Computer Support Forum

Renamed image files immediately auto-revert to old name

Question: Renamed image files immediately auto-revert to old name

The origin of the images was 'save-as' from the WEB, and they had peculiar names which included 'jpg/png' in the name, as well as in the extension; many images had a lengthy name made up of (code) numerous characters.

More replies
Relevance 100%
Preferred Solution: Renamed image files immediately auto-revert to old name

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Relevance 115.13%

The origin of the images was 'save-as' from the WEB, and they had peculiar names which included 'jpg/png' in the name, as well as in the extension; many images had a lengthy name made up of (code) numerous characters.

Answer:Renamed image files immediately auto-revert to old name

Instead of using "save as", us a screen grabber such as Snagit, there are also free ones out there.

3 more replies
Relevance 77.49%

Hi folks,
Another simple one,,,, for you guys anyway.
I have just spent hours saving images to My Pictures.
I used names and numbers to save them by.
I just went to INSERT them into a Word page, when up popped a message. I didn’t recognise or read it – just deleted it.
I then noticed that all the saved images have the same name/number, and are numbered (in brackets).
It’s completely UN done what I’ve spent hours doing.
Before I start it all again, can I revert them back to my names ?
Cheers all

More replies
Relevance 72.98%

Hi Moderators
All my images files have been encrypted/inaccessible.
Am assuming only .jpg/.jpeg files are renamed (with weird names) and also type is changed to ".b567" file type.
 
1) I've downloaded & run your tool "Farbar recovery Scan Tool", it has generated two log files
I've pasted FRST.txt & attached Addition.txt
 
2) I'm suspecting that this exe file(malware) has triggered all this mess
C:\Users\Nazia\Downloads\Install_Flash_0.9.2.1.exe
I've deleted this exe file now
 
3) I've also deleted everything from the %temp% folder
 
 
Thanks in advance!!
 
Thanks
Nazia
 
_______________________________________________________________________________________
Below is FRST.txt log 
-----------------------------------------
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-11-2016
Ran by Nazia (administrator) on NAZIA-PC (24-11-2016 03:01:00)
Running from C:\Users\Nazia\Downloads
Loaded Profiles: Nazia (Available Profiles: Nazia)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVID... Read more

More replies
Relevance 72.98%

Hi ModeratorsAll my images files have been encrypted/inaccessible.Am assuming only .jpg/.jpeg files are renamed (with weird names) and also type is changed to ".b567" file type. 1) I've downloaded & run your tool "Farbar recovery Scan Tool", it has generated two log filesI've pasted FRST.txt & attached Addition.txt 2) I'm suspecting that this exe file(malware) has triggered all this messC:\Users\Nazia\Downloads\Install_Flash_0.9.2.1.exeI've deleted this exe file now 3) I've also deleted everything from the %temp% folder Please help me get all  my image files back de-crypted.  Thanks in advance!! ThanksNazia _______________________________________________________________________________________Below is FRST.txt log -----------------------------------------Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-11-2016Ran by Nazia (administrator) on NAZIA-PC (24-11-2016 03:01:00)Running from C:\Users\Nazia\DownloadsLoaded Profiles: Nazia (Available Profiles: Nazia)Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Language: English (United States)Internet Explorer Version 8 (Default browser: FF)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file... Read more

Answer:All .jpg(image) files renamed & re-typed as .b567 file type

Also, I see a README html file in all folders that says:
 
CERBER RANSOMWARE
Instructions

☑ Select your language
English
العربية
中文
Nederlands
Français
Deutsch
Italiano
日本語
한국어
Polski
Português
Español
Türkçe

Can't you find the necessary files?
Is the content of your files not readable?
It is normal because the files' names and the data in your files have been encrypted by "Cerber Ransomware".
It means your files are NOT damaged! Your files are modified only. This modification is reversible.
From now it is not possible to use your files until they will be decrypted.
The only way to decrypt your files safely is to buy the special decryption software "Cerber Decryptor".
Any attempts to restore your files with the third-party software will be fatal for your files!
You can proceed with purchasing of the decryption software at your personal page:
Please wait...http://ahuqfrqk54v3vnzj.1kvftk.top/D206-7429-DDDB-008F-3C3Bhttp://ahuqfrqk54v3vnzj.lw19ft.top/D206-7429-DDDB-008F-3C3Bhttp://ahuqfrqk54v3vnzj.onion.to/D206-7429-DDDB-008F-3C3B
If this page cannot be opened  click here  to generate a new address to your personal page.
At this page you will receive the complete instructions how to buy the decryption software for restoring all your files.
Also at this page you will be able to restore any one file for free to be sure "Ce... Read more

3 more replies
Relevance 66.01%

Alright, so get this: if I try and change the brightness settings in the Nvidia control panel, after moving the slider to darker or lighter, the screen will immediately adjust back to a standard brightness. This happens in games too. I'll find an area too dark and change the in game brightness and bam, it just reverts back. The thing is, the slider doesn't jump back or anything, the computer just adapts the new brightness so that it looks like the standard. Here are a couple of screenshots to visualize my rambling. Notice the gamma settings and the fact that regardless of which setting I chose, the screenshot brightness is literally exactly the same. This is not a monitor issue because 1) I've turned off all adaptive measures on my TV and 2) those are screenshots, they would not display the monitor settings.
 

 Standard.jpg   61.86KB
  0 downloads Gamma = 1

 2.jpg   62.03KB
  0 downloads Gamma = 2

 2.8.jpg   62.02KB
  0 downloads Gamma = 2.8
 .3.jpg   62.03KB
  0 downloads Gamma = 0.3
 
Edit: here's some Windows Calibration screenshots. Notice the slider positions and the fact that the image doesn't change relative to the slider. 
 
 
 Standard.jpg   32.38KB
  0 downloads Standard Gamma

 Max.jpg   32.18KB
  0 downloads Max Gamma

 Min.jpg   32.18KB
  0 downloads Min Gamma... Read more

Answer:Brightness settings revert immediately after I change them!

Figured it out. It was friggin' f.lux. 

2 more replies
Relevance 61.09%

Weird issue I hit a couple of times now (Win7 Home Premium). I had just fully patched yesterday btw, before this occurred.

I created a folder on my desktop, say it was called "temp".
I dragged some files into it.
I created another folder on my desktop, and named it "whatever".
The previous folder, "temp" now renamed itself "whatever (1)" (might have ended in (2), whatever convention Windows uses for auto-renaming)

So I renamed the original folder to "temp".

Likewise when I added a third folder bearing a different name, the first two that I had created this session were auto-renamed to become copies of my new folder name, with number suffixes on them.

Answer:Existing folders get auto-renamed

  
Quote: Originally Posted by skydiver123


Weird issue I hit a couple of times now (Win7 Home Premium). I had just fully patched yesterday btw, before this occurred.

I created a folder on my desktop, say it was called "temp".
I dragged some files into it.
I created another folder on my desktop, and named it "whatever".
The previous folder, "temp" now renamed itself "whatever (1)" (might have ended in (2), whatever convention Windows uses for auto-renaming)

So I renamed the original folder to "temp".

Likewise when I added a third folder bearing a different name, the first two that I had created this session were auto-renamed to become copies of my new folder name, with number suffixes on them.


Make sure that when you rename a file or folder, that nothing else is selected.

9 more replies
Relevance 59.04%

Hello Staff and Users of Vista Forums,
Recently, less than a week ago, I lost the control to rename or move my
folders. As you can presume, this problem is very tedious. I have looked
around the topics here on Vista Forums and have not been able to solve
the problem. I have taken ownership of my folders and that hasn't
changed the situation as suggested. When I do attempt to rename or move
my folders, I receive no message, and the file stays where it was, how
it was. This only happens with my folders, my files show no resistence
to being moved or renamed as I see fit.
I am running Windows Vista Home Premium Service Pack 1 and have owned
the computer for around one and a half years. Vista was pre-installed.
Thank you for your attention and thanks in advance for your help.
--
Mush Man

Answer:Renamed Folders Revert to Previous Names, Cannot Move Folders - FOLDERS ONLY

Mush Man;838106 Wrote:
> Hello Staff and Users of Vista Forums,
>
> Recently, less than a week ago, I lost the control to rename or move my
> folders. As you can presume, this problem is very tedious. I have looked
> around the topics here on Vista Forums and have not been able to solve
> the problem. I have taken ownership of my folders and that hasn't
> changed the situation as suggested. When I do attempt to rename or move
> my folders, I receive no message, and the file stays where it was, how
> it was. This only happens with my folders, my files show no resistence
> to being moved or renamed as I see fit.
>
> I am running Windows Vista Home Premium Service Pack 1 and have owned
> the computer for around one and a half years. Vista was pre-installed.
> Thank you for your attention and thanks in advance for your help.
Hello Mush Man, and welcome to Vista Forums.
This tutorial may be able to help. http://www.vistax64.com/tutorials/13...vista-fix.html
Hope this helps,
Shawn
--
Brink
*There are no dumb questions, just the people that do not ask
them.*
'*VISTA FORUMS*' (http://www.vistax64.com)
*Please post feedback to help others.*

6 more replies
Relevance 58.63%

After installing Communicator 4.7, everytime I log onto the internet with an FTP client software or Communicator the internet settings get set back to auto disconnect after 5 minutes. I have Window 98 (1st edition), and an ISDN modem using both lines. By the wat, IE 4.0 seems to work ok, but if I use FTP software or Communicator after I am logged in, it will change to 5 minutes again. Frustrating.
 

Answer:Auto disconnect settings revert to 5 min.

It doesn't always seem to do it with the FTP software.
 

3 more replies
Relevance 57.81%

Hello,

Whenever I log on to a non-administrator account, my computer automatically logs itself off again before I get a chance to do anything. I see the logging on message, and before the desktop even shows itself, I see the 'saving your settings' message, and I'm back at the welcome screen.
I'm pretty sure it's a bad configuration in one of the administrative tools.

I'm running windows xp pro on service pack 2...

How do I fix this???
 

Answer:Log on, then auto log-off immediately...?

thinkreddie said:

Hello,

Whenever I log on to a non-administrator account, my computer automatically logs itself off again before I get a chance to do anything. I see the logging on message, and before the desktop even shows itself, I see the 'saving your settings' message, and I'm back at the welcome screen.
I'm pretty sure it's a bad configuration in one of the administrative tools.

I'm running windows xp pro on service pack 2...

How do I fix this???Click to expand...

i dont know exactly what causes this, mine did that a couple times and i ran a disk check and did a reboot and i havent seem to have a problem with it again yet. (cmd chkdsk or just chkdsk from the run menu.) hope this idea helps you out.
 

