Tech Problem Aggregator

Robocopy changed only ZIP file timestamps

Q: Robocopy changed only ZIP file timestamps

I used a Robocopy script to restore data files from a backup disk to my main disk, including many ZIP files having various dates. The files copied as expected, preserving their source date and time correctly, except that the ZIP files were copied and given the current date and time rather than the source file date and time. I no longer have the exact command line I used for this, but generally program Robocopy something like:

ROBOCOPY Z:\BackupFiles X:\ *.* /E /COPY:DAT /R:3 /V /FP /X /TS /TEE /NP

I am running Win 7 64 bit. Some time ago, I followed the instructions on your forum page "How to Disable Windows Explorer Folder View of Zip Folders in Windows 7"

This behavior suggests to me that perhaps Robocopy was interpreting the ZIP files as folders not files, and therefore was not adhering to /COPY:DAT. I undoubtedly did not specify /DCOPY:T.

Has this behavior been seen and can it be prevented?

Thank you

A: Robocopy changed only ZIP file timestamps

Doubt it was Robocopy but rather was Explorer doing something with the ZIP files what...I don't know. I personally don't care about preserving the multiple timestamp metadata, its all unreliable.

2 more replies
Answer Match 64.26%

Hey all, just wondering how important the file timestamps are.

Since copying my files from drives to drives I've noticed that these have been altered. I have some where the files have a modified time before a created time.

I've lost my original created times. I've had some files that were created in 2004 now showing as created in 2012.

Would this cause any problems at all?

Any help would be appreciated.

A:How important are File Timestamps?

No they won't cause problems...just metadata.

3 more replies
Answer Match 64.26%

I have a bunch of photos taken with my digi camera. I transferred them onto my PC running XP and I burned them to CD. I noticed later that the burned copies have all the timestamps (times the pictures were actually taken) ALL screwed up. Grrrrr!!! This is really anoying to me! Anyway, can I change them back to REAL time? Btw, I don't expect a reply but one would surely be nice.

A:XP screwed up my file timestamps!!!

Probably a dumb question but do you have a column in your pictures folder titled "Date Picture Taken"? If not you can add it by going to View/Choose Details. On the Choose Details page you can put a check in "Date Picture Taken" and any other detail you want.

1 more replies
Answer Match 63.84%


I backup my data from my Windows 8 computer to an external hard drive regularly using File History but I also transfer some of this data to several other computers with various operating systems (Windows 7 & Ubuntu being the primary ones) and I noticed that, while it is simple to restore/transfer files to Windows 8 computers through the File History menu, on these other operating system one is forced to navigate to the folders on the drive and copy the files over.
This wouldn't be a problem except that all the files saved with File History have a long time stamp appended to their file names.

Is there any way to disable this feature? I don't care so much about having to copy the files manually to other operating systems as I do having to rename them all after doing so.

Thanks for any assistance!

A:Disabling File History File Name Timestamps

Hello thesolis,

If you like, you could restore the files directly to any location you like from within File History instead without the timestamp being included in the file name.

File History - Restore Previous File Versions in Windows 8

Hope this helps,

4 more replies
Answer Match 55.44%

In xp or 2003 robocopy log transfer speed at the end log file. How to get this in w7 or 2008 r2?


A:Robocopy transfer speed in log file

Logging options
                /L : List only - don?t copy, timestamp or delete any files.
               /NP : No Progress - don?t display % copied.
         /LOG:file : Output status to LOG file (overwrite existing log).
      /UNILOG:file : Output status to Unicode Log file (overwrite) ##
        /LOG+:file : Output status to LOG file (append to existing log).
     /UNILOG+:file : Output status to Unicode Log file (append) ##
               /TS : Include Source file Time Stamps in the output.
               /FP : Include Full Pathname of files in the output.
               /NS : No Size - don?t log file sizes.
               /NC : No Class - don?t log file classes.
              /NFL : No File List - don?t log file names.
              /NDL : No Directory List - don?t log direct... Read more

5 more replies
Answer Match 55.44%

I'm sync'ing a local directory with a network drive, and having problems with robocopy still taking too much time (and making too much work) because it sees time differences of 1 second as "newer". Is anyone aware of a remedy, or different method robust enough to trust with networked drives?

TIA & cheerios from the Avalon Peninsula, Newfoundland :)

A:robocopy & file time stamps

Hi Mshaffer,

File dates are kept in increments of 2 seconds. Look at a bunch and you will find that all have even values of seconds.

Good Luck,


4 more replies
Answer Match 55.44%

I have a well-defined backup routine using RoboCopy, which I love.  But the last time I used it, it created a backup of all File History files as well - and they took up 120 GB of HDD storage that I need for other uses.
How can I prevent this?  I have no desire for File History's history of changes - I just want to copy the files as they are.  For me, that says RoboCopy.
Can you help?
   Richard Tamir

More replies
Answer Match 55.44%

We are building a script to copy data from a laptop to our servers using robocopy, but we dont want to backup movie files and pictures. is there a way to have robocopy exclude specific file types?

A:Robocopy Exclude file types


/xf <FileName>[ ...]
Excludes files that match the specified names or paths. Note that FileName can include wildcard characters (* and ?).

e.g. robocopy <Source> <Destination> /xf *.jpgTracy Cai
TechNet Community Support

3 more replies
Answer Match 55.02%

I am wanting to periodically copy files from one pc to another pc across the lan.
I was reading about robocopy, and wikipedia says there is a gui.

Anyone have a link to something I can use?

A:automated scheduled file copy? robocopy gui?

file lite move?
FileMove Lite - SDW Software

What I want to do is move the files, not copy. So they will be gone from one PC an be on another.

7 more replies
Answer Match 54.18%

After switching to Windows 7, my back-up batch file no longer works. I don't want to use the backup function - just want a shortcut to my own batch file on the desktop. I have tried replacing the xcopy command with Robocopy, without success. Can anyone give me a one-line executable, that will copy files from one folder on the HD to a folder on the external drive, only if the file on the HD is newer (as with the Xcopy /d switch)? Thanks.

