up vote 2 down vote favorite
share [g+] share [fb]

I have a virus that renames all jpg file extensions to EXE files and hide the original files at the same folder!! I can see hidden Files with FarManager and I cannot see them in Windows Explorer(even with show hidden files option?!!)

How can I restore it to its original file extension? Do you have any tool to scan the converted file and restore it to its original file extension? What the virus name? how can I remove it manually?

link|improve this question
4  
Please try kaspersky or AVG Free, imho they are better than Norton and free. – Nathan Adams Jun 5 '10 at 23:02
3  
Actually, I'd recommend Microsoft's Security Essentials. They made the operating system, I think they know how to make the quickest AV for it. Oh, and don't forget the best part - it's free. – Breakthrough Jul 8 '11 at 1:42
The hidden files probably have a system file attribute set. Enable showing both hidden and system files, and they should appear. – TuxRug Jul 8 '11 at 5:51
Huh? Sircam's back? – Fiasco Labs Nov 13 '11 at 21:12
breakthrough. Personally, I don't agree at all. – Sirex Dec 14 '11 at 7:41
show 2 more comments
feedback

1 Answer

up vote 0 down vote

What AV program are you running?
Have you tried running a full system scan with up to date definitions?
The only reference I can find to the problem that you are having is in an archived Forum from 2001: http://forums.devx.com/showthread.php?t=34744
Without knowing the name of the virus it would be very hard to give a solution to removing it manually.

link|improve this answer
I got Norton Corporation with the latest Virus Definition. – user29373 Feb 25 '10 at 10:09
Have you tried running a full system scan? If that shows up nothing then try running an online scan, i know Kaspersky have a very good online agent. You may have to turn Norton off, i'd read the users guide on Kasperskys Site: support.kaspersky.com/viruses – Joe Taylor Feb 25 '10 at 13:01
In addition to Joe, run a full system scan with Malwarebytes' Anti Malware, you can remove it afterwards... Kaspersky + MBAM usually does the trick with me! ;) malwarebytes.org/mbam.php – BloodPhilia Jul 23 '10 at 11:49
@user29373 Here are other newer variants virus-com.com/viruscom/viruscom_74397.html . I still dont get the question, Are the files being renamed, or is the name of other files being used to create the "copies" of the virus? You said " they still exist hidden" and "how do I turn them back to original extention" ?? First (as always) you must find and stop the thing doing it. – Psycogeek Jan 13 at 13:34
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.