Solution for Folders changed to Aplication .exe on usb drive or memory card

Your USB flash drive or memory card folders changed to Application (exe). Its a virus/worm that infected you. This worm will duplicate all your folders and create an executable files with its name(example: my music folder will be duplicated with my music.exe). The original folders will be hidden. This type trouble occurs when you insert your USB storage drive to virus infected computer.  To Avoid this problem regular update your antivirus via internet and don’t put your USB storage device on any computer without identifying antivirus status on that computer. I will tell you some ways to avoid this type problem, see bottom of this article for that.

Solution for Folders changed to Aplication .exe on usb drive or memory card:-
1. Install, update your antivirus application. I used AVG free it found virus Worm/Autoit.ANVE (Computer should be virus Free otherwise it will affect again)

AVG updated

AVG Updated and showing “You are protected Now”

2. Right Click on Drive then choose scan With AVG Free, Delete all detected files to virus vault The .exe folder just removed. Now you need to do is show the original folders
3. Go to My Computer then Open Drive h: (my drive name is h:)
4. Go to top menu, Tools > Folder Options. Select View tab, if you have windows 7 then Click on Organise>Folder and Search Options then Click on View as shown Below

windows 7 show hidden files

all folders become exe

5. Mark the “Show hidden files and folders.”
6. Go to Start > Run, type cmd at the OPEN: box, and press OK. This will show the DOS command prompt
7. Using My Computer, view the drive of hidden folders
8. Go to Command Prompt and type this to unhide all folders and files:
attrib h:*.* /d /s -h -r -s

here “h” is the drive where hidden folders resides

 

How to Avoid Virus from your USB Storage (flash drive, memory card and portable HDD)

  • Keep updated your windows Defender or Microsoft Windows Essentials .
  • Keep updated your Antivirus software virus database from antivirus server.
  • Check your antivirus status, whether it is working or not.
  • Before entering your USB device on another users computer check computers antivirus status as mentioned above.
  • Regular Scan your Windows Computer with updated virus database.

Keep in mind installing a antivirus doesn’t mean that your computer is virus free. To make your computer virus free, regularly scan your computer with antivirus software. Before scanning check your antivirus virus definition update over internet.  If you have Genuine windows then Microsoft provides security software free of cost. You need to update Microsoft Security software regularly and set scheduled full scan on your computer as it remove viruses.  See the Images Below with updated definitions on Microsoft Security Essentials, it helped me to avoid changing folders to exe.

virus definition update to avoid folders changed to exe and other virus

virus and spyware definitions up to date to avoid virus

 

So follow above steps to avoid viruses from your computer.

69 thoughts on “Solution for Folders changed to Aplication .exe on usb drive or memory card”

  1. Thanks for your solution. You are Fab. I have been struggling for a week for fix without loosing my valuable files.
    Yours work like magic
    thank you
    keep up the good work

  2. Supper kool awesome get my data back, i was too upset, when my Phone memory is effected by this kind of virus. i’m going to format my memory before formatting i just check on google what is the solution of this virus, very helpful your tutorial specially Command line :D

  3. Thank you so much mister. :))) You helped me too retrieve my important files especially my project.. Thank you so much .. You really help me a lot.. Thanks!!! Keep it up

    1. Hi,
      reply for who face prolem “drive path not found”
      before using command please enter in your problem drive with command
      c:\i:
      then hit enter here me assume “I” as your problem face drive letter.
      then try this command “I:\*.* /d /s -h -r -s”
      it will sure solve your problem.

  4. I really need this to work. I tried it out, but it says “Access denied – J:\AUTORUN.INF” I ran Panda USB Vaccine before doing your method, which is probably the problem. Do you know how I can fix this/delete the autorun.inf?

  5. It’s absolutely awesome. I already got that virus removed using AVG antivirus and the files are deleted and moved to virus vault. I didn’t find any option to recover those files from the vault. I was thinking and about to format the mass and external memory. Finally got information from this post and recovered those files by unhiding those files. Thank you so much. I’ve saved the valuable data.

  6. I thought it won’t work but waiting about 30 sec and it worked like a charm! YOU ARE THE BEST! And I don’t need to use AVG, i use Avast!

  7. when i am connecting my memory card with my system a copy of each item is made in it of size 1691 kb and thats ol r .exe …how it can b recover plz hlp

  8. something rename the usb flash drive folder to .exe,, I scan the pc with Norton and it remove Trojans and I scan the flash drive, it shows no infections.. I follow this steps but it shows path no found. files still show .exe extension,, how can I change to normal folder.