2 more replies
Relevance 57.81%

text and icons renamed into weird symbols , idon't know ehy it does that. but sometimes it just gets renamed to weird symbols, and i cant do anything plz help!!!
 

More replies
Relevance 56.99%

Hello,

I am a technology consultant helping my client with a very infected pc- I have full remote access to the box and he is available if I have to run something on the box with no network.

His pc became infected with some ransomware scam - the main txt file reads:

Your documents, photos, databases and other important files have been encrypted
with strongest encryption and unique key, generated for this computer.

Private decryption key is stored on a secret Internet server and nobody can
decrypt your files until you pay and obtain the private key.

If you see the main locker window, follow the instructions on the locker.
Overwise, it's seems that you or your antivirus deleted the locker program.
Now you have the last chance to decrypt your files.

Open http://43qzvceo6ondd6wt.onion.cab or http://43qzvceo6ondd6wt.tor2web.org
in your browser. They are public gates to the secret server.

If you have problems with gates, use direct connection:

1. Download Tor Browser from http://torproject.org

2. In the Tor Browser open the http://43qzvceo6ondd6wt.onion/
Note that this server is available via Tor Browser only.
Retry in 1 hour if site is not reachable.

Copy and paste the following public key in the input form on server. Avoid missprints.
6K4VBU7-5F45EMO-RDHIDWD-2NUDTWJ-FFZEMGH-2XN24LO-ST2ZTV3-HN2YDM2
UUA2W7C-S6WQGQY-CDANXRT-IHHNKUD-P7GTI7D-TWP3L2M-23R4NW4-TAYTSBX
UAR6HNU-J55JLSN-BAJ6CI3-TOIORZV-XM373T2-SMFTJ7E-HSECWDG-TR22WMO
Follow the instructions on the server... Read more

Answer:Help! Hijacked Files Encrypted - all files renamed with .askyneh (ransomware scam)

Hello,

Unfortunatelly, there is not way to restore your files to working condition at the moment.
 

3 more replies
Relevance 56.58%

Hello,

I am a technology consultant helping my client with a very infected pc- I have full remote access to the box and he is available if I have to run something on the box with no network.

His pc became infected with some ransomware scam - the main txt file reads:
 

Your documents, photos, databases and other important files have been encrypted
with strongest encryption and unique key, generated for this computer.

Private decryption key is stored on a secret Internet server and nobody can
decrypt your files until you pay and obtain the private key.

If you see the main locker window, follow the instructions on the locker.
Overwise, it's seems that you or your antivirus deleted the locker program.
Now you have the last chance to decrypt your files.

Open http://43qzvceo6ondd6wt.onion.cab or http://43qzvceo6ondd6wt.tor2web.org 
in your browser. They are public gates to the secret server. 

If you have problems with gates, use direct connection:

1. Download Tor Browser from http://torproject.org

2. In the Tor Browser open the http://43qzvceo6ondd6wt.onion/
Note that this server is available via Tor Browser only. 
Retry in 1 hour if site is not reachable.

Copy and paste the following public key in the input form on server. Avoid missprints.
6K4VBU7-5F45EMO-RDHIDWD-2NUDTWJ-FFZEMGH-2XN24LO-ST2ZTV3-HN2YDM2
UUA2W7C-S6WQGQY-CDANXRT-IHHNKUD-P7GTI7D-TWP3L2M-23R4NW4-TAYTSBX
UAR6HNU-J55JLSN-BAJ6CI3-TOIORZV-XM373T2-SMFTJ7E-HSECWDG-TR22W... Read more

Answer:Help! Hijacked Files Encrypted - all files renamed with .askyneh (ransomware sca

Hi there,
It appears that you have been infected with CTB-Locker - and unforunately it is a very real ransomware.
Please read below for more information.

The newest variants of CTB-Locker typically encrypt all data files and rename them as a file with a 6-7 length extension with random characters. The newer variants also do not always leave a ransom note if the malware fails to change the background, like it generally does. Compounding matters, the newer CTB-Locker infection has been seen in combination with KEYHolder, TorrentLocker (fake Cryptolocker) or CryptoWall ransomware. Unfortunately, there is still no known method of decrypting your files without paying the ransom and with dual infections, that means paying both ransoms.
A repository of all current knowledge regarding this infection is provided by Grinler (aka Lawrence Abrams), in this tutorial: CTB Locker and Critroni Ransomware Information Guide and FAQ
There is also an ongoing discussion in this topic: CTB Locker or DecryptAllFiles.txt Encrypting Ransomware Support & Discussion.

If you have any questions, it is best that you post in the discussion topic mentioned above.
To avoid confusion I have asked a Moderator to close this topic. Good luck.
Regards,
Alex

1 more replies
Relevance 56.58%

what the heck is going on with the lappy ? my T43 screen will go off if the mouse is not moving or i am not typing for even 1 sec ... I mean screen turns black if no movement was made in 1 sec ...  i can get it back with a mouse move or a tap on keyboard...but this is very annoying ...  I cannot read a post ... cannot stop typing to stay the screen on ........help ... TIAMessage Edited by unicorn129 on 06-14-2009 01:43 AM













Solved!

Go to Solution.

Answer:HELP !!! T43 screen auto shut off immediately !!!

sorry ... fixed by Fn+F3 ... but still cannot find why it acted that way ... weird enough

1 more replies
Relevance 56.58%

After upgrading to windows 10 for more than 2 months,can I roll back to windows 7 using stored ( Macrium Reflect Backup ) image?

Answer:After using W10 for over two months, can I use an image to revert back to W7?

Yes. Just be aware that all your documents, personal files and anything that was/is stored on your PC will revert back to the state it was in when the image was created.

2 more replies
Relevance 55.76%

I can find instructions for installing a custom image for the initial splash screen, but I have a machine that was previously owned by someone who put on a custom image.  All I want to do is take it off and revert it to the original one.  Any help would be appreciated.
 
Thanks in advance

More replies
Relevance 55.35%
Answer:Laptop auto-hibernates after 4 minutes immediately after Windows 7 upd

  
Quote: Originally Posted by iarchitect


aaaa


A little more info on your issue may help you get some help....

1 more replies
Relevance 55.35%

Apologies - the Urgent in this is only because I'm unsure whether any action may need to be done before I close down in about 6 hours or so.

Basically my problem began in Picasa 3 where I watched a short vid then decided to change the filename. That done I closed the preview & went back to the main program where I discovered that Picasa had somehow decided I wanted the entire folder of images renamed so it has worked through the 500+ images and renamed each one as Filename001, Filename002, Filename003 and so on which as you can appreciate is now causing somewhat of a major headache for me. It would take me a good few hours I would rarely have to go through and rename each one manually, so my question basically is - is there any method or program that can undo the action as I can't find any means of doing so from within Picasa. All other options I've found in my searches are mainly to achieve pretty much the same i.e. bulk rename as Name1, Name2 etc so are of little help.

Anyone any suggestions what else I could try?

Answer:Urgent help needed - how to revert a bulk image name process?

I assume you don't have a Backup to fall back on. I use these two bulk renaming tools. You can see if they help. This is drop dead simple to use - http://www.fauland.com/af5.htm
This one has a more complicated interface but a couple other options - http://www.joejoesoft.com/vcms/108/

3 more replies
Relevance 55.35%

Hi, I own a Lenovo G550 laptop preinstalled with windows 7 Home Premium. Lately, I've upgraded to Windows 8 Pro. Now that I want to revert back to Windows 7 I can't seem to find a way to do that as the recovery option simply doesn't work (the rescue button is inactive). I didn't format the HD partitions and the recovery partition (where the factory image is located) is still there. All  I did was inserting the Windows 8 DVD and clicking Upgrade - Windows did all the rest. How can I revert back to Windows 7 that came with the PC? Thanks, Ofir 

Answer:How do I revert back to the factory image after installing Windows 8?

hi ofircarmi,
 
Before you upgraded to Windows 8, did you created your Windows 7 recovery disc using this procedure? The reason I asked is because the One Key Recovery application & the OKR button will not work after you upgrade from Windows 7 to Windows 8 as discussed here.
 
If you didn't created a recovery disc, you will need a retail Windows 7 Disc to downgrade Windows 8 to Windows 7 or you contact Lenovo Technical Support to obtain the disc. Support phone list here.
 
 
Cheers

1 more replies
Relevance 54.94%

SOS! SOS!
 
Hi all.
 
Today I got quite a shock out of the blue discovered quite a substantial amount of my files, about 4gb, changed/renamed to enz files. These changed files are in one of my external hard drives, though there are also other files in this same drive unchanged.
 
I really cannot recalled what I did to cause this. Though what I did in the last few days was to visit many websites searching for solutions to resolve some problems related to my Android phone with a faulty-functioning rom (OS).
 
On my laptop today, with the attached affected ext hard drive plugged, I scanned with Rogue Killer, Mbam, ASW, and my own Eset which discovered 4 wombat items that was cleaned.
The rest of the scans uncovered nothing.
 
In addition, I downloaded a program, Pareto, intended to help to open all these enz files. But I hesitated upon fearing ending in more troubles if I executed it. Besides, what is subsequently annoying is even after removing this downloaded Pareto, it still display a dialog upon every boot, showing checking for updates.
 
PLEASE HELP.
 
Thank You.
Terence.

Answer:SOS! Files changed/renamed to enz files out of the blue!

