Folders changed to Application .exe

Hi, I was infected with a virus and I noticed that all folders were changed into Application and .exe. How can I remove folder .exe virus and get back my folders from .exe application to usual directory?

Thanks

From the Admin:

If the virus has changed your folders to .exe files, it only implies that computer is infected with a computer worm known as W32.SillyFDC. It utilizes Autorun function of Windows so that it loads each time a removable drive is inserted. From this on, the worm will make a duplicate copy of all folder names but will assign it with .exe extension. The worm then hides the original folder by changing its attribute. In short, what you will see after the infection are all executable file. Authors made it to look like a folder to deceive users and let them execute each folder (actually a worm file).

To be able to remove the worm, you need to scan the computer with effective anti-virus software. The process may delete the threat; however, this virus scan will not bring back your folder to its default state. It may remain hidden. You need to reset the folder attribute to make it visible to the system once again. The discussion below will give you some hint on how to change the settings of hidden folders. Please use the procedure with full caution.

138 Responses

  1. autotboskids says:

    Its a virus/worm that infected you. This worm will duplicate all your folders and create an executable files with its name. The original folders will be hidden. To remove folders with .exe application follow these:
    1. Install, update your antivirus application. I used Symantec and it found w32.sillyfdc
    2. Delete all detected files. The .exe folder just removed. Now you need to do is show the original folders
    3. Open File Manager
    4. Go to top menu, Tools > Folder Options. Select View tab
    5. Mark the “Show hidden files and folders.”
    6. Go to Start > Run, type cmd at the OPEN: box, and press OK. This will show the DOS command prompt
    7. Using My Computer, view the drive of hidden folders
    8. Go to Command Prompt and type this to unhide all folders and files:
    attrib e:\*.* /d /s -h -r -s

    Where “e” is the drive where hidden folders resides

    That should do it. It works for me.

  2. John says:

    Hi autotboskids,

    Thanks for this info. I have searched so many sites but could not find one that could fix this problem. Your steps works like magic and did the trick for me.

    Just to add to this. Your steps also work for another virus that converts folders to shortcuts.
    Also there is an Autorun.ini in there that needs to be deleted.

    Thanks again for sharing this info.

    Regards,

    John

  3. jerry says:

    Thanks Much autotboskids
    Your solution worked great.
    I got my usb flash infected at an officedepot.
    I loaned it to the attendant to print some picture files on the usb.
    I noticed that it took his computer a long time to recognize it.
    The trojan was doing his work.
    Suggestion:If possible use a “hard” write protected usb or a cd or dvd
    when you have to go to those places or use unknown computers.

  4. Michael says:

    Thanks a ton autotboskids
    ive been searchin for sites to fix this problem all over bt none could solve my problem bt your solution was perfect!!! thanks a million!!!!!!it works for windows 7 as well!!

  5. Pranay from india says:

    thanks a ton man!!

    the hint that u gave that the real folders are hidden n the ones seen are duplicated ones was enough for me to get my way out of it.
    Although the hidden folders are not yet visible , but i remembered the folder names in my pen drive. so i just typed the folder name in the address bar after the drive name (eg. J:\abc , where abc is the folder name) and the folder opens…so i could retrieve my important files.
    thanks!

  6. bobtubo says:

    Top man !
    Thank you saviour, it worked for me. You are simply the best

  7. AASIF says:

    I use mcafee total protection and it can not detect w32.sillyfdc. I tried to search my entire computer by unhiding all files and folders.
    Now what to do? can anyone help me?

  8. Salman says:

    Thanks a bunch for the tips…I discovered something else…that cheeky virus of ours hides our original folders in a unique way…it changes our folder’s status to “protected operating system Files”. You can view your hidden files by unchecking the “Hide protected operating system files” in the “View” tab of “folder options”. The only problem left is how to change its status back to a normal folder’s one…….

  9. Mick says:

    Hey

    this virus seems to have gottin in to my server
    how do i get rid of it on there ?
    it keeps making copy’s of the file name with in the file

  10. keer says:

    Guyz…
    will be data gets corrupt or it is safe…?
    I am using mcafee…It is not defecting this virus…

  11. Shell says:

    Thanks a lot! Your a lifesaver!
    My USB got infected by the TR/Pasta.kri.51 Trojan virus and it changed all the folders into folder.exe (where: folder = name of that folder). All my folders had the “Application” classification. Good thing that all of the files outside the folders were unaffected.

