Operating System
Windows 7
Infection date and initial symptoms
i cant remember when exactly it was infected but i think it was around October
symptoms started with Drive.bat and then Files.bat, at first all folders were just made into shortcuts but after trying some CMD command prompts it just made the $RECYCLE.BIN folder
Current issues and symptoms
the same as the symptoms but the Windows Script host has been disable in my computer that i didnt do nor my family since they arent the biggest computer users
Steps taken in order to remove the infection
ive used Malwarebytes and Zenmana but all it did was clean the computer. Ive tried scanning the hard drive with SMADAV but it says its clean, ive also been using CMD but it either says "System Volume Information access denied" or "access denied"
System logs
I did not upload the FRST.txt logs


New Member
hey guys i came to ask for help because im in desperate need of it, so awhile back my family computer got infected and so did my sisters external hard drive thats around 400GB in size and has a lot of old pictures and movies, what scares me is that it has $RECYCLE.BIN, Drive.bat and Files.bat in it and it encrypted the files so i cant access it all(i kept opening the folders but it just kept on misleading me). from what ive seen in Youtube videos and website guides the 3 things are totally seperate viruses, what should i do? i took it to a computer shop and they said they told me i would have to do a Data Recovery so what software should i use? im planning on MCShield and later if it dosent work EaseUS. im super paranoid and ive tried everything, i need help ASAP