This may be a new variant of TeslaCrypt ransomware which encrypts data and uses various extensions (.ecc, .ezz, .exx, .xyz, .zzz, .aaa, .abc, .ccc, .vvv) appended to the end of the filename as described described here.Did you find any ransom note? These infections are created to alert victims that their data has been encrypted and demand a ransom payment. Check your documents folder for an image the malware typically uses for the background note. Check the C:\ProgramData (or C:\Documents and Settings\All Users\Application Data) for a randomly named .html, .txt, .png, .bmp, .url file.These are some examples:HELP_DECRYPT.TXT, HELP_YOUR_FILES.TXT, HELP_TO_DECRYPT_YOUR_FILES.txt
HELP_RESTORE_FILES.txt, HELP_TO_SAVE_FILES.txt, RECOVERY_KEY.txt, DecryptAllFiles.txt
DECRYPT_INSTRUCTIONS.TXT, INSTRUCCIONES_DESCIFRADO.TXT, How_To_Recover_Files.txt
DECRYPT_INSTRUCTION.TXT, HOW_TO_DECRYPT_FILES.TXT, ReadDecryptFilesHere.txt, About_Files.txt,
FILESAREGONE.TXT, IAMREADYTOPAY.TXT, HELLOTHERE.TXT, READTHISNOW!!!.TXT, SECRETIDHERE.KEY
IHAVEYOURSECRET.KEY, SECRET.KEY, Help_Decrypt.txt, HELP_DECYPRT_YOUR_FILES.HTML
YOUR_FILES.HTML, DecryptAllFiles_<user name>.txt, encryptor_raas_readme_liesmich.txt
DecryptAllFiles_.txt, RECOVERY_FILES.txt, help_decrypt_your_files.html, YOUR_FILES.url
Howto_RESTORE_FILES_.txt, RECOVERY_FILE.TXT, RECOVERY_FILE_.txt, restore_files_.txt
howto_recover_file_.txt, how_recover+****.txt, ,_how_recover_.txt, recover_file_*****.txt

Note: The (*) represents random... Read more

38 more replies
Relevance 54.94%

M93p with the AMD HD8570: I switched the video option in BIOS from 'auto' to the onboard Intel. Now, using VGA, I can't get back into the BIOS and the monitor displays nothing but a "No cable connected!" message for a second before it goes dark.I removed the 8570, with no change as a result.The VGA cabling is secured. Why does the monitor report "No cable,?How can I reset the BIOS' video to 'Auto' when the screen is dark?

Answer:Monitor Dark & Says No Cable After Switching M93P BIOS To Onboard Intel; How Revert to 'Auto'?

Is cable or monitor really OK? Monitor should not report "No cable" if it is attached ... One solution would be to clear CMOS - check your HMM.





***Disclaimer: I am not Lenovo employee. While I do work for Lenovo Partner, all my contributions are my personal, non-official and not that of Lenovo or my employer.

1 more replies
Relevance 54.53%

Mod Edit:Moved to General Security from Win7 ~~ boopme
 
 
I think I may have a virus of some sort, because all of my files have been renamed with the following extension after all of them: .nowodfk
 
All word, excel, access, photos and pdf files extensions have this extension after them.  Is there a way to reverse this?  Any way to detect the virus, if any exist.  I have McAfee installed and even for a time I could not open it or Internet Explorer.

Answer:All of my files have been renamed

Hello,It looks like you are infected with CTB-Locker. Please read the information for this ransomware below.The newest variants of CTB-Locker typically encrypt all data files and rename them as a file with a 6-7 length extension with random characters. The newer variants also do not always leave a ransom note if the malware fails to change the background, like it generally does. Compounding matters, the newer CTB-Locker infection has been seen in combination with KEYHolder, TorrentLocker (fake Cryptolocker) or CryptoWall ransomware. Unfortunately, there is still no known method of decrypting your files without paying the ransom and with dual infections, that means paying both ransoms.A repository of all current knowledge regarding this infection is provided by Grinler (aka Lawrence Abrams), in this tutorial: CTB Locker and Critroni Ransomware Information Guide and FAQThere is also an ongoing discussion in this topic: CTB Locker or DecryptAllFiles.txt Encrypting Ransomware Support & Discussion.If you have any questions it is best to post them in the discussion topic.To avoid confusion I have asked a Moderator to close this topic.Regards,Alex

1 more replies
Relevance 54.53%

I used a system restore point.After it finished,it said that WINDOWS had renamed some files and folders and to view these changed names "Click Here".Well I viewed them,6or7inall.No harm.My question is this,...If i ever need to run 'System Restore' again,is there something a person can do to keep XP Home Edition from renaming files? Sincerly,XP Home Edition,Dell 3000,..thank you.
 

More replies
Relevance 54.53%

I have an issue where certain executables are being renamed to *.exe~

at the moment it is 2 programs which I use a lot. One a game and the other a downloading app.

I am guessing I have a virus of some sort but cannot find it.

I ran a fulls can from AVG and nothing to do with these files

I installed Trial of Norton and the same

Can any one help?

I am new to this so please be nice
Hijackthis Log

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 13:38:29, on 29/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\LogMeIn\RaMaint.exe
C:\Program Files\LogMeIn\LogMeIn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDO... Read more

Answer:Files being renamed to .EXE~

Hi, Welcome to TSG!!

You have two anti-virus programs running, which will cause trouble. Uninstall one of them.

Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, the Advanced Options Menu should appear;
Select the first option, to run Windows in Safe Mode, then press Enter.
Choose your usual account.

Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
(Report.txt will also be copied to Clipboard ready for posting back on the forum).
Finally paste the contents of the Report.txt back on the forum with a new HijackThis log

 

1 more replies
Relevance 53.71%

I received a laptop from a friend who was having many issues. i was able to boot into windows and copy his my documents folder to a flash drive. when doing this i noticed the file names for all his pictures had been changed to filename.jpg.cts I'll been searching for days now and can't find a solution on how to correct these files. any help would be GREATLY appreciated.

humbly yours.

mike

Answer:Files Renamed With A .cts Extention

Does he use either of these programs?

.CTS - ABC Programming Language Permanent Location Contents
.CTS - ClipTrakker Clipboard Collection (SoftwareOnline)

7 more replies
Relevance 53.71%

Hi!

I'd like to work with some files I have in IE's temp (cached) folder, which seems to be of a non-standard style folder.

C:\Documents and Settings\user\Local Settings\Temporary Internet Files

The temp files are listed by columns name , internet address , type , and date and size values.

I want to use the files (images) with the actual filename listed in the name column, but if I drag one out of the special temp internet file folder,say, on to the desktop, it takes on a name that is a very large character string.

any tips?

TIA!!
 

Answer:IE 7 temp files get renamed

yes you click on the item which you select to download. it will open it in the IE ant then save it.
 

2 more replies
Relevance 53.71%

Files deleted are stored in recycled folder as DC**** i.e. deleted file Test.txt appears as DC23229.txt. Also a file is created INFO which is updated with each deletion currently 6352Kb. OS Win98 se. Any ideas as to program causing this or method to disable it.

Answer:Recycled Bin files renamed

Thats how they are supposed to be.To look at the recycle bin properly open the Recycle Bin on the desktop or at the bottom of the tree in Windows Explorer.Recycle folder is a system folder and you should look at it directly.

6 more replies
Relevance 53.71%

My computer got infected with some malware that disabled the antivirus and added a .ecc extension to office, pdf, text and image files.
There was no ransom message, just some pornographic images at startup. There was a "syshost.exe" service installed and a program with a random name was running. I cleaned the malware and the antivirus works now, but these files no longer open.
For some files I have the unmodified original. I tried using Panda Ransomware Decrypt to extract the key and restore the files, but it failed.
Is it possible to use files that have the original and encrypted versions to extract information that can decrypt the rest of the files?

Answer:Files encrypted and renamed to .ecc

You are dealing with TeslaCrypt Ransomware. Unlike other ransomware that typically target images, documents, videos, and applications databases, TeslaCrypt also targets over 40 different video game related files. Any files that are encrypted will have the .ecc extension added to the end of the filename.There is an ongoing discussion in this topic: New TeslaCrypt Ransomware sets its scope on video gamersRather than have everyone start individual topics, it would be best (and more manageable for staff) if you posted any questions, comments or requests for assistance in that topic discussion.ThanksThe BC Staff

1 more replies
Relevance 53.71%

I have no idea what's going on. I noticed the problem when shortcut icons to some programs stopped displaying correctly. Then I found out that these programs were renamed at least exe and dll files, the remaining files were deleted.
The problem affected one drive partially. Mainly program files and program files x86 folders, and only first half of the applications there. At the moment it seems to have stopped spreading.
I cut off the internet and closed all the programs that used disc, including explorer. I am on Windows 8.1.
Here's the picture of how the affected programs look like.
I'm not certain if it's a virus or some malfunction.
There are three unusual things that happened today:
1. Windows prompt me to install 10 with a new message and after not bothering me for weeks.
2. Wps office update notification appeared. First time and I haven't used it twice. I closed it.
3. Chrome had weird error. No new tabs could be opened and it suggested I should free memory up by closing tabs. There were enough memory BTW. I closed it and couldn't restart, the shortcut icon got broken, it was affected. Had to reinstall.
 
First thought was that all this mess was caused by Chrome auto update went wrong. It doesn't convince me though.
 
 
Update 1.
 
I think something just wanted to delete all the files. The files that couldn't be deleted, because they were in use ("locked") were renamed. The rename pattern seems to consist of constant _d_ and some hash, which is proba... Read more

More replies
Relevance 53.71%

I had something get on my external hard rive and renamed some files. They look like Chinese symbols. And lock me out of others. These are photo files, RAW files , Photoshop files and some Jpgs.
I have attached the hijack this file

Answer:files renamed with symbols

Hello and welcome...Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.If Gmer won't run,skip it and move on.Also copi/paste your HJT log there.Let me know if that went well.

3 more replies
Relevance 53.71%

Hi,
 
I recently got hit by a malware wherein all my .jpegs, .docs, .xls, .psds  got a .LOCKED extension. I searched online for a long time and found out that Dr.Web had a free utility to decrypt these files.
So I first ran Windows Safety Scanner. This found 3 threats, 2 of which it removed. Then I tried to run the the Dr.Web utility. I had sent the same file versions in my email, so I had the original versions. But the Dr.Web utility shows me an error saying the files (the old and the new encrypted file) don't match. I need to get my files back soon, as I have a final presentation coming up.
Does anyone know of a way I can decrypt my files? 
If there is no other option, I would even consider doing a clean wipe of my OS, and if necessary my whole system (Since I have backups for most of my files). Would that solve my problem?
 
Sincerely
Ebi

Answer:Files renamed to .LOCKED

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/539666 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 53.71%

Just bought a 500 gb WD Passport external drive. Backed up my netbook (Win XP) files, then moved to my desktop (also XP). On my desktop some folders on my Passport have been renamed, such as from Documents to Documents.exe and from Music to Music.exe.

I've scanned for viruses, but nothing has come up on either computer or on the hard drive. I'm able to correct the folder names, but I'm afraid there's something else going on. Thanks in advance!
 

Answer:Folders renamed to .exe files

How did you back up?
 

3 more replies
Relevance 53.71%

How to get old name for renamed files in xp?pl.help

Answer:Get back old name of renamed files

You can't (unless you do a System Restore or look in your backups). Renaming a file overwrites the current name irretrievably.

2 more replies
Relevance 53.71%

I recently did a clean install of XP, plugged in my SimpleTech 500GB external hard drive, and my WD Passport, and had trouble getting them to be recognized by my laptop. They then went haywire and I got error messages from both saying they were not formatted, etc. I restarted, installed some more drivers for the hardware in my laptop (including plug and play, the proper version for my chipset), and they finally worked. However, all the folders that were on the disks were renamed, such that a folder named "videos" was renamed "videos.exe", and the original folders were "hidden". I can successfully delete the .exe files, "unhide" the folders and they work fine. But is this something I should be concerned with? Should I backup my files and reformat?
 