    Initially, I tried to EDIT the folder.exe in the cmd prompt, but it doesn’t work. I couldn’t delete it yet because it might delete the entire folder which was now an “Application”. I’m glad I read this. Took me an easy 10 minutes to repair the infected USB and I recovered all my files.

    For Step 1, I used the Avira Antivir Personal antivirus (free version) they installed on this PC. Since it automatically deleted all the infected folders.exe, I went to the ADMINISTRATION > Quarantine and chose “RESTORE SELECTED FILE/S TO…” back to the USB.

    Then, I did the usual STEP 6 to go to the cmd prompt. Next, I did STEP 8 – keyed in the attrib e:\ *.* /d /s -h -r -s.

    Then, I did STEP 2, delete .exe files, as I re-scanned the entire USB. While doing so, AVP had an option to REPAIR the files, so I did that.

    I found all my files restored inside a “_” folder at e:\ (where e:\ is the USB drive).

    Afterwards, I deleted all other viruses from the cmd prompt like RECYCLER, winamp and winguard folders (with a “Desktop” file inside) and autorun.inf which was on the root of the e:\. This time, I created an “autorun.inf” folder to keep it from coming back.

    Next time, I am not inserting my USB in my officemate’s PC that just crashed. I thought they fixed it since it’s up and running now, but it seems like it still has tons of viruses in it.

  12. Hlula says:

    autotboskids, Thanks for the info, I did it bt CMD responded”The System cannot find the path specified”

    Salman.. Your solution worked wonders… Thank you very much!!!

    //The dive was a memory card in my Sony Ericsson fone.. Thank you guys

    I used Eset Nod 32 antivirus

  13. vishal says:

    what to do in 2nd option

  14. moons says:

    I’ve tried but its says that path is not found. please respond early!

  15. bia says:

    GOD bless u PRANAY from india..ur method worked 4 me n i got my files back..needed them for my prof thanks alot

  16. KIM says:

    thANKS A LOT GENIUS

  17. medo says:

    thx for helping but as soon as i delete the infected folders they just reappear …. any ideas ?

  18. Pavle says:

    Lifesaver!!!

  19. sunil says:

    those exe folders are not your original folders…….to veiw your folders which been changed into protected folders….just go to tools->folder option->veiw tab->uncheck d option “hide protected operating system files” and click on to d “show hidden file and folders”……there ur folders are……but u still cant change them to normal folders bcoz the u cant uncheck d hidden attribute in properties f d folder…..now if u want 2 make ur folder normal…jst go 2 properties f d folder->”custmize” tab->click 2 “change”->”restore defaults” n then click on “ok”……now again go 2 d properties f d folder, now u can uncheck d hidden attribute. ….

  20. Martin says:

    Thanks a lot, got everything back on my ext.disk which was infected after connecting to someone’s PC. LifeSaver!

  21. Techykaba says:

    Thanks, autotboskids. Your method didn’t work at first because i didn’t realize that you had to write “attrib e:\*.* /d /s -h -r -s”(without the quotes), i forgot to type the “attrib”.. Note to anyone who’s doing this.. You might need to replace the “e:\” with whatever drive your folder is, like “j:\” or anything like that. But, Thanks @sunil, too. I used all of your steps, then used @autotboskids 8th step, because, even though i went back to properties it still didn’t all me to change the “Hidden attribute”.. Everything worked great. Note: When you’re done with all of the steps. Delete the .exe folders and re-check on “Don’t show hidden files..” and “hide protected operating system files”.

    Steps for anyone who’s having trouble(Combination of sunil and autotboskids):

    1. Go to tools->folder option->view tab-> uncheck then option “hide protected operating system files”, after that uncheck on the “hide protected operating system files”. Then press “OK”

    2. Your folders are now here and usable, but, still ‘hidden’. So, go to “Start”, “Run”(Windows XP.. For Vista/7, just type) type CMD in the search box. Double click and Command Prompt should open. There, type “attrib e:\*.* /d /s -h -r -s”(Note: remember that you should replace “e:\” with your flash drive’s name, because, your might be “j:\” or something.) When your finish typing the “attrib e:\*.* /d /s -h -r -s”, just press on “Enter” on your keyboard. Then, go back to your folder. You’ll see that the files aren’t hidden anymore.