A:Solved: Replacing Xcopy With Robocopy In Batch File

Try XXCOPY, it's kinda like Xcopy on steroids.

3 more replies
Answer Match 53.76%

Hi guys, so I have a little problem, I've downloaded FileTypesMan because I wanted to change the .exe files appearance on my computer.

I did this using this program - all .exe file icons changed, however, with them changed ALL the shortcuts to all the programs that I have on my laptop - now they all look the same.

I can't figure out how to change it all back.

Any help would be greatly appreciated.
View image: Capture - how my Desktop looks now

A:Programs shortcuts'icons changed when changed exe file icon appearance

Hello Max, and welcome to Seven Forums.

If you like, you might see if downloading and merging the .reg file for the listed exe item in the tutorial below may be able to help. It'll restore the default association and registry entries for exe files.

Default File Type Associations - Restore

3 more replies
Answer Match 53.76%

LIke an idiot I changed a associate file and it has turned everything into a lnk so I cant open any programs or anything at all any solutions would be greatly appreciated

A:Changed a file Association and it changed everything to a link file

Hello KnightSaint, and welcome to Seven Forums.

You could use the tutorial below to download the file extension that you changed to restore it's default associations.

Default File Type Associations - Restore

Hope this helps,

3 more replies
Answer Match 53.76%

I have a script (Kindly originated by Golden in this thread )

Script robocopy I:\DATA M:\Backup_DATA /e /np /log:backup_log.txt which is run at shutdown.

In my M:\ drive I have two identically named folders: 'Backup_DATA', one (call it A) containing the correct 70 folders and 1003 files 295mb. Dated 11 January 2014 11:19:41 in properties, right click.
The second copy (Call it B) contains 2 folders 0 files 0 Bytes and is dated the same 11 January 2014 11:19:41 in properties, right click.

Although they are both shown on my M:\ drive as: (A) Backup_DATA dated 10/1/2014 at 16.46 and (B) Backup_DATA dated 9/1/2014 18.36.

I am not able to delete the ghost copy (B) as when I try I receive the following popup:
"Could not find this item.This is no longer located in M:\ verify its location and try again"

Not sure where to go from here, any suggestions? !!


I am unable to delete or rename the folder 'Backup_DATA', however inside the folder is another folder named 'e' and that contains another folder named 'np'. The 'np' folder is empty.
Now it seems quite a coincidence that both 'e' and 'np' make up part of the Robocopy script .

I am still unable to delete these sub folders as each one no longer exists on my M: drive.

A:Robocopy and Group Policy generates 1 real & 1 Ghost file.

Well, folder removed

Tried to do this in dos same problem, although it was shown it did not exist! Searched around and came across Unlocker. Using Unlocker I still could not delete the Backup_DATA folder itself, it remained even after the suggested re-boot. I had to delete the 'np' folder first, then the 'e' folder, and then the 'Backup_DATA' folder.

It seems Unlocker succeeded where anything else I tried failed.

1 more replies
Answer Match 53.76%

What is the format for ROBOCOPY to copy a file from the source directory and rename that file in the target directory? ie, file c:\A\a.txt should be copied as C:\B\b.txt


More replies
Answer Match 48.3%

Ever since I adjusted the clock on my PC, which is now the correct DST
time... The TIME in my OUTLOOK EXPRESS seems to be off by an hour.

Any mail that I receive, which is a POP3 account with my ISP
(peoplePC)... gives the time an hour off.

Are the times for mail in OE server generated or something to do with
the settings on my PC?

Like I said, my PC clock is accurate but all of my email times are off
by an hour.



A:Incorrect OE timestamps.....?

Double-click your PC's time, then go to the Time Zone tab. Make sure it's set to -5 and there's a checkmark in the box to automatically adjust settings. Apply, then OK if you made any changes.

Did you download the patch from MS's website, or did you manually change the time? If you manually changed the time, you will have to change it back, then download the patch from MS's website, which will "fix" the time issues...

1 more replies
Answer Match 47.88%

How do My Location timestamps on Google work? I was in one location all night and had timestamps popping up in a large variety of locations, some of which were up to 13 miles away.

A:Inaccurate Google Timestamps

which gives many possible reasons for this and I see no need to repeat them

1 more replies
Answer Match 47.88%

i posted about two months ago (search qblitz) and no one could help me with why my system wasn't responding. It happened again on Jan 1. At 7:10am per my system clock, here are some registry entries found by EasyCleaner. Look at the time stamps of the first two entries.
HKEY_LOCAL_MACHINE Software\Lexmark\MarkVision\LexBCE\Debug Options 1/1/2007 12:04:34 PM Log File C:\LEXBCE32.LOG
HKEY_LOCAL_MACHINE Software\Lexmark\MarkVision\LexBCE\Debug Options 1/1/2007 12:04:34 PM Print Log File C:\LEXBCE32_PRINT.LOG
HKEY_LOCAL_MACHINE Software\Microsoft\IMAPI\StashInfo 12/30/2006 6:53:56 AM StashPath C:\W

It again happened yesterday. And again, the registries entries were timestamped a day later.

And again, i am perplexed why the system starts responding normally for no apparent reason. i do do activies such as restore to an earlier time, remove entires with hijack and put them back, start up with less services, etc. Nothing works. The system comes back only when i get into a user account fast enough, and then, that only works sometimes. Most of the time, i can operate normally for about two minutes, then weird things happen. folders dont open, icons don't work, etc.

The only abnormality i can see are the registry dates. Anyone see anything like this before. Is it malware or a corrupt file. Any idea on what might be the cause or what to look for next?

More replies
Answer Match 47.88%

I am using windows 7 ultimate 64 bit and this virus change extensions to word pdf and jpeg files, Extension *. bemrjof  was there to my entire Microsoft office data and all the PDF's and all photo file formats.  I tried many things but nothing worked, then I try to manually change the extensions and got really scared when saw that file is corrupted,i really don't know what to do anybody has any suggestions plz let me know.
thank you 

A:Virus changed file extensions of Microsoft office file, PDF's and photo files

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Answer Match 47.46%


I am currently running Backup4All Professional 4 to back-up my data from my hard drive to an external drive, and I've got a load of different back-up jobs defined, all set to mirror the data (i.e. no compression), and all set to copy only files that have changed since the last back-up.

