바이러스

How can I access data on an external drive after a virus turned folders turned into .lnk files?

29 Apr 2011

Due to some virus on my computer, all folders on external memory connected to the computer used to turn into .lnk files, pointing to the actual folder location. It used the virus file to function. I ran a virus scan and deleted the virus after mapping it out.

However, now, due to unavailability of the malcode, the .lnk associations on the external hard drive aren’t working. The memory details of my external drive say that all data is still present on it, but it’s gone somewhat hidden, meaning I can’t access it because the original folder doesn’t show up, and the .lnk associations aren’t working because of non-availability of the virus code.

What do I do to recover my data? Kindly reply. Thanks

Browse other questions & answers in the category Windows Questions; tagged .ink, external drive, file associations, folders, malware, microsoft windows; or ask your own question.

Comments for this Question are closed.

If you are looking for help, please ask a new question here.

We will be happy to help you!

22 Answers — Write an Answer and Log in to Vote

0 votes

Rodrigo

April 30, 2011

Hi, friend.
The virus you’re talking acts by installing itself in your external drive, hiding your folders as system protected files and then creating false folders with the exact same icon and name which serve as shortcuts to the virus itself. As you say you already removed it, all you have to do is change your folders back to a normal state. Here’s how you do it (assuming you’re using Windows):

1)Open up Folder Options (you can find it in the Control Panel or under the “Tool” menu on Windows Explorer);

2)Click on the “View” tab;

3)You will see a list with a lot of checkboxes, go ahead and check “Show hidden files and folders”. Also make sure you uncheck “Hide protected system files”;

4)Now go to your external drive and you will see your folders back. Unfortunately, they cannot be changed back into regular folders manually (at least not in an easy way), so you will have a bit more work to do here. You have to create new folders somewhere else in your computer, (for example, inside a “usb backup” folder in My Documents) with the same names of the folders the virus affected. Ignore any folder with weird names (e.g folders you didn’t have before catching the virus), as they may still contain undetected malware. You can also ignore the “RECYCLE” folder, as it is automatically created by the system if needed;

5)Now you can copy the contents of each individual folder into its duplicates, as the files itself will probably be untouched by the virus;

6)After you’ve finished copying the files, backup the files you still have in the drive’s root folder (the one you first open when browsing your external drive), again ignoring any files with weird names, for the same reasons above.

7)Now, as a last safety measure, format your drive, to make sure you get rid of any possible virus.

8)Finally, copy your files back into the drive and you are good to go!

Best Regards!

Keyaguha

Thanks a lot Mr. Rodrigo. I try your steps and my problem was solved.

July 18, 2011

rafi

hello there, rodrigo , ur soln is extended so here is bypass use
attrib -s -h -r *.* /s /d
this wll clean all up
thanks

[참고자료]

http://www.makeuseof.com/answers/access-data-external-drive-virus-turned-folders-turned-lnk-files/