    3. Now do the things I listed before writing the steps. Like deleting the .exe

  22. JKAQ says:

    You are the best!! Thanks! God bless!

  23. PuNeTZzZ says:

    Thnks autotboskids i fix my problem :D

  24. Utech says:

    i have followed these steps since was facing the same problem in my laptop

    1. Go to tools->folder option->view tab-> uncheck then option “hide protected operating system files”. Then press “OK”

    my folders are here n usable but still hidden…so i followed the further step but my cmd is not working.as m opening it through start->run it is opening and getting closed by itself. so wat should i do in this case.
    i have already deleted exe of folders that was created.
    and one more problem is that MSOCache named folder as well as its exe folder is created which is containing C,E,G files, ghast.mp3,ghost1.bmp and ghost2.bmp

    plzz reply to this query soon

  25. angge says:

    i followed the steps here, but it always tell me that “UNABLE to change attribute”

    please help…

  26. Abhinav says:

    Thank you man, thank you so much i worked on a photoshop project for almost 2 weeks and had finished it,put the only copy in a folder in a pd and it was affected by the virus….your method helped me like anything……….

  27. Taha says:

    Great!! Thanks for the tips. this worked perfectly

    Hi Angge:
    Check your permissions to the drive.

  28. Napsta says:

    Thanks a Lot you saved me man!!

  29. rajiv says:

    Thanks a lot ,it worked very well.
    first try the tools->folder options procedure ,if it not working means then try the cmd procedure.

  30. iwanstar says:

    i lov you man…. ^^
    but that screensaverfile cant be deleted….
    btw,its vey helpfull..
    ^^

  31. KINGSLEY AKPARA says:

    Thank you so much for saving my predicament. The command prompt could not work for me but the “Folder Options–>view–> unhide operating system files worked for me.

  32. jal says:

    thank you sunil…

  33. Siva says:

    Works like a charm;Thanks autoboskids, you rock!!!

  34. Tahir says:

    yep in this way we can remove the exe files from our usb but what if the virus is in our PC and whatever we attach to PC(usb) this usb is infected.
    so how to remove this virus from PC????????????

  35. alps says:

    i also have same problem…..
    please give some solution how to remove virus…?
    by above methods we can get back our data but what about virus ?

  36. Thabo says:

    Hi, I was infected with a virus and I noticed that all folders were changed into Application and .exe. How can I remove folder .exe virus and get back my folders from .exe application to usual directory? Thanks

  37. Satish says:

    @autotboskids: thanx it worked :)
    @Thabo: follow wat he said.. i jus got mine cleared :)

  38. dereje says:

    My computer folder can not open due to exe.application.what is the solution?

  39. abinav says:

    i have deleted the exe files in my card
    if i use cmd to retrieve it shows the file name in incorrect how to fix this problem ?
    how to retrieve my data >>>>

  40. abinav says:

    my card is affected by exe virus i scanned and i have deleted the exe files in my card
    if i use cmd to retrieve it shows the file name or the volume lable is incorrect how to fix this problem ?
    how to retrieve my data >>>>

  41. Gordon says:

    Thanks bro (autotboskids) your procedure worked great. took a ton off my head.
    Thank you.
    Gordon

  42. Zedeck says:

    format your flash, then download ComboFix and run it will solve the problem

  43. Danreb Guiyab says:

    hey friends! where can i actually find the file manager on windows vista?

  44. Danreb Guiyab says:

    I LOVE YOU AUTOTBOSKIDS! YOUR MY HERO! CHEEERSS!

  45. david says:

    autotboskids:
    u r awsome dude.. i was geting tensed and finally found ur reply for this.. tried it.. yuppyy my data is back.. thanks dude..!!