More replies
Relevance 53.71%

I was using XP on a 20GB (fat32) and my computer crashed. To make a long story short I bought a new drive. Now I?m using XP on a 80 GB drive (NTFS) I was using a 10 GB drive (fat32) as a backup drive to my 20 GB drive. How can I recover or access these files on this drive? Please take into consideration of my limited knowledge of computers and operating systems when answering my post. I hope this picture is readable.

Answer:The Computer Renamed All My Files

Try this data recovery tool:http://www.pcinspector.de/file_recovery/UK/welcome.htmThe D: drive you show is the 10GB backup drive, is that right? The File Allocation Table looks to be corrupted and it may not be a simple task to access your data.What does Disk Management say about the drive? Control Panel>'Administrative Tools'>'Computer Management'>'Disk Management'

1 more replies
Relevance 53.71%

The computer renamed all my files:

I was using XP on a 20GB (fat32) and my computer crashed. To make a long story short I bought a new drive. Now I?m using XP on a 80 GB drive (NTFS)

I was using a 10 GB drive (fat32) as a backup drive to my 20 GB drive. The computer renamed with letters and symbols all the files. How can I recover or access these files on this drive?

Please take into consideration of my limited knowledge of computers and operating systems when answering my post.

Thank you

Answer:Computer Renamed Files

Does the renaming follow any particular order? (I'm thinking of it being 6 numbers or letters followed by the ~ and then a number).Do they conform to the 8.3 naming convention? 8 figures before the . and 3 figures after it?Maybe a screen shot of a directory listing will help. Open up the directory in question. Then press "Alt" and "PrtScrn" at the same time.Then open Paint and paste it in there, save it and attach it to your next post. (or you can link to it if you have it hosted at one of the free image hosters like http://www.photobucket.com )

4 more replies
Relevance 53.71%

I'm having a problem with OE continually trying to compact files. I have 2 identities. In an attempt to figure out which identity had the problem, to stop one of them from running, I changed the file ending on the dbx files so OE wouldn't see them. Eliminating those dbx files seems to have at least temporarily solved the problem, but now I would like to recover the dbx files I renamed, one at a time to discover which of them might be the culprit, and I can't get OE to recognize the files now that I have renamed them once again to DBX. I have rebooted, to no avail. I also tried a system restore, but they did not come back that way either. Any other suggestions?
 

Answer:Recovering DBX files that have been renamed

11 more replies
Relevance 53.71%

I need help recovering old file names. I used file renamer to batch rename files. I selected more files than I meant to and it converted them all into new named and now they all end in TXT. Please help, i have no Idea how to recover the names. I am currently running WINXP home. It ws file renamer from sherrodcomputers.com

The logfile is attached, if somebody has the pro version they may be able to reverse it for me or write a quick batch file for it.
thank you so much,
unit321/pincmonkey
 

More replies
Relevance 53.3%

:cry I can fix the renaming, but I can't figure out how to fix the sizes. Every single program is suddenly 5KB and cannot be executed. Thanks.

P.S. No idea what the virus was other than it added a .vbs extention to all the files.

OS Name Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 3 Build 2600
OS Manufacturer Microsoft Corporation
System Manufacturer Dell Inc.
System Model Latitude D830
System Type X86-based PC
Processor x86 Family 6 Model 15 Stepping 10 GenuineIntel ~2394 Mhz
BIOS Version/Date Dell Inc. A12, 5/20/2008
SMBIOS Version 2.4
Hardware Abstraction Layer Version = "5.1.2600.5512 (xpsp.080413-2111)"
Total Physical Memory 4,096.00 MB
Available Physical Memory 2.91 GB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.96 GB
Page File Space 3.34 GB
 

Answer:virus renamed/resized all my exe files

First....have you tried a system restore to a point before this began?

Second...if you can not do a restore, then go Dougknox and download the ninth item to fix exe file associations.

Let me know how that works....then:
Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

If something does not run, write down the info to explain to us later but keep on going.
Do not assume that because one step does not work that they all will not.
READ & RUN ME FIRST. Malware Removal Guide

Notes:
If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

 

9 more replies
Relevance 53.3%

Laptop (running Vista) ran out of battery the other day and when I booted back up, all of my desktop icons were renamed to the date they were created. All of my internal files and folders are the same way. I've tried manually renaming them, and when the text box comes up, the original name is there, but pressing enter doesn't fix it. I've already tried aa system restore with no luck.
Need help ASAP.
 

Answer:Icons/files/folders Renamed Themselves...

16 more replies
Relevance 53.3%

This issue occurred yesterday, where a bunch of files magically got renamed to '.encrypted' extension, and they would not open now.I can only assume that this has to be caused by some sort of a ransomware/malicious process/virus/infection?The laptop runs on Windows 7, it is mainly used by my mother.According to her, she had opened a scam email which lead her to a link. She then apparently saw an antivirus warning which she didn't manage to take care of.Other than that we have no other information on how the issue could've occurred. Any help would be great,Thanks much.

Answer:Files renamed to '.encrypted' extension

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. 1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.2. The fixes are specific to your problem and should only be used for this issue on this machine.3. If you don't know or understand something, please don't hesitate to ask.4. Please DO NOT run any other tools or scans while I am helping you.5. It is important that you reply to this thread. Do not start a new topic.6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.7. Absence of symptoms does not mean that everything is clear.If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line. *************************************************************************Please download AdwCleaner by Xplode onto your Desktop.Before starting AdwCleaner, close all open programs and internet b... Read more

11 more replies
Relevance 53.3%

Hi experts,
This Pretty urgent.
trend micro has renamed my files msmgrx.exe to .vir extension due to some reason.
now when i open any file like explorer etc i need to browse the files to get the exact location.
now the problem is that there are many utilities that are installed on my system, i have a bunch of 390 files in system32 folder that has a extension of .vir
i dont know how to recover these files.
i am not a computer geek but this i have figured out by trouble shooting.
please help urgently as i am at my customer location and cant figure out what to do...
thanks
anurag

Answer:Trend Micro Renamed files to .Vir

Hello and welcome to TSF

Since you have also opened a thread in the Virus/Trojan/Spyware Help forum: http://www.techsupportforum.com/f50/...ir-396792.html

And as per forum rules:


Quote:




MULTIPLE POSTING

This refers to posting the same question or same replies in multiple areas of the site (also called flooding). Please only post only once. If you feel you have posted in the wrong forum, contact a Moderator or Manager, who will move the post for you. This also includes the creation of multiple new threads on the same or similar topics and sending PM's continuously to one or more Staff members.




Subsequently, this thread is closed.

1 more replies
Relevance 53.3%

Can anyone explain why some files found to be infected with viruses are only renamed and not deleted and others are simply deleted? I am running escan and although it is still running, so far I have had 5 deleted files, 9 renamed files and 4 errors.. (which adds up to 18 although escan has found 17...?)ThanksBoo

Answer:why are some virus infected files only renamed

because they may be needed by windows so are re-named to be safe rather than deleted.

6 more replies
Relevance 53.3%

I'm still trying to recover from the damage that the newest version of Secretmaker did to my system. I thought I was doing well. I changed back the names of some of my programs that it changed to gibberish like this "XSEEJLU". Then, when trying to install office 2000, system file protection informed me that my system files were messed up. Lo and behold, I looked in that folder and found that Secretmaker had changed the names of many windows system folders...so I'm assuming Windows cant recognize them because they're not the right names. YIKES! To top it all of my computer came pre-loaded with XP so I don't have a CD to restore from. Any way I could find out what these files names were before so I can fix them? I'm at the end of my rope. Thanks so much.

Answer:Windows System Files Renamed

If you have a system restore date set from before you used the Secretmaker ap, use it. Hopefully, you do.How to restore the operating system to a previous state in Windows XPhttp://support.microsoft.com/default.aspx?...b;en-us;Q306084

2 more replies
Relevance 53.3%

Sure hope someone can help. In order to try to keep his computer virus free, my husband doesn't have his main home office computer even hooked up to the internet. SOoooo, we didn't have any ant-virus software running on it - BIG mistake! Recently an office associate recently gave him some files on a USB pen, which apparently contained a virus. He began constantly getting a DOS window, and the batch file it ran was making a list of all the ".doc" files on his C: drive and all subdirectories, then writing their names to another file. I finally got on AVGs website and figured out how to manually download updated virus definitions and install them to his non-internet enabled PC. It found a virus, but only labeled it as "Generic Trojan Horse :NTX". It did get rid of the virus, and we thought the problem was ended. He does keep all his most important files on a different drive, so we didn't notice anything until a few days later when he realized that ALL of his other .doc files on his C: drive were GONE! Poking around the computer, I think I "found" all the files. They are in a strange C:\WINDOWS subdirectory, and all now are .bat files rather than .doc files. I tried to rename some of them, but to no avail. The dates and file sizes are similar to what we would expect if they were the original .doc files.

Can anyone tell me what to do to recover these file?

Thanks!

Answer:Files Deleted/renamed By Virus

When you run the .bat files what happens?

4 more replies
Relevance 53.3%

Can you help with a problem. "hostsagf" keeps appearing and I can't get rid of the problem. Here is my file. Also, I have Adsgone and Spybot Search and Destroy, but both crash when scanning files.

Logfile of HijackThis v1.97.7
Scan saved at 8:03:40 PM, on 9/14/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\SLEE81.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\xp_0781_8888\UMonit.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zapro.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program... Read more

More replies
Relevance 53.3%

Hi all,
 
this is my first post and (unfortunately) have been serious damage in many files on my computer!
 
The files have been renamed to something format: [email protected]
 
Please for your help!

Answer:Files renamed to [email protected]

someone, some help please... my files is crypted...

3 more replies
Relevance 53.3%

This issue occurred yesterday, where a bunch of files magically got renamed to '.encrypted' extension, and they would not open now.I can only assume that this has to be caused by some sort of a ransomware/malicious process/virus/infection?The laptop runs on Windows 7, it is mainly used by my mother.According to her, she had opened a scam email which lead her to a link. She then apparently saw an antivirus warning which she didn't manage to take care of.Other than that we have no other information on how the issue could've occurred. Any help would be great,Thanks much.

