Troubleshoot Folders turn into shortcut but attrib command can't help

[Feliks Zemdegs]

Hello everyone.I am having an issue with shortcut virus (I think) on a folder which I have copied from SD card. When the copying was done, I checked and opened the copied files and they were okay, but then the next day the folder turned into a shortcut like this. I have run attrib command but it helps nothing. Properties of the shortcut is like this

comspec% /c "{e353e67e-15d8-37d1-df84-9db4ab9f4270}\cc15a8c6-fe8c-3a0d-d6f2-a27a4b981103.exe 'PHotos to32G tfCard\'"

Scanning with MalwareByte I got this result, then I quarantined. Summary file is here:

https://husteduvn-my.sharepoint.com/:u:/g/personal/duong_nt160839_sis_hust_edu_vn/EURQkiEwMDZAn6rRxFWRRZsBX1vbhL9uo05WLGcrSBZvww?e=Ycg4V0

Screenshot:

So how can I fix it. I think I had copied the right way (right click the folder and choose Copy then Paste). Thank you. (Sorry I post here because my post on sevenforums get no respond!)

 

[BoraMurdar]

If you feel serious problems with your system please open a new ticket (thread) in our Malware Removal Assistance Forum

https://malwaretips.com/forums/malware-removal-assistance-for-windows.10/post-thread

Check these before anything

By Staff - [MANDATORY] Preparation Guide Before Requesting Malware Removal Help

Hi and welcome to MalwareTips Malware Removal Forum. If you are reading this, then you are probably seeking help or feel infected. Over 5000 topics have been posted in this forum and most of them have reached a successful conclusion. All instructions are very simple and you need only basic...

malwaretips.com

By Staff - Groups authorized to help in Malware Removal Assistance forum

We appreciate that some of you sometimes want to help users requesting the help, but our rule is that only Moderating Team and Malware Removal Experts are allowed to respond in Malware Removal Assistance forum. If you are not in one of these groups, you are not allowed to respond, any such...

malwaretips.com

Solved - Piracy

We will not assist users that are using illegal/pirated software. That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before...

malwaretips.com

By Staff - ***READ ME BEFORE POSTING IN THIS FORUM***

1. General rules for all the forums : Rules 2. Specific rules for this forum: This section of the forum provides help in identifying, removing malware and other general questions about malware. Please note that forum is staffed by volunteers. Be patient whilst waiting for a reply - there are...

malwaretips.com

 

[Khairul]

Hello everyone.I am having an issue with shortcut virus (I think) on a folder which I have copied from SD card. When the copying was done, I checked and opened the copied files and they were okay, but then the next day the folder turned into a shortcut like this. I have run attrib command but it helps nothing. Properties of the shortcut is like this

comspec% /c "{e353e67e-15d8-37d1-df84-9db4ab9f4270}\cc15a8c6-fe8c-3a0d-d6f2-a27a4b981103.exe 'PHotos to32G tfCard\'"

Scanning with MalwareByte I got this result, then I quarantined. Summary file is here:

https://husteduvn-my.sharepoint.com/:u:/g/personal/duong_nt160839_sis_hust_edu_vn/EURQkiEwMDZAn6rRxFWRRZsBX1vbhL9uo05WLGcrSBZvww?e=Ycg4V0

Screenshot:
View attachment 224017
So how can I fix it. I think I had copied the right way (right click the folder and choose Copy then Paste). Thank you. (Sorry I post here because my post on sevenforums get no respond!)

This

Hello everyone.I am having an issue with shortcut virus (I think) on a folder which I have copied from SD card. When the copying was done, I checked and opened the copied files and they were okay, but then the next day the folder turned into a shortcut like this. I have run attrib command but it helps nothing. Properties of the shortcut is like this

comspec% /c "{e353e67e-15d8-37d1-df84-9db4ab9f4270}\cc15a8c6-fe8c-3a0d-d6f2-a27a4b981103.exe 'PHotos to32G tfCard\'"

Scanning with MalwareByte I got this result, then I quarantined. Summary file is here:

https://husteduvn-my.sharepoint.com/:u:/g/personal/duong_nt160839_sis_hust_edu_vn/EURQkiEwMDZAn6rRxFWRRZsBX1vbhL9uo05WLGcrSBZvww?e=Ycg4V0

Screenshot:
View attachment 224017
So how can I fix it. I think I had copied the right way (right click the folder and choose Copy then Paste). Thank you. (Sorry I post here because my post on sevenforums get no respond!)

This shown that the malware still existed in your system. Whatever you found in the system might not be the main body of the malware, suggested by the long id created by the file suggested that it has been create by other malware that still exist in your system.

Try posted in the section mention above by staff member, or try download eset and do a full scan on your system, eset usually have fast update on this lnk malwaretypes on their database.