This works fine for most of my data, but for my Outlook Express folders, there are a lot more DBX files that the system thinks have been changed each day than I do.

For example, there are folders being backed up each day where I know that the only way emails get added to those folders is if I manually copy them there, yet some folders that have been inactive, as far as I am concerned, are still getting their Last Modified timestamp updated even though there are no apparent changes.

Do you know what is causing this, as the net effect is that my back-up job for OE takes about five or six hours, which is way too long.

On a related note, are you aware of any other back-up software that is specifically designed for Outlook Express 6 that may be quicker (and, preferably, will let me continue using OE while it's running)?

Many thanks,


More replies
Answer Match 47.46%

I just got this Windows 7 machine in the last week. I installed my friendly Windows Live Mail, and the wonderful Synctoy. And I immediately discovered a problem. Synctoy wants to overwrite EVERY .eml file the minute I open Windows Live Mail.

It looks like any touch of a folder at any level instantly resets the modified date on every .eml in the folder to the current date and time.

It may be that Windows Explorer is doing it, but I think it is Windows Live Mail. If I save a single email to any level of the foler, all other emails in that folder get the same date modified.

So I have hundreds of overwrites in Synctoy trying to back it up.

I would like a fix. Glad to help with any other experimentation or other.

I am Syncing between this Windows 7 desktop and my Windows Vista laptop. I don't think the operating system conflict is the problem. It worked just fine when the desktop was XP.

Help! I noticed a similar thread in the Synctoy forums, but I think this is related to either Windows Live Mail or Windows Explorer in windows 7 only.

Thanks. Any other information needed here? I searched the forums and found nothing like this problem.

A:.eml files timestamps updated constantly

Well, Ladies and Gentlemen, it must be a busy world in Windows 7 out there. I have no response to this probem at all - but it went away. I do have a new wrinkle on it - the .eml files now will not let me delete them unless I delete all their properties. But that is a lot less grief than the hundreds of write overs that it was causing before.

If some wizard at Microsoft fixed the .eml updating problem - thanks. But you somehow altered all of them now so that I cannot easily delete them. Next time, perhaps.


7 more replies
Answer Match 47.46%

I enjoy listening to real audio online. But I was just wondering on how to find real audio. Like I figured out on how to see the real audio url, by right clicking on open with Notepad. And when I did that, I saw the real audio url, starting with "rtsp," I was just wondering on where to find some real audio files to lookup. Like is there a website like a real audio search website? Because I always see this real audio url that starts out with "rtsp", and it ends with a certain number timestamp.

Here I can give you a real audio rtsp link: rtsp://"0:20:5"&end="0:22:40". So I open up notepad, and paste that real audio url, and then save it as ram, it will start to open up my Realplayer and play that song. But there is this interesting website that I found, and it talked about the timestamps, and how to use them in real audio url streams, that work in rtsp, or even pnm. Here I can give you the site. It was very hard to read it though, because the page was all blue, and the text was pale: Playing With RA.

This real audio article was about timing real audio and timestamps. And it also talked about finding real audio urls with a certain timestamp. But I didn't really get on how to figure it out though. So can you just explain to me on how this all works out? And also let me know if there are any real audio search engine sites. All righty? And let me know also on how timestamps work.... Read more

A:I would like to know about real audio timestamps, and other stuff as well.

Hi, I don't use it myself, but you might pick up some info and links from here RealAudio - Wikipedia, the free encyclopedia
The Best Audio Search Engines on the Web
Hope it gives you a start

2 more replies
Answer Match 47.04%

I have a User that brought a computer to me. Mostly all the files within the user folders where changed. Example of a file.
Should be (Birthday.jpg)
is now (Birthday.jpg.cpjevac)

I have deleted the extension .cpjevac from the name allowing it to change to .jpg file and when doing so the file icon changes as the application that is compatible with .jpg. After opening the file it just says "The file may be unsupported, damaged or corrupted"

does anyone know what I can do for this. I have searched so many places have not found anything at all.

I have booted in safe mode and ran virus scans just to clean the system, But no change of the files at all.

Any help would be much appreciated.


A:File Extensions changed (doc/pdf/jpg/txt) *.*original file-ex*.cpjevac

Unfortunately anything that looked productive on Google Search came back to this posting.

1 more replies
Answer Match 46.62%

A very rudimentary question:
A assume that any etl contains at least some actual timestamps (I mean the time as read in lower right (normally) corner) so it is possible to correlate log events with timestamps not logged in the etl. May I read the actual DateTime or similar from the log
(either directly or indirectly by attributing an actual time to the relative time of zero)

More replies
Answer Match 46.62%

A very rudimentary question:
I assume that any etl contains at least some actual timestamps (I mean the time as read in lower right (normally) corner) so it is possible to correlate log events with timestamps not logged in the etl. May I read the actual DateTime or similar from the
log (either directly or indirectly by attributing an actual time to the relative time of zero) ?

More replies
Answer Match 46.2%

So far I've tried, Robocopy/Robocopy UI, Richcopy and Teracopy.

Robocopy does have the directory timestamp function (/DCOPY:T) but it doesn't work with nested directories and the same goes for Richcopy.

Teracopy does copy timestamps for nested directories but it crashes when I copy large amount of files (>1TB), tried v2.3 and 2.27 and both crash.

Are there other reliable copy software out there that is able to copy directory timestamps? What do IT professionals use when they need to copy large amount of files and folders and retain timestamps?

A:Copy software that copies directory/folder timestamps?

I haven't had a issues with Robocopy not copying timestamps off all files and directories in the source. The thing is. You need to let it finish to completion for directories to retain their timestamps.

