opening by double clicking
                        « Reply #20 on: April 25, 2010, 12:42:26 PM »
                        Thanks Dave for all your assistance in removing virus and infections from my system. I am happy that all the threats have been removed however i still have one issue which i am not getting rid off. All my system sub-folders are still missing and i have not got them back till now. There are just applications files left by the same names. How do i get my folders back is a concern.

                        Also i followed the previous steps mentioned but GMER Rootkit Scanner not uninstalling by the command %windir%\gmer_uninstall.cmd getting message windows can not find and make sure you typed the name correctly and try again. Thanks again for all your help.


                        [recovering disk space - old attachment deleted by admin]

                        SuperDave

                        • Malware Removal Specialist
                        • Moderator


                        • Genius
                        • Thanked: 1020
                        • Certifications: List
                        • Experience: Expert
                        • OS: Windows 10
                        Re: Folders turned into .exe files and not opening by double clicking
                        « Reply #21 on: April 25, 2010, 01:04:33 PM »
                        This is the first time I've used the GMER uninstall command. Just go ahead and delete it from your desktop.
                        As for the folders and sub-folders; is the B: drive a separate drive or is it a partition of the C: drive?
                        Windows 8 and Windows 10 dual boot with two SSD's

                        legend3000bc

                          Topic Starter


                          Rookie

                          Re: Folders turned into .exe files and not opening by double clicking
                          « Reply #22 on: April 25, 2010, 10:04:10 PM »
                          I have two drives in my system, B:, E: and F: are partition of a separate drives and D: is a partition of C: drive. I am facing this issue with B:, E:, F:, and D: partitions. Surprisingly my system drive C: is not affected by this issue however its partition D: is affected.

                          SuperDave

                          • Malware Removal Specialist
                          • Moderator


                          • Genius
                          • Thanked: 1020
                          • Certifications: List
                          • Experience: Expert
                          • OS: Windows 10
                          Re: Folders turned into .exe files and not opening by double clicking
                          « Reply #23 on: April 26, 2010, 11:41:42 AM »
                          Quote
                          Surprisingly my system drive C: is not affected by this issue however its partition D: is affected.
                          The attached picture show the B: drive, not the D: drive

                          I don't believe that this problem is caused by malware or viruses. I feel that you should start a new thread on this forum. I'm assuming that you're running Windows 7. Please mention that you've have gone through the cleaning process on this forum.
                          Windows 8 and Windows 10 dual boot with two SSD's