Answer:Files renamed to '.encrypted' extension

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. 1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.2. The fixes are specific to your problem and should only be used for this issue on this machine.3. If you don't know or understand something, please don't hesitate to ask.4. Please DO NOT run any other tools or scans while I am helping you.5. It is important that you reply to this thread. Do not start a new topic.6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.7. Absence of symptoms does not mean that everything is clear.If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line. *************************************************************************Please download AdwCleaner by Xplode onto your Desktop.Before starting AdwCleaner, close all open programs and internet b... Read more

11 more replies
Relevance 53.3%

Hi Experts
i am very badly in need of help...
i had run the trend micro on my system yesterday and it renamed files to .vir.
now the problem is that the files in folder system32 folder are renamed to .vir
like my file name msdrmgx.exe is renamed to msdrmgx_1d8.vir...
there are around 390 files of such nature..
if i try to run any application is says either some files missing or opens a open with directory for program to choose.
please help me urgently as i am stuck up without any IT support.
what should i do to rename these files again to proper extension and the system to work fine.
again mentioning i need urgent help since i am very badly stuck up at customer premises.
thanks
anurag

Answer:Trend Micro Renamed files to .Vir

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Relevance 53.3%

after recovering from a malware attack all my *.jpg files now show as *.jpg.block files and will not open. when i attempt to open on any computer the file displays unknown file format even after i rename them to .jpg files again. i have tries several viewers and jpg recover software without success. sometimes i get a red x in the center of the view. any suggestions would be appreciated. xp sp3. i just did a frest rebuild of pc so new jpg files are just fine.

thanks
budd



new description:
I have just removed an infection from a computer without much of an issue, but the infection has left behind a big problem. It has renamed almost all of the common such as .jpg, .doc, .xls, .js, .php, .docx, .ppt, etc. to [filename].jpg.block, [filename].doc.block, [filename].xls.block, etc.
The situation has gotten worse. I have started renaming the files to remove the ".block" and none of the files work with their original extensions.
anyone with ideas how to recover the files? thanks.

Re: unable to open jpg files
thanks. i did not think to do that as i had rebuilt pc. here are the results you requested.

DDS (Ver_2012-10-14.05) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.7.2
Run by John at 3:54:29 on 2012-10-16
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2030.1090 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
============== Running Processes ================
.
c:\Pr... Read more

Answer:virues has renamed files to .block

Malware is handled in the Malware forum, Follow the instructions here> NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

1 more replies
Relevance 53.3%

Hi all,
 
The user doesn't have Administrator rights so the system isn't damaged just all the files aren't accesible. I've deleted the virus very quickly is just a stupid file, now the system 100% free of any virus.
The only thing I need help with is to recover my files. Need some help.
 
Thank you.
 
The virus renamed files files and added this extention: *.mmvkhja
 

 
What utility to use so I could decrypt and recover my files? Thank you.
 
FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-01-2015
Ran by Anna (ATTENTION: The logged in user is not administrator) on ANNA on 20-01-2015 09:30:35
Running from D:\Profiles\Anna\Desktop
Loaded Profiles: Anna & Administrator (Available profiles: Philips & Anna & Administrator)
Platform: Microsoft Windows 7 Максимальная  Service Pack 1 (X86) OS Language: Английский (США)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(SolarWinds) C:\Windows\dwrcs\DWRCST.EXE
(TeamViewer GmbH) C:\Program Fil... Read more

Answer:Virus renamed and encrypted my files

Here is the message found in My Documents:
 
Your documents, photos, databases and other important files have been encrypted
with strongest encryption and unique key, generated for this computer.

Private decryption key is stored on a secret Internet server and nobody can
decrypt your files until you pay and obtain the private key.

If you see the main locker window, follow the instructions on the locker.
Overwise, it's seems that you or your antivirus deleted the locker program.
Now you have the last chance to decrypt your files.

Open http://ohmva4gbywokzqso.onion.cab or http://ohmva4gbywokzqso.tor2web.org
in your browser. They are public gates to the secret server.

If you have problems with gates, use direct connection:

1. Download Tor Browser from http://torproject.org

2. In the Tor Browser open the http://ohmva4gbywokzqso.onion/
   Note that this server is available via Tor Browser only.
   Retry in 1 hour if site is not reachable.

Copy and paste the following public key in the input form on server. Avoid missprints.
6FVRTLM-VM5THLL-SL3GLTU-MQPG5CK-7BSQTQG-WWCVKVT-OPDAYP5-FLCHVP4
XBCSKYO-V4UK66L-3OWDXJZ-MDCBJGG-PSOG4CG-CZVECJD-6ANOZP3-OFIC7HO
R6FU5LF-LLSIQFE-JTDRM5Q-SEIHGN3-5URJO5M-M5NT7CO-DXSOQ5S-LLB5XNM
Follow the instructions on the server.

 

5 more replies
Relevance 53.3%

A virus renamed all my files (Word, jpeg etc) with the prefex "locked" and encrypted them. I think I have got rid of the virus but I cannot open any of the files - they are just a jumble now.

Apparently there are a few decrypters available which can sort everything - one at Dr Web for example -but these rely on having the original file.

I don't really understand this, as if I had the original file surey there wouldn't be a problem!

Sorry if I'm being very thick but is there no way I can get these files back if I don't have copies?

Answer:All my files renamed "locked" and encrypted. Help!

Hello, not your fault.. This is a Ransomware infection.. DO NOT run a Temp file or Registry cleaner. Or use amy decyptor until we cab determine the proper one.Please start a New topic here Virus, Trojan, Spyware, and Malware Removal LogsTitled ransomware and repost this virus renamed all my files (Word, jpeg etc) with the prefex "locked" and encrypted them. I think I have got rid of the virus but I cannot open any of the files - they are just a jumble now. Apparently there are a few decrypters available which can sort everything - one at Dr Web for example -but these rely on having the original file.

1 more replies
Relevance 53.3%

I recently did a system restore and there was a notice of several files being renamed for my convenience. Where are they (they seemed to be in several locations) or more to the point is there a log of the changed files so i can find them and are they safe to delete if i don't want them.

Thanks for any posts
BB
 

Answer:How do i find renamed files from a restore?

10 more replies
Relevance 53.3%

Hi, I am new to this board,


I have Windows ME and (I think) Outook Express 5, but recently "upgraded" to Microsoft IE 6.0 (but didn't check the Outlook upgrade box, so I am not positive about this).

I have two problems w. Outlook Express since this "upgrade". One, when I attempt to open the program, the "hourglass" runs for about two minutes, then Outlook opens (even if I was just running it previously). ? It never used to to do this, and I had a lot more messages saved than I do now, which seemed to have "disappeared" anyway, but that's the subject of another posting.

More important, I am being deluged w. DIRECTDB.DLL errors when I receive an email that Outlook dislikes. Now, I know to solve this problem, I must rename my folders.dbx to folders.old. But here is the kicker: I tried to rename four of them (total) and I get the warning that a file is already *named* folders.old (which I do have, several of them), so it prohibits me from the action. I don't want to lose the email, so I don't want to just delete it.

BTW, how do I view the those folders.old, anyway?

I guess that was three questions.

Can someone help me?
Thanks much.
-Lori
 

Answer:DIRECTDB.DLL errors, already renamed .dbx files ?

Hiya

Have you cleaned up your folders in Express?

In Outlook Express, Tools | Options. Maintenance tab.

Click CleanUp Now. Choose compact.

Also, what do you have running at this time:

Go to Run and type MSINFO32
On the left choose Software Enviroment, then Startup Programs. Copy/paste the list here.

To find out which version of Outlook Express you have, go to Help | About.

With regard to the DIRECTDB.DLL error's, can you post the full message? If they have a Details button, click that and copy/paste the contents here.

Regards

eddie
 

2 more replies
Relevance 53.3%

Since upgrading to win 7 64bit I've had a problem where the odd file wont delete.
It's not saying its in use by the system or anything like that... it just wont delete, be renamed, or be moved.

I can only think of one example right now, and that's a WAV file.

I buy music online in WAV format for mixing.

I put them all in a folder called "new choons" at which point I run Mixed In Key on them to get their KEY - it renames the files to include the Key at the end of the file name

From there I put it in their appropriate genre folders in my WAV folder, leaving the new choons folder clear.

I have even tried deleting or renaming the new choons folder but it wont do it.

any time I open the folder indexing tries to run on it forever.

It is very frustrating, and I was wondering if anyone could help

When i press delete, the window comes up "preparing to delete" and stays there for ages.

I also think this might be the reason why wmpntwk is constnatly using 25% of my processor.
If I didn't use my PC to stream stuff to my PS3 I would just stop that process from starting, but I store most of my DVD's and music on my HD and then play them throug that way.
Anyway, thanks in advance!

Answer:Files Not Deleting, being renamed, overwritten etc.

First: Try stopping the WMP sharing service and delete the files. It may be that the files are in use by the service.Second: If that doesn't get you sorted: Unlocker.

8 more replies
Relevance 53.3%

Word (or we?) has renamed some files - e.g. previously "christmas images.doc" - now "~$ristmas images.doc" and the 'W' icon in Windows Explorer (W98 SE)is dulled out. When we try and open these files all we get is a series of squares interspersed with an odd letter.Help!!

Answer:MS Word has renamed files & we can't open them

The description you give is normally that of a file that's actually open in Word at the time (common when you are flipping around or "saving as"). Does the original file not exist despite this apparent renaming if you check in Explorer after exiting Word?

3 more replies
Relevance 52.89%

hi, i am in a bit of a tizz (panic-striken actually!) my PC having been infected by some kind of virus. The majority of certain file types have had their extensions altered. I have noticed this on many of my .jpeg files, but on others too (.doc, .pdf etc.)
 
If i right-click on one of the files to obtain its properties, windows installer opens up telling me it wants to configure a program, Nero, if i cancel this action i can then access property information on that file. All those affected seem to have as their file type: RYHQNQC File.
 
If I look at these files within their folder quite often the affected files will have .JPG displaying after their name. For example a .jpeg file prior to infection may have been called "image1" and it would only be seen in its folder as its name i.e. "image1" after infection it would appear in its folder as "image1.JPG". and on right-clicking and reaching the properties as stated it is of file type "RYHQNQC File"  and as such has become "image1.JPG.RYHQNQC"
 
Moreover the infection has affected all my drives, with thousands of files having been given the RYHQNQC File extension.
 
Having looked around the web trying to establish what sort of virus has caused this, it looks similar to the ransom crypt type viruses, but I cannot be sure, since I am not being asked for payments to decrypt etc. 
 
