My folders in hard disk are appearing as shortcuts

H:\Game Installers
H:\Chicago Fire Season1
H:\Chicago Fire Season2
H:\Movies
H:\my files
H:\CERTIFICATES
H:\NBA.2K14-RELOADED
H:\PDF Credentials
H:\music
H:\FHM
H:\x-art
H:\WINDOWS7-PC
H:\WindowsImageBackup
H:\Trauma Series
H:\Transcend
H:\Warcraft III
H:\Call of Duty Black Ops 2

• Click Start
• Type notepad.exe in the search programs and files box and clcik Enter.
• A blank Notepad page should open.
  
  • Copy/Paste the contents of the code box below into Notepad. (don't include Code: Select all)

CMD: ATTRIB-H "H:\Game Installers" /S /D

CMD: ATTRIB-H "H:\Chicago Fire Season1" /S /D

CMD: ATTRIB-H "H:\Chicago Fire Season2" /S /D

CMD: ATTRIB-H "H:\Movies" /S /D

CMD: ATTRIB-H "H:\my files" /S /D

CMD: ATTRIB-H "H:\CERTIFICATES" /S /D

CMD: ATTRIB-H "H:\NBA.2K14-RELOADED" /S /D

CMD: ATTRIB-H "H:\PDF Credentials" /S /D

CMD: ATTRIB-H "H:\music" /S /D

CMD: ATTRIB-H "H:\FHM" /S /D

CMD: ATTRIB-H "H:\x-art" /S /D

CMD: ATTRIB-H "H:\WINDOWS7-PC" /S /D

CMD: ATTRIB-H "H:\WindowsImageBackup" /S /D

CMD: ATTRIB-H "H:\Trauma Series" /S /D

CMD: ATTRIB-H "H:\Transcend" /S /D

CMD: ATTRIB-H "H:\Warcraft III" /S /D

CMD: ATTRIB-H "H:\Call of Duty Black Ops 2" /S /D

• Save it to the same folder/directory that FRST.exe is in, naming it as fixlist.txt
  

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Start FRST in a similar manner to when you ran a scan earlier, but this time when it opens ....
  
  • Press the Fix button once and wait.
  • FRST will process fixlist.txt
  • When finished, it will produce a log fixlog.txt in the same folder/directory as FRST64.exe.
  • Please post me the log.

fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-01-2014 03
Ran by [removed] at 2014-01-24 09:06:27 Run:2
Running from C:\Users\[removed]\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CMD: ATTRIB-H "H:\Game Installers" /S /D
CMD: ATTRIB-H "H:\Chicago Fire Season1" /S /D
CMD: ATTRIB-H "H:\Chicago Fire Season2" /S /D
CMD: ATTRIB-H "H:\Movies" /S /D
CMD: ATTRIB-H "H:\my files" /S /D
CMD: ATTRIB-H "H:\CERTIFICATES" /S /D
CMD: ATTRIB-H "H:\NBA.2K14-RELOADED" /S /D
CMD: ATTRIB-H "H:\PDF Credentials" /S /D
CMD: ATTRIB-H "H:\music" /S /D
CMD: ATTRIB-H "H:\FHM" /S /D
CMD: ATTRIB-H "H:\x-art" /S /D
CMD: ATTRIB-H "H:\WINDOWS7-PC" /S /D
CMD: ATTRIB-H "H:\WindowsImageBackup" /S /D
CMD: ATTRIB-H "H:\Trauma Series" /S /D
CMD: ATTRIB-H "H:\Transcend" /S /D
CMD: ATTRIB-H "H:\Warcraft III" /S /D
CMD: ATTRIB-H "H:\Call of Duty Black Ops 2" /S /D
*****************


========= ATTRIB-H "H:\Game Installers" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\Chicago Fire Season1" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\Chicago Fire Season2" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\Movies" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\my files" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\CERTIFICATES" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\NBA.2K14-RELOADED" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\PDF Credentials" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\music" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\FHM" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\x-art" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\WINDOWS7-PC" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\WindowsImageBackup" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\Trauma Series" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\Transcend" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\Warcraft III" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


========= ATTRIB-H "H:\Call of Duty Black Ops 2" /S /D =========

'ATTRIB-H' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========


==== End of Fixlog ====

My apologies, I appear to have missed out a "space" in each of the script lines I gave you, which is why the commands were not recognised.