  46. theta says:

    just ran into this worm earlier. for those who still have problems about their old folders remaining hidden, just go to the infected (and cleaned) drive, uncheck “hide protected operating system files” under folder options, and open the folder that contains all your hidden folders. then, SELECT ALL that’s inside, and DRAG EVERYTHING out of the “invisible” folder. they’ll remain unhidden moving forward. worked for me. :)

  47. flor says:

    thank you so much..It really work’s…Keep it Up..!! :D

  48. divykant says:

    thank a lot dearautotboskids
    For Sharing a Very Good Information

  49. Marvin de aquino says:

    tnx brooo………….your the best

  50. adeleke says:

    Hi, I was infected with a virus and I noticed that all folders were changed into Application and .exe. How can I remove folder .exe virus and get back my folders from .exe application to usual directory?

  51. manestra00 says:

    THANK YOU 1000 TIMES THANK YOU!!

  52. Pritesh says:

    Thanks a lot my problem is resolved by attrib command.

  53. winaldha says:

    Thanks, you are the best….. Thanks a lot

  54. ivy73 says:

    Thanks for the Info.. I will try it in my Pc.. my anti virus is avast.. is it ok?

  55. Rawxen says:

    @autotboskids
    Man, how can I thank you!
    You were awesomely great!

  56. mymy says:

    THANK YOU SO MUCH!!!!!! YOU ARE A BIG HELP!!!!!!!!!!! MANY THANKS!!!!! :)

  57. maulik patel says:

    how to change application.exe. icon

  58. SparseTeacher says:

    Thanks autoboskids!!! You saved our bacon.

    Nearly lost all my report work!

  59. Sajjad Afzal says:

    XYplorer is a very good window explorer to convert your hidden system folders to normal again

  60. Shane Velano says:

    Thank you so much for all your help! :)

  61. SMaity says:

    I have followed these steps since was facing the same problem in my memory card.

    1. Go to tools->folder option->view tab-> uncheck then option “hide protected operating system files”. Then press “OK”

    My folders are here n usable but still hidden…so i followed the further step but my cmd is not working. The ‘attrib my-drive-letter:\*.* /d /s -h -r -s’ comment in cmd box shows me : ‘attrib’ is not recognized as an internal or external command, operable program or batch file.
    I have already deleted exe of folders that was created.

  62. Peter says:

    THANK YOU AUTOBOSKIDS ! ! ! You’re a STAR ! Your solution worked 1st time & saved me tons of docs & pics scanned (originals had been thrown away) that I thought I’d lost. Greetings from South Africa :-)

  63. Niel says:

    Scripted this to a BAT file! Thanks for the info… Just wanted to share my batch script to help:
    —————————————————————————————————————————————————
    @echo off

    attrib [Drive Letter]:\[Folder]\*.* /d /s -h -r -s
    attrib [Drive Letter]:\[Folder]\*.db /d /s +h -r +s
    attrib [Drive Letter]:\[Folder]\*.bin /d /s +h -r +s

    cls

    echo.
    echo *************************************************************
    echo Attributes Fixed!
    echo *************************************************************
    echo.

    SET /P ANSWER=Do you want to Delete *.exe and Autorun.* on [Drive Letter] Drive (Y/N)?
    if /i {%ANSWER%}=={y} (goto :yes)
    if /i {%ANSWER%}=={yes} (goto :yes)
    goto :no

    :yes
    del /s /q [Drive Letter]:\[Folder]\*.exe
    del /s /q [Drive Letter]:\autorun.*

    echo Files Deleted.
    echo Done!
    pause

    exit /b 0

    :no
    echo No Files Deleted.
    echo Done!
    pause

    exit /b 1
    ——————————————————————————————————————————————-
    Just save that to “attribute_fixer.bat” and change [Drive Letter] and [Folder] to infected path but DON’T EVER use this on the root of your system drive or program files folder. (it deletes exe’s). This also resets the “thumbs.db” and the “$recycle.bin” folder (if it exists) to hidden and system..

  64. Chels says:

    how bout if I’m a mac user??

  65. bhutto says:

    Thanx alot dear, it really worked. thanx again

  66. Nelly says:

    I tried scanning my USB with three different programs (AVG, eset, and malwarebytes) and none of them were able to detect anything on the drive. I clicked on the option to “show hidden files” and unchecked “hide protected operating system files” and that showed all my hidden folders. Then I just deleted the .exe copies of the folders. I know this doesn’t solve the problem, but what else can I do to remove this virus or worm or whatever it is?