I really would appreciate any help or pointers in the hope that I may be able to restore my infe... Read more

Answer:Virus has renamed my files, altering their extensions. Please help

Alas its the CTB-locker!!! So there is nothing that can be done. Everything's lost

3 more replies
Relevance 52.89%

I am running Windows Xp sp3, and was having issues with my external dvd drive. I started getting svchost blank error. So I did system restore and it changed the names of a lot of files and folders. Now nero8 won't work because it can't find certain files. I noticed that the file it's looking for is in Nero8(2). The files and folders in Nero8 are the same name as in Nero8(2) but the contents are split up. Some files in Nero8 and some in Nero8(2). I tried to reinstall Nero8 with my software cd that came with my burner but get an error. It also will not let me uninstall. Is there a way to fix this problem? I've been searching for others with this problem with no luck. Is there something I can do?

More replies
Relevance 52.89%

so all of a sudden the other day about 80 gigs disappeared off one of my hard drives. i did some analysis & found all the files had been moved to hidden "found" folders by the check disk progam & had been stripped of their files names & turned into chk files. normally i would just try to rename the files but since this is such a large amount (mostly mp3s) is there any way to recover the file names or are they hopelessly lost forever?

Answer:Files Moved & Renamed By Check Disk

Look in the freeware section in my sig for PC Inspector wich should do the trick

1 more replies
Relevance 52.89%

Hi! I've a dell inspiron 1525 laptop with windows vista as the os. when some process was running i accidentally shutdown my laptop. Also the names "svchost.exe" and "rundll32.exe" were renamed by me.Now the problem is that i couldn't get anything on the screen except the booting options, when restarted. I've also launched system repair, also tried to enter through safe mode, but couldn't see anything except a blank screen. Kindly help me to sort this problem.

Answer:Renamed files stopped Vista from loading

"Also the names "svchost.exe" and "rundll32.exe" were renamed by me."What were you thinking? Those are windows componentsSome HELP in posting on Computing.net plus free progs and instructions Cheers

3 more replies
Relevance 52.89%

Ok so heres the skinny, i downloaded a number of FLV's (about 14-15) on a dial-up connection, so you'd assume correctly that it took awhile. Well i love personalizing anything and everything on my pc, so i promtly renamed them, AND NOW I'M SCREWED! aparantly renaming the files changed their file type (???) because when i tried to play them (which i previously had, and they worked just fine) nothing happend, upon checking ALL the videos properties their file type just say "file" not "flv file" or "video file" just "file" what do i do? will i have to downlead all my videos again???

Answer:Renamed some videos files and now they wont work at all!

Just add the proper file extension. Open Windows Explorer, go to Tools, Folder Options, View. Make sure Hide Extensions of Known File Types is off.

Then rename the files to whatever .flv or whatever the extension was.

2 more replies
Relevance 52.89%

Having a strange problem. When my media player hashes my files they appear with missing letters, extra spaces, or strange characters like squares, sometimes chinese looking script. Whats more alarming is when I do a search on youtube for example, strange characters appear in the top part of the wondow (the blue bar up top that says what you are viewing, forgot the technical name). Example: I searched for Aerosmith this morning and the bar up top reads "YouTube - squaresquareAerosmithsquarestrangesymbol-Windows Internet Explorer". The sybols are not spelled out just didnt know how to reproduce them here. Im not really sure what this is. It may also be worth noting that the computer recently crashed and I had Windows XP reinstalled. Problem was there in my media player before, but never in internet searches. Any ideas??? Here is a current HJT log, anything suspicious or unnecessary? Thanks:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:19:06 AM, on 5/22/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr... Read more

More replies
Relevance 52.89%

Hi There,

I think I have a virus and I'm not sure what to do.

i transferred files to USB and when I went to reopen them they all (in one folder) have been renamed mixed up characters and unkown file types and will not open. When I run Avast it alerts me they cannot be scanned. Some files in another folder on the same USb which were there previously have the same problem which seems to have occurred at the same time also.

I have tried numerous online scanners at least 3 focused at the USb storage device and all are reporting no viruses....

Would appreciate some guidance.
 

Answer:files become coruppted, renamed and wont scan

Have you run a virus scan on the original source that the files came from?

Is the USB device a memory drive (jump drive or thumb drive) or does it have a Hard Drive in it (an external hard drive)?

USB memory drives do go bad from time to time and so do Hard Drives. It's possible that a virus is the problem but also possible that the drive is bad. It's also possible that the data was corrupted while being transferred to the drive.
 

3 more replies
Relevance 52.89%

Greetings,

We have a virtualized environment with VDIs located at a remote datacenter. Our file server is in the same environment, and we also have laptop users of course. The symptom is that a new file is created or copied into a directory on the file server in the virtual environment from a VDI. User switches from VDI to their laptop and browses to location where they created/copied a file to on the file server. File is not there.

File does not appear until next day. However, if they rename the file from their VDI a few short moments later the file will appear from the laptop's point of view. If they don't rename the file, and they type in the full file name (including extension) into the address bar on the laptop, Windows will give an error message saying that there's no such file, but does not happen from the VDI perspective (and instead opens the file with the program associated with its file type).

Likewise, this symptom occurs in reverse too (though not as often I think).

Any ideas??
 

Answer:SMB share not showing new files until a day later or file gets renamed

select no offline files/folders in the share properties cache button?
 

2 more replies
Relevance 52.89%

I'm worried about the reliability of the new Windows 10 backup. I have been creating images from scanning software. Then, I will rename the files and sometimes move them into different sub-folder's as I'm organizing them. I checked the backup the last few days and none of these updates are reflected in the backup. The location is on OneDrive and an external HD (Seagate 1Tb) is being used. I tried everything. Turning on/off File History, even deleting the main folder on the backup hoping it would just pick it up again. To no avail. I probably have to hard-delete the whole backup and start over. But if this is the case, I have lost faith in the utility itself and would be forced to purchase a 3rd party produce (don't want to do this). Hope this is something easy and I can use the Windows 10 version.

More replies
Relevance 52.89%

I received a version of the MoneyPak virus. I was able (with the help of a friend) to run ComboFix and a few other programs to remove (I think) the virus. While infected, it renamed all o fmy files (.exe, pdf, docx, etc, etc) and added either a .lnk or a .html to the file. Now I cannot open them and I cannot correct the association. I have tried some regeditors to correct but nothing is working. Here are the logs as requested in the forum instructions. any help is greatly appreciated! Thanks, Jesse

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:22:21 PM, on 5/13/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Safe mode with network support
Running processes:
C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\jharper\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V6GOLUTP\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\... Read more

Answer:MoneyPak renamed files as .html and .lnk and they cannot be opened

Hiya and welcome to Tech Support Guy

Sorry for the long wait, these forums can be very busy. So, lets first see if we can get the file associations working okay.

Please download exeHelper to your desktop.
If your AV program throws up a warning about the program, ignore the warning. Some AV's flag this program because of how it works... that's all.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of exehelperlog.txt ( Will be created in the directory where you ran exeHelper.com and should open at the end of the scan)
Note : If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together ( they will both be in the one file ).

In your next reply, please submit:
exehelperlog.txt

-----

Also, can you post your ComboFix log. It should be found here:

C:\ComboFix.txt

eddie
 

1 more replies
Relevance 52.89%

This question is about syncing and backing up files in general. Sync Toy and a few other backups tools can not do what I need.

The problem is how to synchronize folders of thousands of photos and music files between my computer and external HD. I am constantly renaming files, adding and deleting child and parent folders, moving photos or folders to new folders etc. on the computer. So I don't see how any sync program could correctly deal with files and subfolders that have been moved to different folders. When any given folder on the original and backup is compared, the program can't tell the difference between a file that is missing on main computer because I wanted to delete it permanently and one that was missing because I moved it to another folder or renamed it - correct?

Yes there are programs that show you comparisons between two folder but that does nothing to solve the problem - you still have to go through everything manually and handle the missing-vs-moved-vs-renamed situations yourself, one by one.

So now imagine this happening for hundreds and hundreds of files and subfolders every week.

It seems the only solution would be delete all 200 Gb of music and photos from the HD and re-copy them every time. Or, use continuous live cloud backup but that is absolutely not an option for me. First of all I tried it and it slowed down the computer outrageously - even though I was only backing up a few hundred Gb of text files and NOT my 200 Gb of photos and music! Secon... Read more

More replies
Relevance 52.89%

Dear All,My computer was recently infected by virus MALAS that renamed all of my files with extension exe from <orig_name>.exe into <orig_name>lib.exe and create a shortcut based on original file's name.I have removed the virus with kapersky antivirus. How do I renamed/ changed my files' name back into its original name? (around 2500+ files on drive c:\ and e:\)Any help will be appreciated...

Answer:How to renamed files infected by virus MALAS?

If the files are still renamed then I wouldn't think that all of the malware is gone.Download and rename TrendMicro HijackThis.exe (HJT) Double-click on HJTInstall. Click on the Install button. It will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe. Upon install, HijackThis should open for you. Close HijackThis and rename it. Go to C:\Program Files\Trend Micro\HijackThis.exe Right click on HijackThis.exe and select Rename. Type in sniper.exe and press Enter.Right-click on sniper.exe and select Send To > Desktop (create shortcut)From the desktop open HijackThis.Important! If using Windows Vista, Right-click and Run As AdministratorClick on the Do a system scan and save a log file button HijackThis will scan and then a log will open in notepad. Copy and then paste the entire contents of the log in your post. Do not have HijackThis fix anything yet. Most of what it finds will be harmless or even required.Although we have renamed HijackThis to sniper, we will still refer to it as HijackThis or HJT.

14 more replies
Relevance 52.89%

Good day,
I was cloning my x230t hard disk with windoes 7 os to an mSSD.
So after cloning, I renamed my existing HDD from C: to D: so i can rename my newly cloned mSATA to C:. BUT the STUPID me forgot to rename the mSATA to C:, which was currently renamed to B: in the registry editor (\DosDevices\C: to \DosDevices\B:).
So when i rebooted my PC, all i get is a blank blue screen with nothing in it. I managed to to run explorer through the task manager, but unfortunately, I'm stuck. I can't even open My Computer or even run command prompt as an administrator.
I really hope someone can help me solve this problem, since i cannot even recover my windows 7 license number because i cannot run anything on my laptop.
Thank you very much.

Answer:HARD DRIVE RENAMED - cannot run system files

i was trying to open control panel it indicates "No such interface supported" this also pops up when i try to open my computer. I also tried to run registry editor so i can rename it back to the cloned drive from B: to C:, but unfortunately path error occurs, again this maybe due to path file is directed to C: which is currently renamed to B:.