6 more replies
Answer Match 45.78%

I m using Linux Red Hat Enterprises (RHEL 6) and created a WebDav share using the Apache. I can connect to the share via Windows Explorer and copy and directly modify files. Seems pretty fast too. But..

When I look at the share in Windows Explorer, its shows the modifed date as the created date and the created date as the modified date. I have confirmed this by logging into Linux shell as well as via WinSCP.

I am thinking there is a mapping someplace in Apache that may be able to fix this, but then when I view the share with a browser (http://servername/share) the modified date is correct.

See attached image. Note date modified is older than create.Any ideas?


More replies
Answer Match 44.52%

hey some of my folders on my USB changed from file folders to just files
the 1 of the folders contains important work and i need to be able to get to it
only happend when i pluged it into my Vista (sp1) Laptop when i go to open them it asks what program i want to open it with
Some information about the USB and folder:
Folder created on XP (probs not relevant)
File system on USB Fat32
Both files under 10kb even tho one contains several large photos
all other folders are fine all able to open

need help ASAP

btw tryed to open on xp and still does not work

More replies
Answer Match 44.52%

Hello All;

I downloaded a trial property management software.

It worked well for about a week. Then the files changed to lnk files and I cannot open.

I saved on my desktop, "my documents" folder and my back up hard drive (seagate). All the files have changed to lnk files.

None of my other files/programs have been affected...only this property management software.

How can I recover the exe files and all the data I have placed in the program?

Your assistance is appreciated.

A:Solved: My exe file changed to lnk file?????

6 more replies
Answer Match 44.52%

The unimagineable has happened. EVERYTHING ( except for internet explorer ) has turned into a .lnk type file ! Just before it happed I just started to run an Adaware scan just after completing a spybot scan which picked up Avenue again. I then clicked on Adwatch pro and it informed me that the rigistry has been altered. I have no idea where to start ... even system restore is affected .... oh man this is bad ! PLEASE HELP !

A:Omg ! Every File/program Has Changed To A ".lnk" File On My Py

Try Kelly's KornerEXE (lnk and regfile) Fix for Windows XP - #12 on the leftAs this is a registry edit you should backup your registy first.

18 more replies
Answer Match 43.68%

When my computer crashed, I had to erase the entire hard drive (too long to explain what happened). When I re-loaded and put in everything I had backed up, my Excel proram changed itself to Word. How could this happen? Now when I open the file it's in code. When I tried to re-name the file using XLC as a file extension, it opens in Excel but still in code. Can you help? Thanks!!!

A:File name changed itself!

8 more replies
Answer Match 43.68%

hi guys well i put some data on my external harddrive because i had almost no space left on my harddrive, and then i deleted some and put the files on the external back on the compuer harddrive. after i did that all OF MY iso files suddenly changed to a rar file...SOMEONE HELP ME!!!

A:ISO changed to a RAR file???

8 more replies
Answer Match 43.68%

I use Print Sohp Dlx12 for cards, labels etc.. My problem is: I save posters etc on a cd and one of the file names has changed so I cannot view the contents of that saved file. I tried opening it in DOS but cannot remember how to do that. I clicked on 'properties' for the file name and that's how I discovered that the file name had changed. The original file name is xmasvar10.sig and the DOS name is xmas#429.sig.. The 'new' name is xmassgn'01.sig.. Apparently, this is causing the problem of getting it to open. When I click on it, nothing is there but there is over 7mg of info there. How do I get this file to open so I can save it to a different name? I would like to keep the picutres I have saved in this file if I could get at it. I hate to lose it.

A:file name changed-Help!

14 more replies
Answer Match 43.26%

I was installing Norton Security and it locked up during install.
When I rebooted, Norton had changed all my files extensions from exe to lnk

As a result none of the programs or files work. After reading a lot, I tried to

restore my registry. Since Norton changed the files, any command in run does not work. I comes up with a dialog asking for a file association.

Any one with an answer, I would appreciate very much.


A:Changed file extensions

Did you try this:

1 more replies
Answer Match 43.26%

hi !!

My compure slowed down during regular internet surfing and after few weeks, crashed last night. Symantec recognizes now new threats that can sometimes be removed. In addition, just-in-time bugging for errors appear ([5496] C:\WINDOWS\odb.exe) but JScript runtime error appear. Used combofix to analyze problem. Log file is down.

Please does anybody now what to do???


ComboFix 09-01-07.02 - jsluijte 2009-01-08 12:43:03.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.2046.1012 [GMT 1:00]
Gestart vanuit: c:\combofix\ComboFix.exe
* Nieuw herstelpunt werd aangemaakt

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

c:\documents and settings\jsluijte\Application Data\~tmp.html
c:\windows\IE4 Error Log.txt

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


(((((((((((((((((((( Bestanden Gemaakt van 2008-12-08 to 2009-01-08 ))))))))))))))))))))))))))))))

2009-01-08 09:36 . 2009-01-08 09:36 <DIR> d-------- c:\program files\GraphPad
2009-01-08 09:36 . 2009-01-08 09:36 <DIR> d-------- c:\documents and settings\jsluijte\Application Data\GraphPad Software
2009-01-08 09:36 . 2009-01-08 09:36 <DIR> d-------- c:\documents and settings\All Users\Application Data\GraphPad Software... Read more

More replies
Answer Match 43.26%

I'm on a bad problem, when I took data from memory card, then that partition of the folder's properties changed into .exe & some other into .dll . That part is not open any folder(open as like 'dos') the folder size 24 KB is visible. Partition size while ago looks like,after restart my pc then all folders hid to the another partition of the disk.What I will be able to find my data again ? Please help me,I'll be your forever grateful.thanks.specify all possibility about recover my data.thanks again.
Entrance of any kind of virus has not been identified by the several type of anti-virus program me. Earlier on I had help from another place he failed to help me.i used Hyjackthis programme,malwarebyt*es-anti-malware,fseasyclean virus removal tool. but The problem remains as before.

