Solved

folders all appear as short-cuts on my external backup drive

Posted on 2010-09-08
20
1,181 Views
Last Modified: 2013-11-22
After searching,i found that the only solution posted is talking about using Hitmanpro.Is there another application  or method i can clear this infection on my external drive without deleting what appears to be folder short-cuts?i have tried to use kaspersky,Eset NOD32 and Microsoft Essentials but all these can not detect any of these malware on my external drive;Any other ideas???
0
Comment
Question by:protechzm
  • 7
  • 6
  • 4
  • +1
20 Comments
 
LVL 65

Expert Comment

by:rockiroads
Comment Utility
you tried malwarebytes? one of the best antispyware. Remember virus and spyware are two different things but both can be harmful
0
 
LVL 29

Assisted Solution

by:Sudeep Sharma
Sudeep Sharma earned 50 total points
Comment Utility
What's the issue with HitManPro? You get full functioning 30 days trial of HitManPro then why not use it to get rid of the virus.

After that as suggested by rockiroads try malwarebytes.

32bit
http://dl.surfright.nl/HitmanPro35.exe

64bit
http://dl.surfright.nl/HitmanPro35_x64.exe

http://www.malwarebytes.org/mbam-download.php

Sudeep

0
 

Author Comment

by:protechzm
Comment Utility
its only scanning c:\ drive,cant get it to scan the other drives
0
 

Author Comment

by:protechzm
Comment Utility
sorry,i mean hitmanpro
0
 
LVL 65

Expert Comment

by:rockiroads
Comment Utility
is there a My Computer option (like in explorer) in hitman pro?
You should be able to select other drives also
0
 

Author Comment

by:protechzm
Comment Utility
My surprise really is that the is nowhere to select drive options,am using hitmanpro 3.5
0
 
LVL 65

Expert Comment

by:rockiroads
Comment Utility
I just downloaded it and your right, what a pile of crap lol. no idea but perhaps it scans the disk the exe is on?

do try malwarebytes
0
 
LVL 22

Assisted Solution

by:optoma
optoma earned 50 total points
Comment Utility
Hitmanpro dosn't give that option but it is a good scanner but limited with functions as not a resident AV.

Try Dr Web free version.
Start it up and hit yes to scan.
Then stop the scan(stop button on far middle right.)
Select custom scan and hit the external drive along with your C drive.
Then start scan.

NB>Scan will take a while
http://www.freedrweb.com/cureit/
0
 
LVL 29

Expert Comment

by:Sudeep Sharma
Comment Utility
Let try this:

Open HitManPro 3.5 on the First Page on Left hand side corner there is a button named "Settings" click on it. Now on this page you would see "Show 'Scan with Hitman Pro' on files and Folders in Windows Explorer". Just Check that. There should be tick on it.

CLick OK and close the HitManPro.

Now open the external drive from My COmputer. Select all the folders (Ctrl+A) Right Click with Mouse and Select Scan with HitMan Pro.

I hope that would do the trick.

Sudeep
0
 

Author Comment

by:protechzm
Comment Utility
just tried malwarebytes,still can remove this virus/trojan or what ever you call it that is showing the folders as short-cuts;Any other ideas???
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 22

Expert Comment

by:optoma
Comment Utility
Try Dr Web
0
 
LVL 29

Expert Comment

by:Sudeep Sharma
Comment Utility
Did you try with HitManPro as I suggested above?

Sudeep
0
 

Author Comment

by:protechzm
Comment Utility
i tried  hitmanpro,but when i select all the folders in my external drive and select scan with hitmanpro,the folders decline the scan with an error showing an executable file ydhievx.exe and saying "its refering to a shortcut that has been changed or moved,do you want to delete?"
0
 
LVL 65

Expert Comment

by:rockiroads
Comment Utility
you might need to try some rootkill removal stuff. bear in mind whatever you do, you run the risk of losing your stuff because folders converted to shortcuts might mean data is lost. you can try recovery tools like getdataback or recuva but I don't know the chances of a good recovery.

some rootkill scanners http://www.techsupportalert.com/best-free-rootkit-scanner-remover.htm
0
 
LVL 65

Expert Comment

by:rockiroads
Comment Utility
reading up, it seems the culprit is buoufo.exe

can you try booting up in safe mode then running malwarebytes or something?
0
 
LVL 22

Expert Comment

by:optoma
Comment Utility
Show hidden files and folders and you will see your proper folders.
Those shortcut folders are put in place by the worm and that file is playing its part in the process
http://www.bleepingcomputer.com/tutorials/tutorial62.html

0
 

Author Comment

by:protechzm
Comment Utility
Guys,i have tried all that has been said but to no avail,i tried to open my external drive on a linux box and i could see the folders normally with no short cuts,i also was able to see the other exe files for the same folder,i deleted the exe files then went back to windows to try and open the external drive and guess what!i can not see All folders,i go back to Linux and i can see them,does anyone understand what is going on?or how do i rather get rid of this issue???
0
 
LVL 65

Accepted Solution

by:
rockiroads earned 150 total points
Comment Utility
if u can seen them in linux, can you back them up somehow, perhaps try renaming or copying one folder.
Have u tried connecting this to another pc to see if the same issue occurs?
0
 
LVL 29

Expert Comment

by:Sudeep Sharma
Comment Utility
>>>"its refering to a shortcut that has been changed or moved,do you want to delete?"

You should delete it, I think HitManPro would take care of it.

Sudeep
0
 

Author Closing Comment

by:protechzm
Comment Utility
I have decided to award Rockiroads 150 points becuase he gave me  the suggestion to back them up and eventually rename the folders for them to appear in windows,thats done the trick.Advicew to use Hitmanpro did detect a few items,But all in all   the solution to recover them from a linux box was not gotten from any of the responses;
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Most PC repair technicians (if not all) always start their cleanup process by emptying the temp folders before running any removal tools. It makes sense because temp folders are common places for malware installers to lurk and removing all the junk …
It started not too long ago. It was at first annoying. My keystrokes seemed to be randomly generated, not the ones I typed on the keyboard. For some reason this only happened in certain applications (especially browsers such as IE11, Firefox and Chr…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now