how to solve this

March 17, 2015 at 00:28:57
Specs: Windows XP
Hello Everyone,
I'm using hp desktop with Windows xp sp2 suddenly all the word excel files are changed in to ms-dos Application and i'm unable to access the files i have lot of data on word excel format. some thing differently showing after the file-name for example "Coustomer Contact No.xls.id-7599569818_europay@india". anybody help me please......

See More: how to solve this

Report •

#1
March 17, 2015 at 07:34:41
Could be malware. Run this on it as a quick check:

MalwareBytes:
http://filehippo.com/download_malwa...
(green Download button top right - not anything else on the page)
Run the program but before doing the scan go to "Settings > Detection and Protection" and put a checkmark in "Scan for rootkits".

If it finds anything please copy/paste the log on here.

Always pop back and let us know the outcome - thanks


Report •

#2
March 17, 2015 at 08:57:18
Right-click on one of your documents and go to "Open With" and choose the appropriate program. Seems that maybe your file associations got messed up.

~winipcfg

ASCII Question, Get an ANSI


Report •

#3
March 17, 2015 at 09:34:21
It is not clear whether you mean Word, Excel or both.

If, when you right click a document and select "Open With" it does not give the appropriate program name (Word or Excel - whichever it is) then you use Browse to associate with the program files themselves:

Excel is Excel.exe

Word is Winword.exe

The above assumes you are set to show file extensions, if not the exe part will be missing.

If you don't know where the files are located do a search but include the .exe part.

The reason I suspect malware (#1) is because "Customer Contact No.xls.id-7599569818_europay@india" is not anything like a program and looks odd. Do you live in India?

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

Related Solutions

#4
March 17, 2015 at 10:36:33
I agree with Derek. From your post it appears your files have been hijacked. The europay in the address sounds fishy.

Report •

#5
March 17, 2015 at 10:56:44
"I'm using hp desktop with Windows xp sp2"

It doesn't help that you never updated to SP3, which means you've probably never installed the numerous security updates that have been made available since it was released (2008). Which anti-virus are you using?


Report •

#6
March 17, 2015 at 11:12:18
You may have fallen prey to something like this -

http://www.darkreading.com/hackers-...


Report •

#7
March 17, 2015 at 11:17:07
Re #6
Yeah, same thought went through my mind. Looks nice (NOT).
If so it will take a lot more than MalwareBytes to sort it, although the log might give a better clue to the situation.

jsmydeen
I'd better add that if this is Ransomware and you want to buy your way out of it from the criminals (yuk) then lay off MalwareBytes or any other malware fixing program.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#8
March 17, 2015 at 16:05:00
Extract from >
http://ubm.io/
"After Virlock locates such files it encrypt them and then embeds them in the body of the malware itself, the researchers said. Infected systems can be hard to clean and even a single infected file that remains undetected in a system can cause the malware to respawn the infection all over again."
“Someone has to do something,” to trigger ransomware in most cases. “There is a human factor,” Blech said."

Report •

#9
March 17, 2015 at 16:08:16
The only way we can see what is going on, is by looking at logs.

Please Copy & Paste the contents of the Malwarebytes log in your reply please.

Also.

Run AdwCleaner
http://www.softpedia.com/get/Antivi...
http://www.raymond.cc/blog/adwclean...
http://www.bleepingcomputer.com/dow...
Author's site
http://general-changelog-team.fr/en...
Tutorial
http://general-changelog-team.fr/en...
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Clean.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.


Report •

Ask Question