My problem ......
Memory Card data in E drive when I did copy paste. Then suddenly already changed all the folder's properties. His look has also changed. When I try to open it then he began to open the dos window and am doing it off when the pop up window message appears " end programme. end now / cancel ". Instead it found the folder on the property check .exe has changed. Which is just 24 KB size. All folders .exe has changed and the size is equal. When I did find Restart rest of the drive system All folders are hidden. programme drive is absolutely fine and all application working.The situation remains the same. After opening all the hidden fold... Read more

A:File changed into .exe & .dll due to USB virus

I'm still waiting, please provide a solution to my problem.Thank you.
your faithfully
vikas mehta

1 more replies
Answer Match 43.26%

Hi, I used the search function and found others had the same problem but didnt seem like any of them were solved.

I was transferring some files from one external to another and was having problems with an error message popping up saying invalid parameter. which stopped the file transfer. So I decided to scan for errors etc. That took forever, and never finished, An error message popped up saying it was unable to scan the drive. I scanned it on an xp computer, when i scan it on my vista computer it finished fine and says there are no errors. But the file is still inaccessible.

After that many of my large folders became inaccessible and changed to a 32kb file.

Ive been using [email protected] FILE RECOVERY, And have recovered almost all the files i had on there. All but the one I really want back, photos from my trip to china. The folder contained jpgs and avi files.

I did a quick scan and a full scan, but I cannot seem to find the files anywhere. I'd appreciate any help with this. Thanks.

A:Folder changed to 32 kb file

8 more replies
Answer Match 43.26%

Hi all, I am running XP SP3. I have a folder on my desktop which I can not access, the file path has changed from C:/ to G:/, which is my DVD drive.I can't find a way to change it back, If I go to properties and find target I get"Insert a disk into drive G".can anyone help?.....sam stuart

A:File Path Changed

would be helpful if you could provide curent pc layout raid master slave drives etc...
also any new hard drives and wheather they have an os on and if so which one

2 more replies
Answer Match 43.26%

I am having a trouble with my file folders. I deal with subcontractors and have a set process to follow. I have a folder and inside that folder, I have subfolders for each subcontractor and also a subfolder labelled finished for subs who have completed the process. When I am finished with the process for a specific subcontractor, I drag and drop their file into the subfolder labeled finished. I frequently go into that subfolder to verify information. Suddenly, windows 8 does not display individual subcontractor folders in that subfolder. Instead, it lists each individual file according to the last time that I worked on it. I'm not sure how this changed but it is making it very hard for me to find the documents that I want. I would like to click on the finished folder and see just the individual subcontractor folders like before. I've tried to change it back but I have no idea how to.

A:File options changed themselves

8 more replies
Answer Match 43.26%

Not sure how this happened, but I think my one year old had something to do with it, and I can't figure out how to fix it. A folder in my pictures had all it's files changed. They switched pics however when you open it in windows viewer the original picture shows up. Any idea how it happened and how to change it back. Ran the system restore and it didn't fix the problem. Running xp. Thanks

A:File Names Changed

What do you mean by filenames changed?

Can you give some examples...

3 more replies
Answer Match 43.26%

I got VB6 installed in my Vista.
One day, I found the .vbp icon in the file explorer had been changed by perhaps the antivirus (while the .vbp icon in desktop it is still remain as before).
I want to change back the .vbp icon in the file explorer:

C:\......\Microsoft Visual Studio-2\VB98\vb6.exe,16
I tried to changed to
C:\......\Microsoft Visual Studio-2\VB98\vb6.exe,1 or
C:\......\Microsoft Visual Studio-2\VB98\vb6.exe,32
However, after restar my Vista, nothing happened.

Can you help?

A:The icon for VB6 .vbp file was changed

Since vb6 is no longer supported by Microsoft, I installed visual basic 2010. There is no entry in the registry for visualbasic.project.

It's possible that the default program in Control Panel for this is not correct. In my system, the default program for .vbproj is Microsoft Visual Studio Version Selector.

5 more replies
Answer Match 43.26%

hello...i am using windows xp professional edition...

by mistake i have changed the association of .dat file with notepad

was trying to open .dat with media player with the 'open with' option n the the choose program option n by mistake i chose the 'notepad' n forgot to uncheck the 'always use the selected program to open this kind of file'

so now everytime i try to open a .dat file it open in notepad...

can anyone help or do i need to reinstall my xp?


A:changed file!!

Right click on the .dat file, then go down to the Open With menu, and click Choose Program.

That should give you the option to select the media player that you want to open it with, and then it should have the checkbox for always using that program for that type of file.


2 more replies
Answer Match 43.26%

I appear to have picked up a virus which associates all exe files with notepad. I cannot remove the virus as any anti virus software I run is attempted to be opened with notepad. Any suggestions to rectify the problem gratefully received.
Mod Edit: Moved from Windows 7 to a more appropriate forum. ~bloopie

A:File association changed

Hello gezclem, and welcome to Bleeping Computer!
If your file associations are not working, then let's try to rename Malwarebytes Antimalware to get it to run using a ".com" extension:
Please download Malwarebytes Anti-Malware and save it to your desktop.
Important!! When you save the mbam-setup file, rename it to something random (such as before beginning the download.
Double-click on the renamed file to install, then follow these instructions
for doing a Full Scan in normal mode.
Don't forget to check for database definition updates through the program's interface (preferable method) before scanning.
If you cannot update Malwarebytes or use the Internet to download any files to the infected computer, manually update the database by following the instructions in FAQ Section A: 4. Issues
Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
After completing the scan, a log report will open in Notepad.
The log is automatically saved and can be viewed by clicking the Logs tab .
Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
Exit Malwarebytes when done.
Note: If Malwarebytes encounters a file that is diffic... Read more

5 more replies
Answer Match 43.26%

Here's a weird one folks. My wife recently downloaded PCHealthDoc, and somehow or other it has changed the file association for .msi install files. That's fine, I know how to reassign it, but where exactly is the Windows Installer, and what's the name of the file? I've done some searches but can't find the exact program to associate it with. Ideas?