Please run FRST again, this time using the script below, which has had the necessary spaces added. (don't include Code: Select all).

CMD: ATTRIB -H "H:\Game Installers" /S /D

CMD: ATTRIB -H "H:\Chicago Fire Season1" /S /D

CMD: ATTRIB -H "H:\Chicago Fire Season2" /S /D

CMD: ATTRIB -H "H:\Movies" /S /D

CMD: ATTRIB -H "H:\my files" /S /D

CMD: ATTRIB -H "H:\CERTIFICATES" /S /D

CMD: ATTRIB -H "H:\NBA.2K14-RELOADED" /S /D

CMD: ATTRIB -H "H:\PDF Credentials" /S /D

CMD: ATTRIB -H "H:\music" /S /D

CMD: ATTRIB -H "H:\FHM" /S /D

CMD: ATTRIB -H "H:\x-art" /S /D

CMD: ATTRIB -H "H:\WINDOWS7-PC" /S /D

CMD: ATTRIB -H "H:\WindowsImageBackup" /S /D

CMD: ATTRIB -H "H:\Trauma Series" /S /D

CMD: ATTRIB -H "H:\Transcend" /S /D

CMD: ATTRIB -H "H:\Warcraft III" /S /D

CMD: ATTRIB -H "H:\Call of Duty Black Ops 2" /S /D

Please post me the new fixlog.txt

fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-01-2014 03
Ran by [removed] at 2014-01-24 10:11:52 Run:4
Running from C:\Users\[removed]\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CMD: ATTRIB -H "H:\Game Installers" /S /D
CMD: ATTRIB -H "H:\Chicago Fire Season 1" /S /D
CMD: ATTRIB -H "H:\Chicago Fire Season 2" /S /D
CMD: ATTRIB -H "H:\Movies" /S /D
CMD: ATTRIB -H "H:\my files" /S /D
CMD: ATTRIB -H "H:\CERTIFICATES" /S /D
CMD: ATTRIB -H "H:\NBA.2K14-RELOADED" /S /D
CMD: ATTRIB -H "H:\PDF Credentials" /S /D
CMD: ATTRIB -H "H:\music" /S /D
CMD: ATTRIB -H "H:\FHM" /S /D
CMD: ATTRIB -H "H:\x-art" /S /D
CMD: ATTRIB -H "H:\WINDOWS7-PC" /S /D
CMD: ATTRIB -H "H:\WindowsImageBackup" /S /D
CMD: ATTRIB -H "H:\Trauma Series" /S /D
CMD: ATTRIB -H "H:\Transcend" /S /D
CMD: ATTRIB -H "H:\Warcraft III" /S /D
CMD: ATTRIB -H "H:\Call of Duty Black Ops 2" /S /D
*****************