  67. Himanshu says:

    thanks a lot……..you almost saved my life

  68. Sneha says:

    Thanks, autotboskids. Your method didn’t work at first because i didn’t realize that you had to write “attrib e:\*.* /d /s -h -r -s”(without the quotes), i forgot to type the “attrib”.. Note to anyone who’s doing this.. You might need to replace the “e:\” with whatever drive your folder is, like “j:\” or anything like that. But, Thanks @sunil, too. I used all of your steps, then used @autotboskids 8th step, because, even though i went back to properties it still didn’t all me to change the “Hidden attribute”.. Everything worked great. Note: When you’re done with all of the steps. Delete the .exe folders and re-check on “Don’t show hidden files..” and “hide protected operating system files”.

    Steps for anyone who’s having trouble(Combination of sunil and autotboskids):

    1. Go to tools->folder option->view tab-> uncheck then option “hide protected operating system files”, after that uncheck on the “hide protected operating system files”. Then press “OK”

    2. Your folders are now here and usable, but, still ‘hidden’. So, go to “Start”, “Run”(Windows XP.. For Vista/7, just type) type CMD in the search box. Double click and Command Prompt should open. There, type “attrib e:\*.* /d /s -h -r -s”(Note: remember that you should replace “e:\” with your flash drive’s name, because, your might be “j:\” or something.) When your finish typing the “attrib e:\*.* /d /s -h -r -s”, just press on “Enter” on your keyboard. Then, go back to your folder. You’ll see that the files aren’t hidden anymore.

    3. Now do the things I listed before writing the steps. Like deleting the .exe

    Thankx alot it helped me to save my useful data
    god bless you dear

  69. Sneha says:

    Use Avira Antivirus ts really good and free. It has help me scan my pc and then i followed that cmd option specified by others.All d Best.

  70. Baadsha says:

    Thanks Guys , it,s Awesome : –

  71. Andrew Gahol says:

    THANK YOU autotboskids! LIFE SAVER!

  72. Nitin says:

    Love you for that…u rocks man

  73. vikas kumar says:

    Thanks for the steps…your steps really helped a lot to save my critical data.

  74. Sathish says:

    @Salman, Your solution worked for me. My files in Memory card and virus infected to my micro SD card in my Nokia phone. Now i can copy every file which is hidden!

    Thanks a ton!

  75. GT says:

    I was able to delete the .exe files and repopulate my drives with the correct files. However, once I restart my computer the same virus sets all drive files back to the .exe files. My Malwarebytes anti-malware software finds the virus files and removes them as does my MS Security Essentials software but as mentioned, the same virus problem just keeps reappearing. It is happening to my desktop computer I work from and then gets into my server drives. Does anyone know how to fix this problem? Thx.

  76. Nuno Silva says:

    Many thanks, it works!!

  77. ermu23 says:

    What about if the virus that infected the system does the reverse? The .exe files in my PC becomes a File Folder Type..I have problems when my apps are in File Folder Type >.< plss help.

  78. Piya says:

    effective…thnx a lott….!!! ^_^

  79. uzair says:

    Thanks….
    Man u saved my data and time
    Thanks again

  80. Odhiambo says:

    Worked like a charm, thanks a million!

  81. Bluebeep says:

    Add my thanks to the list. I would donate for this solution! God bless.

  82. Arjun says:

    the path specified is not correct this is the message i am getting….pls help..

  83. Jafar says:

    Thanks man!!!! works great. You’re a life saver

  84. Soc says:

    Your my hero bro!!

  85. Sakib hussain says:

    Folder change exe file how to riper

  86. OhXiT xD says:

    mines a different one but same on the File Folder > Application thingy, I cant delete the .exe ones + I cant unhide the folders its like magic! and I cant use the CMD once I type It on the RUN it would eventually show up for just a splitsecond then boom its gone… and about the Tools instruction when I check the unhide the blablabla then apply to all folders after aplying then ok its back to default again… It wont do! + I dont have an anti-virus and it wont let me finish any downloads!

  87. Raj says:

    Thanks you autotboskids

    Your technique worked greatly for me. My USB was infected with some trojen and all of my important data was there. With your solution, I was able to recover all my files safely.