A:.msi File Association Has Been Changed

Hello Andacar,

If you like, downloading and merging the .reg file for the listed MSI option in the tutorial below will restore it's default associations for you automatically.

Default File Type Associations - Restore

1 more replies
Answer Match 43.26%

Hi all, I am running XP SP3. I have a folder on my desktop which I can not access, the file path has changed from C:/ to G:/, which is my DVD drive.I can't find a way to change it back, can anyone help?......sam stuart

A:File Path Changed

10 more replies
Answer Match 43.26%


I have a simple Text file an a PC. In the File Properties I set the Read-Only flag ? apply the settings & ok.
When I now open it in the Editor, I con not change any character.

Now after a Time I realized, that the file has changed somehow.

Why does this happen?
How can this happen with a Read-Only file?

Who does this?
Can I somehow observe the file to get informed who (which process) is changing the file?

Can anybody help me?

A:Read-Only File gets changed Why? How? Who?

Setting the Read Only attribute does not prevent modification of the file. It is only an advisory that software can honor or ignore as it wishes.

2 more replies
Answer Match 43.26%

Referred from here: ~ OBHi: I have some sort of malware/spyware on my conputer. It started with antivirusplus program that downloaded on my system and after that the IE kept redirecting all my search results. I used malawarebytes and SAS to get rid of it but the computer is still slow and I have about 8 run32.dll files running in the background. I also have AVG9.0 and resident shield comes up with the following message.Resident Shield alertc:\windows\system32\drivers\atapi.sys object is white-listed(Critical/system file that should not be removed)Virus identified win32/patched.chAlso another virus notification:win32/alureon.gI know since it is a system file I can't remove what to do next. The logs for DDS and GMer(which hung up after running for 3 hours.. so I just have partial log)are posted here.Thanks.-----------------------DDS LOG---------------------------------------------------------------------------------------------------DDS (Ver_09-12-01.01) - NTFSx86 Run by Owner at 21:37:07.10 on Fri 04/16/2010Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_16Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.637.110 [GMT -4:00]AV: Microsoft Security Essentials *On-access scanning enabled* (Outdated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exec:\Program Files\Microsoft Security Essential... Read more

A:atapi.sys file changed

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEnetsvcsmsconfigsafebootminimalsafebootnetworkactivexdrivers32%systemroot%�... Read more

20 more replies
Answer Match 43.26%

i had to reinstall xp home edition. when i started wmp 10 i noticed some of the mp3 files have been changed from their original titles to 'df705,df706,df707 etc.' also when i try to delete them i receive an error 'cannot delete file: cannot read fro source file or disk'.
please help, larry

More replies
Answer Match 43.26%


I've a file to which I've changed the name, probably (I can't remember though) I've also changed its extension and now I don't succeed to view it.
Is there a way I can recover it?
Thank you!

A:changed the file name and now I can't open it

7 more replies
Answer Match 43.26%

Hi,My first post here altho I have read quite a few posts and that have helped me to fix my problems before. So, good job guys! This time I could not fix my problem on my own. My kid reported that he could not use any more. It results in a 404 page not found nginx page.The problem is only on one computer at home, and i have located it to the hosts file. The idea for that came from another post on the forum. I cannot change the hosts-file and i tried to run point 17,18 from this guide: here, but am not allowed to delete or replace the hosts file.the hosts file has these entries added to them, and i dont know how they got there, so not only need I help to restore it, but also check for the source that did the modifications. Read more

A:changed hosts file

Give this a try: How do I reset the hosts file?

31 more replies
Answer Match 43.26%

ok so i played phantasy star online private server long ago (nothing has been wrong) then i checked today in the hosts file to join again ... and it doesnt look the same... at all

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:38:01 PM, on 9/2/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\Common Files\InstallShield\UpdateService... Read more

More replies
Answer Match 43.26%

As I said before not long ago, all of my files on my D drive have been replaced by this one folder called a KDB folder.
Within this folder there are a lot of .bix and .box files. When I check on the size of my D drive, I can see that my music files are still in there in there but I cant find a way to access it. After losing all D drive files, my windows explorer started screwing up saying that an error has occured and it needs to shut.

Before I came into this forum to ask for help,I tried using free anti virus (Mc Afee,Panda) and spyware software(spyware doctor) to find out what the problem is but the scan results shows nothing.
It was when I tried using AVG antivirus to scan my Pc, the results show that 2 files has changed:

shell (C:windows\system32\shell32.dll)
hosts (C:windows\systrem32\drivers\etc hosts)

I have even followed your step by step preparation guide. From step 1 to 4 there is no problem. In step 5, I tried to scan my pc using HouseCall anti virus to scan, an error occured within Firefox and needs to shut.

Together with this I have uploaded my HJT log file for you guys.
I hope you guys can help me recover my files.....Thanks in advance.....

A:Shell32.dll File Changed.......

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you.
I apologize for the delay getting to your log, the helpers here are very busy.

If you still need help, please post a fresh Hijackthis log, in this thread, so I can help you with your malware problems.
If you have resolved this issue please let us know.

9 more replies
Answer Match 43.26%

Hi all, I am running XP SP3. I have a folder on my desktop which I can not access, the file path has changed from C:/ to G:/, which is my DVD drive.Whatever I do it says insert a disk into drive G,I can't find a way to change it back, can anyone help?......sam stuart

A:file path changed

Are you saying...that the file path changed by itself...while on the desktop?


3 more replies
Answer Match 43.26%

I downloaded a torrent file for Oblivion, and when I tried to open it gave me some alert message. Dumb as I am, I disregarded it and opened the file anyways as a torrent file. Then it turned all of my files except for My Document and Recycling bin into torrents files. But I am able to use my torrent program (BitTorrent) still. Only way I was able to get onto the internet was because I hit the help bar on the top of the window for BitTorrent and it brought up FireFox. HELP!

A:Everything changed to a torrent [email protected]?

Never mind this post. For some reason it restored itself. (I don't know why or how)

1 more replies
Answer Match 43.26%

Hello All,

OS is Windows XP Pro, software is Microsoft Office Pro 2003.