  9. Superb info – thank you ever so much!! I had 2 flash drives infected at work – I lost some vital stuff that could have potentially had me fired had it been gone forever because I’d have missed a big deadline if I’d had to start over – phew. Your method was clear and easy to follow. Thanks again.

  10. when I type ” g:\*.* /d /s -h -r -s ” in the Command Prompt I get this…

    “The system cannot find the path specified.”

    G is my drive

  11. can you help me with my problem? when i inserted my usb it detected with virus. i accidentally moved it to vault..when i restored it to my usb, i can not open it anymore..it says that
    Windows can not find ‘G:\RECYCLER\894133\bf.exe’. make sure you typed the name correctly, and try again… what should i do?please help me..that folder is important to me…

  12. I am getting:

    “Invalid Switch – /d/s-f-r-s” where F is the name of my drive.

    Also once I click on the unhidden files, it shows me unhidden folders but none of the data I had in the card. But the card is still full and so I know it is not deleted. Please help me recover these files. Thanks.

  13. Hi I am getting this error in cmd- “Access Denied -E:\System Volume Information”

    Plz help.Have lots of important data on HDD

  14. Hi, I had the same problem – all my folders in my memory card turned to .exe files and so I had to format my card.. Now there’s only one file called myfolder.exe .. Is there any way to get my old data back? Please help me, I need my data desperately! :(

  15. Hello Surendra I tried the trick but i got ” “The system cannot find the path specified.
    I used from A to Z. I have Run with Admin. i tried on another PC.what is the next solution?

  16. i have mcafee for anti virus and it wont find the damm worm. can you please help me and it is very urgent man. and i also tried the command prompt code and it won’t work. it says that path not found. even i wrote the correct drive name

    1. Please check mcafee security is active and update mcafee to latest version.

      h:\*.* /d /s -h -r -s
      Above h: is drive letter which you need to replace with your drive letter. Go to my computer and check what is your drive letter.

  17. I have a prob. on this. please note that when i open the H drive (this is my memory stick drive), i can see the files (with the names changed), it has a size of 4 GB and my memory card is 2GB. But when i see the properties of H drive, it says 35 MB used. Hence when i tried to use
    the above steps, scanner says no defect found. Kindly help me out. I really need these files.

  18. Hi. Thank you for the assistance. I am experiencing the same problem. But not on a memory stick. I have a server running SBS 2011. I have 5 Hard Drives in the server. 2 Drives RAID 1 for the OS.

    Then I have 2 Drives RAID 1 as the file server. Now on this volume all Word documents are renamed to .exe and the orinigal hidden as a system file. I can see the files, but users that want to access the files cannot (The view system file tick box is not on, on their PC’s)

    I am running Viper AV and it does pick it up, I then delete the found threats in Viper. I user tantidote to fix the files (Make them non-system files again. This works for about 5 minutes..

    The something is changing all files again. Viper picks it up again but the same process then follow.

    Obviously I am not getting to the root of this virus, as it keeps on running. ANy idea how I can put the root of the virus to bed?

    Thanks

  19. Command Line utilities came to my rescue. Thanks for your Help …

    I got rid of this virus after finding the rundll32.exe process in my task manager.

    1. Look for the processes that have no description or whose size in properties is 664 or 665kb. Find its location.
    2. Remember this file is sh attrib file so u will not be able to see it even if SHOW HIDDEN FILES OPTION is ON (I wonder why i did not think about this before) but this is where command line utility comes in rescue,go to that location in command window and use the command attrib \*.* /d /s -h -r -s.
    3. Now, u will be able to see the file.
    4. Remove the process from Task Manager first and then delete the exe.
    4. Now, delete the exe files from pendrive and re-insert your pendrive.

    I hope it helps …

  20. I followed all the steps given here. though my virus infected .exe files have been moved to virus vault of AVG, but I’m still unable to see my original folders even after following all the steps given for unhiding files and folders. Please help

      1. Thanks for the reply, I am using attrib F:\*.* /d /s -h -r -s for scanning my external hard disk which is the same result of access denied.

  21. I, too, have gotten “access denied” throughout the entire process. I’ve tried everything. It just won’t work.

    1. run CMD as administrator……… To run as administrator go to start>accessories> then right click on command prompt and select run as administration. Or check drive letter is correctly entered.

  22. is dere any space between s and -h, -h and -r ?
    i am facing a problem after typing I:\*.* /d /s -h -r -s i am getting path not found……

  23. thanks for your post i was having this problem in my external hard disk which all my games were in it and i thought i could have lost them

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>