    Thanks once again

  88. Sam says:

    Guys..I am not getting my folders with its data !!!!! I have 8 GB micro card. I had 4 GB of data in 20 folders. Now the available size of the card is 7.50 GB and i can see all those folders with .exe extension :-(. do you think I still have a chance to get my data back? appreciate your help!!

  89. TaZ says:

    autotboskids,man you are great,you are the best mate!

  90. aya says:

    Thanks very much. Works with me, I do only the attrib e:\*.* /d /s -h -r -s command.

  91. Ghulam Murtaza says:

    Dear autotboskids and Sneha
    thanks for tell us this effective procedure and i have applied this and get back my all data except one and that folder is very important for me.
    when i double click on that folder an window is prompt up ” open with” and i could not access my data which is inside that folder so please help me or any person have this solution.

  92. Vijay.M.B says:

    Thanks brother for your help

  93. Naeem Siddiqui says:

    Thank you very much brother..:)

  94. vast9 says:

    guys i tried your method but nothing happened. at first worked fine on my usb but when i removed it and pluged it in again, showed me the same thing. and when i scan with antivirus finds me NO threats. i use eset nod32. do you know something more to help please??

  95. nagananda says:

    files got converted to exe format ,files are not opening what to do

  96. sharad says:

    @utech thanku…

  97. Danish Khan says:

    It worked like a magic. I was hopeless when I discovered the virus.
    I lost access to all my useful files, but you’re my Bro made it all. I don’t know how to thank you.
    Just love this post!

  98. Xainii says:

    @Sneha i have write this command “attrib e:\*.* /d /s -h -r -s” but i got an error that the file name, directory name, or volume label syntax is incorrect..
    what can i do??????????

  99. denver22 says:

    Xainii, you may have missed this part:

    Where “e” is the drive where hidden folders resides.

    Check the drive letter and substitute it with the E: on the command. That should work.

  100. v0kz says:

    thanks a lot to all of you

  101. Moez Ahsan says:

    thanks bro it really worked

  102. the.four.horsemen says:

    @Danreb Guiyab
    You don’t actually need to have file manager b/c as far as I can figure out it came with the way older versions of Windows. You can just open Command Prompt and enter the command while replacing the e :/ with (Your Drive Letter) :/
    I just did this and I gotta say it actually worked. The only bad part is figuring out which of my friends have it now b/c so many of them have used my laptop…Thanks Anyway!!

  103. Gilbert Gertes says:

    autotboskids,

    I used AVG 2013 to remove the WORM virus then followed your instructions to show unhide folders & it really works Thank you very much.

    To remove folders with .exe application follow these:
    1. Install, update your antivirus application. I used Symantec and it found w32.sillyfdc
    2. Delete all detected files. The .exe folder just removed. Now you need to do is show the original folders
    3. Open File Manager
    4. Go to top menu, Tools > Folder Options. Select View tab
    5. Mark the “Show hidden files and folders.”
    6. Go to Start > Run, type cmd at the OPEN: box, and press OK. This will show the DOS command prompt
    7. Using My Computer, view the drive of hidden folders
    8. Go to Command Prompt and type this to unhide all folders and files:

    attrib e:\*.* /d /s -h -r -s (for drive c & d) (used this for hard drive)
    attrib f:\*.* /d /s -h -r -s (for drive c & d) (used this for removable drive)

    Gilbert Gertes
    Milan, italy

  104. vinay says:

    I have a solution:-
    1. click on the orgnise
    2. click on folder option
    3. click on view
    4. show the hidden file
    5. un check the hide emptydrives in computer folder, hide extension for known file types,hide protected operating system file.
    then your data shown in the hidden type
    then you cut paste the data into another folder.

  105. josh says:

    thanks boss :)

  106. brijprakash says:

    than to everyone for sharing
    this tricks .
    because I also infected from this problem.
    this is helpful for me also.

  107. brijprakash says:

    sorry ,
    I want to say something
    it is just like thanx …

  108. MongJi says:

    Should I PERMANENTLY delete all the exe files on my Recycle Bin?
    My hidden folders appeared. But it looked kind of like turned transparent-y. Is this something I should be worried of?