I have a program that I use to clean devices and everything was fine until the other day when out of nowhere the icon for the .cfg file had been converted to the Outlook symbol for config files and it even says Microsoft Outlook Configuration File. Now my cleanboot program does not work properly and I can't get that config file icon to revert. It does open in notepad automatically but the text is a different style. Now this started last year on one of our work computers and little by little it is happening to all of them.

My original thought was a virus but I am not thinking it is, the files are taken from a server and the server now shows the Outlook file. Anyway, can anyone tell me if Outlook does that and how to fix it so my .cfg files open the way I want them to? Any help is appreciated.


More replies
Answer Match 43.26%

hello...i am using windows xp professional edition...

by mistake i have changed the association of .dat file with notepad

was trying to open .dat with media player with the 'open with' option n the the choose program option n by mistake i chose the 'notepad' n forgot to uncheck the 'always use the selected program to open this kind of file'

so now everytime i try to open a .dat file it open in notepad...

can anyone help or do i need to reinstall my xp?


A:changed file!!

Hi Ashwa.

No need to reinstall xp!!!

To remove the dat file association, just do the following: In windows explorer go to Tools > Options and choose the "File Types" tab.

Look for the DAT entry and click on the remove button.

Then to open with the right program (and do the association again if you want) double click your file and follow the 'open with' screen, checking or not the 'always use the selected program ...'



1 more replies
Answer Match 43.26%

Almost all my icons on my desktop changed to generic and I am unable to open executable programs because the .exe extention changed to .lnk, does anyone have a simple fix?message edited by time1maui

A:.exe file extentions have changed to .lnk

The machine is infected. Start with anti malware from malwarebytes.orgDownload , install, update & run it.How do you know when a politician is lying? His mouth is moving.

6 more replies
Answer Match 42.84%

Hello, and thank you in advance for your help.  I have a laptop that seemed to have gotten infected with a nasty virus that took over the screen, and asked for payment from Spamhaus of all places.  Having seen things like this before, I ran a slew of anti-virus that I've used to remove viruses before.  I ran Malwarebytes, Super Anti-Spyware, and finally Combofix. 
After I ran combofix (there were 2 deletions), I reboot the laptop and viola, no more taking over the screen.  However, I have a directory in which I keep all my important work files for dropbox that it seems to have changed all the files into html files.  Each file has ".html" slapped onto the end of it, and when you open it, directs you to another ransomwear page labeled Spamhaus.  I've tried snipping off the .html, but the files don't open correctly. 
If I lose these files I'm in big trouble.  Does anyone have any suggestions?

A:Spamhaus - File extensions changed

Also, here are the logs from dds.
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16537
Run by Paul at 13:52:07 on 2013-04-15
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.4002.1942 [GMT -4:00]
AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
============== Running Processes ===============
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\DigitalPersona\Bin\DpHostW.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
C:\Prog... Read more

4 more replies
Answer Match 42.84%

hi i am new to this forum..
i recently had to wipe and reinstall windows... that all went well.. but recently upon a re boot after installing a Java plugin one of the folders in the storage side of my partition went from being a folder to a 32Kb unrecognizable file...

even though the folder changed... the free space on the partition remains the same... so i am guessing it is all still there.. i have run anti-virus things and spybot with no avail... i will say though when i ran them there were many files named "file0001, file0002,..." that i have never seen before.

i am running XP SP1 and can't upgrade (the version i got from my college i guess can't be upgraded) my HD is a WD 160GB with 2 partitions... one is 10G for windows and the rest is for storage.... thought this setup would prevent the corruption of my files in a reinstall...

any ideas on what is going on here... thanks in advance


More replies
Answer Match 42.84%

Hi all.
I have some documents created by Microsoft Word in a zip file.
I tried to access them today but they are all now .doc files! Microsoft Word doesn't recognise them anymore, so I am now unable to open them.
I have always been able to access them before with Word. What's happened, and what do I do to change them back?

A:Document file format has changed.....huh?

Not sure I follow you. .doc is the normal extension for Word documents, unless you have Word 2007 and higher, which uses the .docx format.

3 more replies
Answer Match 42.84%

I am a retired IT service manager, and as a hobby business I assist a few elderly clients with computer issues, training and installations of new machines.
I have been assisting two friends with a particular problem that they have now experienced on 2 occasions. The problem was that the default program associated with the .LNK extension had been changed. In one case it was changed to Windows Media Player and in the second case it was changed to Adobe Reader.
Obviously, this caused all the icons and shortcuts on the machine not to work.
In the first case, I was able to resolve the issue by doing a System Restore. In the other case, I found a download that re-set the appropriate Registry entry, and this solved the problem.
However, I am curious to know if you can suggest to me what would cause this problem, or at least the most likely cause. I felt it may have been some malicious content from an email or from a website, but I couldn't confirm this. I would like to find an answer, so that I might be better able to help my friends from suffering the same problem again.
As the problem happened on 2 occasions, it made me feel it was something the users were doing, or a website they were using, but despite quizzing them, I can't pin down what actions proceeded the problem on both occasions. The owners of the machine are quite elderly, and are not very "computer literate".
Looking online, I can see the problem is not particularly uncommon, but I can't find any suggested ... Read more

A:Default File Associatons for .LNK changed

Hello Rod, and welcome to Seven Forums.

I find that most association issues are caused by the user mistakenly setting the wrong default program using Open with. It's not hard to do. Other times, it could happen when a program (ex: web browser) checks to see if it's the default program, and asks the user if they would like it to be if it's not.

Either way, the tutorial below can usually help to restore the default association of a file extension as needed.