2 more replies
Relevance 52.07%

Yesterday I noticed my hard drive light was working unusually hard. I instantly shut down, ran both Malwarebytes and Superantispyware. Malwarebytes found some things. I removed them but did not make note of what it removed because I did not see any damage at the time.
Today (the following day) I went to work in Excel and noticed strange behavior relating to files that could not be found. I quickly realized that about 75% of my files across two physical hard drives have names and extensions that have changed. Obviously the file renaming/encryption is what my computer was suspiciously up-to yesterday. The file names are random but they all share the same extension. The extension is *.8877. The modified date and time are the same as well.
Example. An mp3 file that did have a file name of "11 - Rock'n Roll.mp3" now is "d87VrXO9GD.8877".
I ran Malwarebytes again today in safe mode ran 3 times.
Below is what Malwarebytes found on those scans. I cannot confirm if this is the related to the issue, or a coincidence. These have now been removed:
1. Trojan.MalPack, C:\Users\Mark\AppData\Local\Temp\rad0C5EA.tmp.exe, , [1a84ebd38d0dfa3ccc9cf2db000346ba],
2. PUP.Optional.Spigot, C:\Users\Mark\AppData\Roaming\Mozilla\Firefox\Profiles\kyz1lfbj.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "https://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=888596&p=");), ,[8a144777ebafc1755f77b5854ab9e51b]
This is my first time confronted with potential ransomw... Read more

More replies
Relevance 52.07%

Help!

I think I have/had a virus that renamed files/directories such as "dasktkp.iji" for "desktop", "lascense" for "license" - you get my drift...

There were so many, Scandisk kept seizing up - over 21,000 altogether!

Fortunately, I had a recent backup to restore that appears uninfected with whatever it was.

So, what was it???
 

Answer:Please HELP!! Random & misc. renamed & misnamed files & directories???

Hi there,

Try doing a (free) online scan here :

http://housecall.antivirus.com/housecall/start_corp.asp

and / or :

http://www.bitdefender.com/scan/licence.php

It should indicate wether you have any viral coded files on your PC.

If you want some experts here sorting out wether you have some malware on your PC, you can download HijackThis :

http://www.tomcoyote.org/hjt/

Install, scan, save the log as a .txt file and copy paste the complete contents here.

Thanx

Cheers,
 

1 more replies
Relevance 52.07%

Hello,

My office colleague borrowed my Seagate USB FreeAgent 320GB drive and when I connected this to my computer all the folders were renamed with EXE extensions and being traced by AVG Free 9.0 as Trojan Generic15.CALM treat and are suggested for removal/deletion.

I tried running Malwarebytes but nothing is reported.

Please Help. Thanks!
 

More replies
Relevance 52.07%

I'm having several issues; I've thoroughly messed up my computer in the span of the past hour. I'll try to explain as quickly as possible. I'm on Windows 7 Pro 64-bit, and I have an SSD boot device with all of my files on a HDD. I edited the registry keys forever ago to move my program files directory to the HDD (both 64-bit and 32-bit to the same directory, and yes, I edited both the 64-bit and 32-bit registries), and it's worked just fine.
Installed final version of IE 10, had the same issue I had with the release preview (doesn't run--crashes a few seconds after the window opens)
Some programs run from the SSD even though I changed the Program Files directory to the HDD, so I copied the new Internet Explorer files from the HDD to the appropriate locations on the SSD, including overwriting ieproxy.dll (lots of fun to do, believe me). Didn't work, so I uninstalled IE 10 (which causes it to revert to IE 9), and rebooted as part of that process.
After rebooting, IE did absolutely nothing, but now all folders in Windows Explorer open in a new window when double-clicked. I have done everything I could find to fix this (including checking the registry entries at HKCR\Folder\shell and others). Nothing has worked.
Ran sfc /scannow, and it found and fixed errors. Rebooted but the problem persists and my program files directory (previously H:\Program Files) has renamed itself to H:\Program Files (x86), but the old directory can still be navigated to directly, and the old directory i... Read more

Answer:Program Files directory renamed itself, among other related issues

Having the 2 folders is totally normal. So what other problems are you having ?

Why are you changing the program files to the hdd, it defeats the purpose of using a ssd for it`s speed.

8 more replies
Relevance 51.66%

Hi, I clicked on a file attached on an email (info.js) after saving it on the desktop. All desktop files (and only on the desktop) were renamed with extra extension .ccc (e.g: document.pdf became document.pdf.ccc). here are the FRST logs as requestion. thank you very much for your helpA.  Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:10-01-2015 01Ran by Paolo (administrator) on PORTATILE-GIGIO (10-01-2016 23:17:26)Running from C:\Documents and Settings\Paolo\Documenti\DownloadsLoaded Profiles: Paolo (Available Profiles: user & Paolo & Adelaide)Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: Italiano (Italia)Internet Explorer Version 6 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () C:\WINDOWS\system32\ati2evxx.exe(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe(Macrovision) C:\WINDOWS\system32\drivers\CDAC11BA.EXE(TeamViewer GmbH) C:\Programmi\TeamViewer\Version9\TeamViewer_Service.exe(UltraVNC) C:\Programmi\UltraVNC\winvnc.exe() C:\WINDOWS\system32\ati2evxx.exe(TeamViewer GmbH) C:\Programmi\TeamViewer\Version9\TeamViewer.exe(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE(Creative Technolo... Read more

Answer:I clicked on email attachment (info.js) and all desktop files were renamed .ccc

Hi venexiano, My name is Valinorum and I will be the acolyte today. Before we proceed, please, acknowledge yourself the following(s):Please do not create any new threads on this while we are working on your system as it wastes another volunteer's time. If you are being helped/have solved the issue/no longer wish to continue, notify me in your reply and I will quickly close this thread. Failing to comply will result in denial of future assistance.Please do not install any new software while we are working on this system as it may hinder our process.Malware removal is a complicated process and so don't stop following the steps even if the symptoms are not found. Keep up with me until I declare you clean.Please do not try to fix anything without being ask.Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.Please print or save the instructions I give you for quick reference. We may be using Safe mode which will cut you off from internet and you will not always be able to access this thread.Back up your data. I will not knowingly suggest you any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.If you are confused about any instruction, stop and ask. Do not keep on going.Do not repeat the steps if you face any problems.I am not an omniscient. Th... Read more

11 more replies
Relevance 51.66%

My Dad's 20 GB USB 2 external HD was mysteriously renamed from Chinese to English and the new name is Lost Plannet 2 which looks like a game. He manually renamed it back, but it reverted back after rebooting.

Any idea how this could hav ehappened and how can we change it back permanently?

Thanks.
 

Answer:external HD got renamed and cannot be renamed back

It's just a thought, but try viewing hidden & system files to see if there's anything fishy about the drive. Don't panic when you see stuff that you didn't know was there, but if you do see any system files on the root of the drive let us know what they are. Especially if you happen to find a file called "autorun".
 

1 more replies
Relevance 51.25%

Good day,

I was cloning my x230t hard disk with windows 7 os to an mSSD.
So after cloning, I was trying to rename my existing HDD from C: to B: so i can rename my newly cloned mSATA to C:. BUT i just realized that the C: i was renaming in the registry editor was the cloned mSATA. I think windows automatically changed the drive name to C; when the old HDD file was formated in the disk manager. So my supposed to be drive C: was renamed to B: in the **registry editor** (**\DosDevices\C:** to **\DosDevices\B:**).
So when i rebooted my PC, all i get is a blank blue screen with nothing in it. I managed to to run explorer through the task manager, but unfortunately, I'm stuck. I can't even open My Computer or even run command prompt as an administrator.




I really hope someone can help me solve this problem, since i cannot even recover my windows 7 license number because i cannot run anything on my laptop.


Thanks in advance.

Answer:HARD DRIVE RENAMED - blue desktop screen, cannot run system files

i was trying to open control panel it indicates "No such interface supported" this also pops up when i try to open my computer. I also tried to run registry editor so i can rename it back to the cloned drive from B: to C:, but unfortunately path error occurs, again this maybe due to path file is directed to C: which is currently renamed to B:.

7 more replies
Relevance 50.43%

Hi a while ago all my desktop items were renamed to a weird random string of letters and numbers and I am now noticing that things keep getting slower and slower, with consent.exe seeming to take the longest. I tried the "it my not be malware" checklist but no problems were found I tried to just run ComboFix myself but after creating a restore point it says "\microlab\searchengin was unexpected at this time" and stops. I tried redownloading and renaming it but same problem. I am running 64 bit windows so no gmer log but here is my dds log and attach file. Thank you for any help

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514
Run by Aarons at 17:32:38 on 2011-10-05
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2937.1727 [GMT -7:00]
.
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\bKernelMain.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows&... Read more

Answer:Desktop items renamed to random string and files are very slow if they work at all, already did the "it may not be malware...

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/422080 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Relevance 50.02%

Hello,
I use Windows 8 Pro and I have very strange problem.

I enabled display hidden and system files, but system auto-disable its... I make it about three times, always with the same result. I don't know what causes this problem, I can't reproduce its (it isn't after reboot).

Also I have similar problem with system restore.
I disabled it, but system turned it on again.

WTF?! Does my system better know what I need?!
I apologize for the tone, but it's really frustrating...

Answer:Hidden files - auto disable, restore auto enable?!

Hello lukasamd,

That's odd behavior.

You might consider resetting Windows 8.

7 more replies
Relevance 50.02%

Windows 7 is starting to show all of its problems and I would really like to go back to Vista but I don't want to lose all of my programs and files.
 

Answer:Can I revert back to Vista from 7 without losing my files?

You're going to have to backup all your data and programs .. and reinstall them.

You'd have to do this even if you upgrade to the release candidate version of W7 - That should be available soon.

These are only trial versions and will drop dead sometime.
I would not use W7 for the only copy of my data or programs ... Even if it did work
 

3 more replies
Relevance 50.02%

Hi all,

There have been a couple threads on this topic on the forums but they have no solutions.

Whenever I reboot, all of my file changes are reverted. Files I deleted are back, files I added are gone, files I modified are reverted to their previous state, programs I installed are gone, programs I uninstalled are back, special reboot tools like checkdisk and mdsched don't take effect on reboot. File changes I make to my slave HDD are not reverted on reboot.

This just started happening the other day.

I ran MalwareBytes, which found some minor issues related to a toolbar, but of course rebooting brings it back. I ran "sfc /scannow." No errors found.

I used a Win7 recovery disk, which found no problems.


Here is my Disk Management screenshot: http://www.develteam.com/userdata/Ga...management.png


One interesting thing, however, that might be part of the issue. When I boot up and open chrome, it opens to my last visited pages, which are for a program called HD Tune, implying to me that the problem started after installing and running this program. All I did with it was a scan, which did find bad bits. Here's a screenshot of that: http://www.develteam.com/userdata/Ga..._hdtunepro.png

Not sure if HD Tune Pro did something to cause this, but I felt it was worth mentioning.