  109. MongJi says:

    So here’s what I did.
    1. I selected the folders in which turned into an application. I scanned it for malwares.
    – I was using Malwarebytes Anti-Malware but then I changed to Double Anti Spy since the 1st wasn’t able to keep the exe files from reappearing. The Double Anti Spy kept the exe files from reappearing after restarting.
    2. The Command Prompt didn’t work out for me. So I just went to the File Manager and UNchecked the following:
    – Hide extensions for known file types
    – Hide protected operating system files
    Also I checked: “Show hidden files, folders, and drives”
    3. Apply, OK.
    The original folders looked a bit transparent but then I thought it was because it was “HIDDEN”…
    HOPE THIS HELPS. ;)

  110. Imad ?ozi? says:

    Thank you.at my shool my teacher installed ms front page on my stick.all my folders were exe files.thank s to you I menage to convert them back.

  111. Simple Kadi says:

    Hey, that worked out well, thanks alot!

  112. Darpan says:

    AWESOME GUYS! Got all my data back :DD

  113. harish says:

    Guys
    first of all. I’m not a techno. I don’t have an idea of wat was happening. All I saw was my anime episodes in a folder converted as some exe app. Idk wat to do. So I did this
    damn simple!!!!
    Left Click on that exe file and add it to .rar.
    then u’ll get a winRAR archive. Left Click on the same application u’ll now have so many options to select.click on view files.FINISH!!!
    u’ll have a folder with all the imp info like in my case all the bleach episodes.
    Drag it to another disk or just leave the way it is.
    this worked for me
    I did this becoz my anti virus was not detecting the threat.
    This is damn simple!!

  114. Nick says:

    @autotboskids

    OMG THANK YOU SO MUCH!!

    I could almost cry you have saved hundreds of my photos. After spending 6 months backpacking south east Asia this virus found itself on my USB.

    Word of advice for those affected step 8 can take a while before it works so be patient.

  115. t.dinesh says:

    all my application file are coverted into .exe file.widows media player is openinng for all applications files CMD is also openning as windows media. i am not able to run any application please help out of this problem

  116. pavan says:

    thanks a ton!! your solution worked for me.. :)

  117. Joan says:

    Thanks, autotboskids – I’ve used your advice many times, works every time (with a sigh of relief that I haven’t lost all my stuff!)

  118. sharim says:

    thanks “SALMAN” it really works bro! really very very thanks

  119. Andrew H says:

    [ This might appear as re-send – if so apologies to all, but I did not see my question appear ].
    I found this superbly helpful thread. Thx to all of you, but …
    August 17 2014 I still have a very serious problem and maybe getting worse. I am tempted to ask professionals to reformat today the entire computer (running Windows 7) and reinstall but maybe this is a waste of time. My question is: is the problem on the computer/system or on the affected USB external drive ? Now it’s “drives”, because my second USB HDD bakup is also infected. BTW: I am not a techie.
    History:
    1. I can see that the data is still there. I just cannot view the folders.
    2. [ One pretty good anti-virus program deleted all the “.exe” files. But I did not see it identify the worm file, so I do not know if it is still sitting on my computer, and if so, where. ]
    3. I tried the cmd prompt suggestion that “autotboskids” helpfully suggested (you clearly are a tech angel who has saved many folks). I got “Access denied” to almost all folders/files, as the screen raced thru files/folders.
    4. I then tried the Windows manual method suggested by others: “Folder options”, “uncheck “hide protected operating system files” etc. No matter how many times I uncheck, then hit “apply” then hit “ok”, it refuses to accept the “uncheck”, since I go back and check the settings I just tried to change. That specific setting has not changed. That suggests to me the worm has made some serious registry changes ????.
    5. BTW, I have “administrator rights” on my computer.
    6. I hooked up one infected USB to a second laptop running XP, and that laptop shows up the folders visible okay, at least manually when I click them.
    7. To summarize: does the problem lie with the computer Windows settings/registry etc or simply the external USB drive(s) ? Perhaps I should not worry too much about possible changes the worm may have tried to make, as long as I can restore the visibility of the drives ??? From all the people who succeeded in restoring, it seems that if you can solve the folder problem, maybe you do not have to worry about tweaks/changes to the ”system” that may have occurred. Again, I am not a techie.
    8. My 1st bakup external HDD is infected. My 2nd bakup HDD is now infected. But my data is without question still there, and manually, when hooked up to the 2nd computer, I can still view the data.
    9. My worry is that even if I get the entire computer redone from zero, I still have two external USB drives that are perhaps still infected or otherwise risky. The bottom line is how to restore the ability to view my folders/data/docs.