========= ATTRIB -H "H:\Game Installers" /S /D =========

Not resetting system file - H:\Game Installers

========= End of CMD: =========


========= ATTRIB -H "H:\Chicago Fire Season 1" /S /D =========

Not resetting system file - H:\Chicago Fire Season 1

========= End of CMD: =========


========= ATTRIB -H "H:\Chicago Fire Season 2" /S /D =========

Not resetting system file - H:\Chicago Fire Season 2

========= End of CMD: =========


========= ATTRIB -H "H:\Movies" /S /D =========

Not resetting system file - H:\Movies

========= End of CMD: =========


========= ATTRIB -H "H:\my files" /S /D =========

Not resetting system file - H:\my files

========= End of CMD: =========


========= ATTRIB -H "H:\CERTIFICATES" /S /D =========

Not resetting system file - H:\CERTIFICATES

========= End of CMD: =========


========= ATTRIB -H "H:\NBA.2K14-RELOADED" /S /D =========

Not resetting system file - H:\NBA.2K14-RELOADED

========= End of CMD: =========


========= ATTRIB -H "H:\PDF Credentials" /S /D =========

Not resetting system file - H:\PDF Credentials

========= End of CMD: =========


========= ATTRIB -H "H:\music" /S /D =========

Not resetting system file - H:\music

========= End of CMD: =========


========= ATTRIB -H "H:\FHM" /S /D =========

Not resetting system file - H:\FHM

========= End of CMD: =========


========= ATTRIB -H "H:\x-art" /S /D =========

Not resetting system file - H:\x-art

========= End of CMD: =========


========= ATTRIB -H "H:\WINDOWS7-PC" /S /D =========

Not resetting system file - H:\WINDOWS7-PC

========= End of CMD: =========


========= ATTRIB -H "H:\WindowsImageBackup" /S /D =========

Not resetting system file - H:\WindowsImageBackup

========= End of CMD: =========


========= ATTRIB -H "H:\Trauma Series" /S /D =========

Not resetting system file - H:\Trauma Series

========= End of CMD: =========


========= ATTRIB -H "H:\Transcend" /S /D =========

Not resetting system file - H:\Transcend

========= End of CMD: =========


========= ATTRIB -H "H:\Warcraft III" /S /D =========

Not resetting system file - H:\Warcraft III

========= End of CMD: =========


========= ATTRIB -H "H:\Call of Duty Black Ops 2" /S /D =========

Not resetting system file - H:\Call of Duty Black Ops 2

========= End of CMD: =========


==== End of Fixlog ====

OK, looks like the folder permissions have been altered at "system" level, and an Administrator does not have enough authority to change them.

I'm going to have to do some research to see whether there's a way for us to reset the system privileges, just off the top of my head I can't think of one.

Whatever I find, one way or the other, I'll get back to you as soon as I can.

OK, I think I've got an idea.

Rather than try and find a way round the permissions problem, it's probably going to be easiest if you create a new set of folders with similar names to the ones that are hidden, and then transfer the files from your hidden folders into the new folders.

Since the new folders do not have the "hidden" attribute set, you should be able to see their contents OK.

ok i will try to do that tomorrow when i got home from work... i hope i would be able to delete those hidden folders... does my hard disk is free from malware already?

hi Gary i have another problem because there are folders thats spread to all the drivers in my PC and i think those are the virus because when i try to delete those folders they came back thos folders are named $RECYCLE.BIN and System Volume Information and i cant open them... what should i do?

They're your Trash bin and your System Restore Points, they are not caused by infection they are an essential part of Windows, which is why you can't remove them. Because they are System folders, you're also not allowed to open them directly in Windows 7, in earlier versions of Windows you could access them with Administrator privileges, but not in Windows 7.

Do you see these folders when you have folder options set to not view hidden files and folders ?

Let me know if you're having any other problems, because if you're not I think we can close this topic. I still need to give you instructions as to how to remove the tools we've been using to clean your machine, but I'll wait till I've heard back from you before I do that.

i see... now i think were already done... thank you soo much for your help Gary i really appreciate it... now my files are back to normal again... thank you soo much...

You're welcome, glad we could help.

OK, so as long as you don't have any remaining problems, then it's time to remove the programs we've been using to clean your computer.

First ...

Let's clear out OTL and the files and folders it created. This will also remove FRST and SystemLook.

• Double click OTL.exe to launch the programme.
• Click on the CleanUp! button.
• OTL will download a list from the Internet, if your firewall or other defensive programmes alerts you, allow it access.
• You will be prompted to allow the clean up procedure, click Yes
• When finished exit out of OTL
• Now delete OTL.exe (if still present).

Next ...

To remove ADWCleaner and the files and folders it created.

• Double click AdwCleaner.exe to run it.
• Click Uninstall.
• Click Yes to the prompt.
• AdwCleaner will close and uninstall itself

Note: If AdwCleaner prompts you an update is available, click Cancel and continue to uninstall.

Next ...

Please go to Control Panel > Programs > Uninstall a program and Uninstall the following:

Tweaking.com Registry Backup

As far as I can see, your computer looks clear of infection now.

• If so then it's time to make your computer more secure.

Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.

• Computer Security - a short guide to staying safer online

all is done Gary... thank you soo much for the help... you guys are really great... till next time... GOD bless...

You're welcome.

Keep safe.

As your problems now appear to have been resolved,