Answer:On reboot, all files revert to previous versions

It sounds almost like you are running this:
ToolWiz Time Freeze ? ToolWiz Software

I would look and see if it is on your system.

Barring that I would open the Services applet
(Winkey-r and type services.msc)
then scroll down to Shadow copy service.
Stop it if running, then set to disabled.

Make an obvious change to something and reboot.

9 more replies
Relevance 49.61%

For the third time in a week, Windows 7 has replaced some of my personal data files with earlier versions, without my consent, following a restart.
I'm talking about my outlook Data file (outlook.pst), my Quicken data files and a few others. Files are located in different places, but mostly in my Documents folder.

There are no errors, no crashes and no warning whatsoever.
I just restart the PC and suddenly my data files are overwritten with sometimes days old versions. The first time it happened I assumed that maybe I hadn't properly saved my document(s), but then I noticed it actually WAS replacing current files with earlier versions. I would enter a few days worth of transactions into Quicken, save and even backup the files, only to have it revert back to a file that was saved two days ago after restarting the PC, causing me to have to re-enter all those transactions.
Same thing with Outlook - I could add/change/remove appointments in my calendar, only to discover that it went back to an earlier time after the next restart, all changes made would be lost.
Just a simple reboot is all it takes - the last time I had to reboot to update a driver.
This is completely unexpected & unacceptable behavior. What would cause Windows 7 to do this?

Answer:Data files revert to previous versions after restart

Win 7, has a function that allows you to restore to a previous date, in the event that you

lose or want to change your current copy. The previous copy comes from back up and

restore or system restore, whichever is applicable. Some how you are returning to those

earlier documents, without giving permission. May I suggest, until we figure out the

cause of the problem, you turn off the system restore function and the back up and

restore function. Although I think that these features are very good and a safeguard

against problems, in your case you might want to disable them, until a remedy can be

found for your problem.

9 more replies
Relevance 48.79%

I have ie7: when I search and open a site it stays open for a few seconds and then closes down and reverts to the home page.MS Outlook: Similarly when I open an e-mail it stays open for a few seconds and then closes down. It then scrolls through all the e mails until it displays and closes the most recent one.Windows explorer: I open a folder, it displays for a second and then closes and defaults to the list of My Documents.I have scanned for viruses, trojans and malware and the computer appears to be clean.Any ideas?

More replies
Relevance 47.97%

I am using the browser Mozilla Firefox which has not been upgraded for a year. When I attempt to manually upgrade, the file is designated as cancelled. I reload the file and the cancelled designation goes away, but the file will not open or run. This also occurs with other programs that I have attempted to download and run.
I am only (I think) running Microsoft Security Essentials for protection.

When I attempt to upgrade Firefox, the program searches for upgrades and continues forever with no results. I am using version 10 and the current version is at 18. I tried to just reload Firefox and I get the same results: the little icon spins and spins but never times out.

I tried to reset the download folder as per a solution that came from Firefox, but it had no effect.
My operating system is XP with the level 3 upgrade.

If you have a solution, please state it in English and not computereese.

Thank You
 

Answer:Solved: cannot download files which are immediately cancelled

Try downloading the new version of Firefox with Internet Explorer. Once you downloaded it, uninstall the old version from control panel and install the new version.
 

3 more replies
Relevance 47.97%

Every time I open C:\Program Files\, my explorer crashes.

I can go to any folder IN program files i.e. Start > Run... "C:\Program Files\2K Games" would work fine.

I don't understand why it's happening. I tried restoring system files through cmd sfc /scannnow and it found errors the 1st time, but it didn't change anything.

Any recommendations?
 

Answer:Program Files closes immediately after opening

Try going in to the folder in Safe Mode. You may have a problem with it's display options, such as the desktop.ini file.
 

8 more replies
Relevance 47.97%

Is it possible to set a drive to "Remove files immediately when deleted" without right-clicking recycle bin icon?

I normally do not show the recycle bin icon on my desktop. When I use a new USB drive, I have to display the recycle bin, right click to disable its use on the new drive, and then hide the recycle bin again. Is there a faster way to do this?

Answer:Delete files immediately, without right-clicking recycle bin

Hello xpda,

Yes, you sure can.

Recycle Bin - Permanently Delete Items Automatically

7 more replies
Relevance 47.97%

I have a gateway laptop mt6705. It came with windows vista and recently I wiped it and installed windows 7.

Everything is working ok except two things.

#1 when I delete a file in any folder, the file doesn't immediately move to the recycle bin. It is deleted(because if I try to delete again I get an error saying the file cannot be found) but it will still appear in the original folder until I refresh the folder view or I close the folder and reopen it.

#2 (which isn't a big deal) but prior to the win 7 upgrade. when I used to change the volume or LCD brightness on the laptop by using the function buttons, a small blue box would appear in the upper left hand corner of the screen which displayed the level at which the volume or brightness were set. Now what appears instead is a distorted box. This same distorted box also appears for a second just after windows loads, right before I'm prompted to use my credentials to login to windows.

Any insight would be appreciated.

Answer:Deleted files dont go to recycle bin immediately

For #1, try right-clicking the recycle bin and clicking properties. There should be an option for either "Custom Size", or "Don't move files to the Recycle bin." Maybe the second one is selected? If so, I would change it to the first option and enter a significant size for the recycle bin.

Foe #2, it sounds like this would be software that Gateway adds on top of Windows, and would thus be lost when you do a re-install. Maybe you can find it on the Gateway website somewhere?

5 more replies
Relevance 47.56%

I am having an issue with my mouse settings - whenever I try to drag and drop a file, it opens before I have the chance to drag it. How do I change this in my settings?

Answer:Why do files open immediately when I click to drag and drop?

You could check the double-click speed setting for the mouse.

Do the file names get underlined when you put the mouse cursor over them? Then the explorer's Folder options may be set to one click instead of double click.

3 more replies
Relevance 47.56%

When I right click something the menu will pop up for a millisecond and then shut.Won't let me drag my files or icons.Keeps using the ESC key function when I'm running programs.Closes task manager when I open it. I've already gotten a lot of the bugs cleared off, thanks to Noknojon's help, but it's still doing these things.What should I do now?DDS (Ver_2012-11-20.01) - NTFS_x86Internet Explorer: 11.0.9600.17041 BrowserJavaVersion: 10.51.2Run by Getsuneko at 2:50:57 on 2014-04-23#Option MBR scan is disabled.Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.1790.597 [GMT -5:00].AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}.============== Running Processes ================.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\nvvsvc.exeC:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exec:\Program Files\Microsoft Security Client\MsMpEng.exeC:\Program Files\NVIDIA Corporation\Display\nvxdsync.exeC:\Windows\system32\nvvsvc.exeC:\Windows\system32\WLANExt.exeC:\Windows\system32\conhost.exeC:\Windows\System32\spoolsv.exeC:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exeC:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exeC:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exeC:\Program Files\Malwarebytes Anti-Malware... Read more

Answer:Right click menu closes immediately, can't drag files, etc.

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).===Download the correct version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The... Read more

10 more replies
Relevance 47.56%

Greeting Forum Members:
I am running Windows XP - SP2 on my Thinkpad T60 Core Duo. For the past week I am experiencing a strange problem. I am sincerely hoping that I can get help. Thanks much in advance. Here are the symptoms
1. When trying to explore folder names beginning with 'sy', explorer immediately closes
2. When trying to open web sites whose bookmark names begin with 'sy' IE closes
3. Control Panel -> System, window closes
4. If I rename the folder to some other name, then I can open and explore contents
5. I scanned for virus using Symantec Anti Virus, none found
6. Tried restarting windows under 'Safe Mode'. I get Blue Screen (BSOD)
7. When I do Start->Accessories-> System Information, I get an error "An outgoing call cannot be made since the application is dispatching an input-synchronous call'. I can however see some information about the system inthe backdrop.
++++++
I ran Hijack this and here is the log. I would highly appreciate if you could help me out
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 13:58:51, on 01/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
C:\Program Files... Read more

More replies
Relevance 47.15%

hey,
okay i've installed a new burner on my computer (LG - GCE-8526B). it works. it plays cd's, whatever.
but nero is being a total jerk with it and any time i go to burn audio files, right when i tell it to burn it asks what 'image file' to save it as. if i just type in anything it seems to burn through sucessfully except that the cd is still blank by the end of it.

when i go to "Choose Recorder" it only gives me the option of 'Image Recorder - Virtual device' and i cannot choose anything else or de-select this.

if i go to autodetect cd-rom it only allows access to my E drive (dvd player) (the one i want is F). i checked that it is all installed properly as a slave drive (same as the one i was replacing).
also it won't give me the option of any test burns or a speed choice before burning.

basically how do i make it stop thinking that everything is image files!!
please help! this is driving me nuts!!
appriciate any input
cheers
--Marlye
 

More replies
Relevance 47.15%

I see this frequently enough that I am now wanting to know why.

I have set Acronis True Image to limit the maximum file size to 1.95 GB. This is to facilitate putting them onto a DVD later. I don't understand why, occasionally, a file in the middle or beginning of a set is smaller. In the below example, numbers 1 and 8 are much smaller than I would expect, especially #1.

Why is this?

Is this normal?

Sony Vaio VGN-CR320E #1 .tib 770,048
Sony Vaio VGN-CR320E #2 .tib 2,093,796,352
Sony Vaio VGN-CR320E #3 .tib 2,093,796,352
Sony Vaio VGN-CR320E #4 .tib 2,093,796,352
Sony Vaio VGN-CR320E #5 .tib 2,093,796,352
Sony Vaio VGN-CR320E #6 .tib 2,093,796,352
Sony Vaio VGN-CR320E #7 .tib 2,093,796,352
Sony Vaio VGN-CR320E #8 .tib 1,496,973,312
Sony Vaio VGN-CR320E #9 .tib 2,093,796,352
Sony Vaio VGN-CR320E #10.tib 2,093,796,352
Sony Vaio VGN-CR320E #11.tib 2,093,796,352
Sony Vaio VGN-CR320E #12.tib 1,287,579,136
 

Answer:Question about the image files Acronis True Image makes

Number 1 is the backup of the partition table (MBR). The others are just smaller because the backup ran out of data before making a full one. The second backup appears to be incremental.

If this is a single backup (which would mean maybe around 35 GB's of used space in XP), then I have no idea why 8 is smaller.
 

3 more replies