    I think I am missing something since this forum discussion seems to have worked for just about everybody, whether through cmd. workaround; windows folder settings workaround, or other workarounds.

    Urgent comments, advice, help …. please ….. (!)

    Many thanks in advance. Best regards to all. I think you know what I am going through.

    Andrew

  120. Alvaristo says:

    Thank you a lot!!!!
    i appreciate it

  121. Zizh says:

    i have a problem similar to this but mine changes Microsoft Office file into exe. i have tried scanning for the virus but nothing has come up. where does this worm hide and how can i get rid of it?

  122. Ange says:

    Hello. I have the same problem, however how do I install an antivirus if I cannot get to an Internet browser, and the anti virus that I have has an exe extension so I cannot open that either.

  123. Vivek says:

    For me just the avast free antivirus scan gave the results and when i deleted them all data back. Had nothing to do with anything else .

  124. ahmad says:

    thankx for information bro. . . .
    it is very usefull for me. . ..

  125. joe says:

    I used anti virus to remove the virus. Go to folder tab and unhide the files. I can see the rubbish files (transparent files) but they are not the files i wanted. My folders are still invisible (how do i know?), how the size of the thumbdrive still shows more then half occupied.

    i opened command in desktop and type in:
    attrib e:\*.* /d /s -h -r -s

    it works!

  126. Gelhoy says:

    MR. autotboskids tnk u soo much! it totally works, this is a new discovery for me hehehe

  127. skvetrivell says:

    thanks for your information guys.thanks a lot.in my lap also infect this virus.i will try your ideas..@

  128. Ankur Thakran says:

    Thank bro…
    I knew already how to see yr hidden folder through command promt however I was know how to restore attributes for files but did’t know to reset the folders hidden attribute thanks for this man…

  129. abhishek sharma says:

    as u said I also done same but in cmd it says acess deined -F system volume information..an I scan my pc with notron it removes 70 but shortcut files are also there ?..what to do ..it deleted all my data .. :?.plzz help me

  130. Vijay says:

    The suggestion from autotboskids helped. It seems the command attrib takes time based on the size of disk space occupied by folders.

  131. Patrick Padilla says:

    Umm am i the only one who have this problem this December 2015? Umm my problem is my Folder looks different than the original one.And i noticed that i have alot of folders in my Disk.And i also noticed that my folder types are “Application” and whenever i open a folder from it it closes the Folder and Opens the folder i opened.Tricky right?
    that’s why I’m here :( i wish some of you can help me with this problem! if i fix this problem i won’t mess up with my laptop again ever! </3

    Thanks for reading my problem
    Have a great day!

    -Patrick w/ Love

  132. Velvet says:

    So excited I found this article as it made things much qucirek!

  133. pooja says:

    thank you so much i got all my files and importantant data back. thank you so much.

  134. swagat panda says:

    My pc have the same problem you mentioned the solution for but all your steps didn’t work for me.you mentioned to unhide the real folders but my local disk e only shows one folder that is empty.my Norton Internet sequrity also detected a bunch of viruses including a trojan virus.but after deleting those viruses my problem is not slved.its stil showing folders as applications .what to do plz help..i think due to presence of this virus my pc freezes many times.plz help …

  135. Taher says:

    Hi
    I used ubuntu and it opened with no change, while on win10 the folders were changed to app. Try it if you need to keep important files brfore doing any action.

  136. Angarag Pathak says:

    Thanks a lot Autotboskids..!

  137. Qudsia says:

    Can I just say, you are awesome?

    I had been working all weekend on something and this morning I woke up extra early to finish it when I realised my files had converted to .exe (I had switched laptops due to time constraint)

    It was a total down in the dumps moment for me when I found this site and going through your steps reconverted my files. I am not a programmer and have no idea how a computer actually works but right now I am so happy, I could hug you! Thank you so much you are a life saver!