2 more replies
Answer Match 42.84%

Hello, I hope I'm in the right place. On Sunday I tried to open a shortcut for ITunes on my desktop when it gave me a message like "what file do I want to use to open this file?" I must have clicked something wrong bc all the files on my desktop (except for Facebook) changed to the ITunes icon, even the ones in the Start Menu. I tried to use the 'properties' for the programs to change the icon, but it didn't work. I then tried to open another & I picked Adope Reader to open the file. They all changed to Adobe Reader icon. Then if I tried to open anything, it gave me the message "Adobe Reader could not open 'Chrome.exe.' (or whatever it was), bc it is either not a supported file type or bc the file has been damaged."
Is this something I can change or do I have to take it to the guys at the computer repair shop?
Dolores H.

p.s. Naturally I forgot to mention I'm using Windows 7 in a Lenova pc.
with Serv. Pack 1, I think.

A:[SOLVED] File ext. all changed to Adobe.

Hi, click on the attached .zip file it will return a Default_exe.reg file, double click on this file and agree to add to registry. Restart computer, let us know how you get on.

7exe (5).zip

7 more replies
Answer Match 42.84%

Got some weird stuff going on, zip files in system.ini shell, date modified ona bunch of old downloads is now 9-11-01 all at 6:37 pm. Now there are several program files with dates changed to 911 too, printmaster, notepad.exe ect.
Have run McAfee and Housecall, no virus' found.
Getting a self extractor header corrupt message at boot, because of the zip file in .ini Ran CIH_kill with no results. Also had one instance of the fleeing icons on the desktop like what Berhle described earlier. Any ideas, am on my way to get Norton 2002. Thanks DC

A:File modified dates changed to 9-11-01

7 more replies
Answer Match 42.84%

Dumb mistake.
I was trying to remove the virus Trojan.Zekos.Patched
I booted into safe mode with networking
went to the file, changed the name from rpcss.dll to rpcss.dll.bad
the computer died.before I had a chance to put the new copy of the file on the computer. Now my computer WILL NOT boot. I get to the option screen for Safe mode/ Safe Mode with Networking/ Safe Mode with command Prompts/ Normal Mode
I have tried all boot options. After I select and option it goes to a black screen with a mouse cursor. I can't get anything to come up to correct the file. 
Does anyone with more computer knowledge then myself know how I can fix this? PLEASE, and thank you ahead of the time.

A:Need Help! Deleted/ changed file name rpcss.dll

If you have the file and just want to replace it, you can do it by booting up a small linux distro like Puppy and copying from a USB flash drive to the Windows computer. Download Puppy 5.2.8 (middle of page) and burn the iso file. If you are using WIndows 7, just double click the iso file or use a burning program like Imgburn.
Once you boot up Puppy, you will see your hard drive in the lower left of the Desktop. Clicking it once will mount the drive ( a green dot will show next to the drive) and open the File Manager. Attach the USB flash drive. A USB icon will appear next you your hard drive or CD drive. Click once and another File manager Window will open. Browse the File Manager Window of the hard drive to the location of rpcss.dll (C:\WINDOWS\system32). Drag rpcss.dll from the USB flash drive to C:\WINDOWS\system32. A dialog box will appear asking if you want to copy or move the file, select copy. Right click the USB icon on the desktop and select Unmount. Exit out of Puppy and reboot the computer.
And Welcome

7 more replies
Answer Match 42.84%

Hello I have a pc that had the spyaxe program on it which I think I have removed but not quite sure as my host file is being taken over automatically. I have run spybot/adaware/ewido in normal mode and in safe mode and cleaned everything they have found. Obviously something is being missed somewhere. I am currently running Panda active scan. here is my HJT log

Also the host file is set to read only

Logfile of HijackThis v1.99.1
Scan saved at 2:52:43 PM, on 11/15/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe
C:\Program Files\RealVNC\WinVNC\WinVNC.exe
C:\PROGRA~1\Compaq\COMPAQ~1\c... Read more

A:Host file is being changed automagically

Since you're running Panda Active scan already, please post that log when done, along with the results from Ewido's last run, so we can see what is/was there.

Also, have you edited out the domain name in the O17 entries? The CLSIDs are unknowns, and the lack of any IP addy or domain name is suspicious.

You seem to know a thing or you probably know that some trojans will overwrite a hosts file. Until it is IDd and removed, simply putting a new one in place will not work. There's nothing like that showing in the HJT log.....

Do you use a custom hosts file? Or one from We use this one:
Extract the file & overwrite the existing copy located at C:\WINDOWS\SYSTEM32\DRIVERS\ETC\host

Once these questions are answered and we have the Panda and Ewido logs, we can go to work.

13 more replies
Answer Match 42.84%

for some reason the names of a bunch of my music files were changed to "." and now i can't use or delete them or change the names. every time i try to do anything with them i get a "can not find the specified file path" type error.

i would like, if possible, to recover the files somehow but at least be able to delete them.

any ideas why this is happening? never happened before the last few days. i'm fairly certain that it is not due to a virus or malware. i have run a bunch of checks and still nothing.

thanks in advance.

A:file names changed, can't delete or use

i just noticed that they also say that the last date they were modified was on august 1st 1980. considering that i was born in 1981 i find this to be very unlikely.

2 more replies
Answer Match 42.84%

A slue of icons have all changed to one program - changing them back does nothing (it just changes them all to the same icon. I have looked at program defaults and even removed updates still nothing seems to correct the issue. The windows start button does the same as well - all of the programs listed there have the same icon.
When I click properties they all seem to all say: LNK File (.lnk)
How do I restore - I tried a system restore, but it will only go back to today nothing farther in the past.

More replies
Answer Match 42.84%

Hi everyone. I'm new to BC. Hope someone here can help me with my problem.Yesterday every single icon on my desktop, Task Bar, Start-Menu, and even in the extended menus have ALL changed to the iTunes logo/icon. Every. Single. One. If I try to open something-- whether it's a document, inserted CD, Internet Explorer, etc. --iTunes opens instead. I've right-clicked on every shortcut I have on my desktop and Task-Bar and I've viewed the Properties of each consecutively, and they all say that their File Type is iTunes (with the suffix ".lnk" at the end.) Now, I CAN open the programs labeled as iTunes, but I have to go around the direct short-cuts and main menus; opening with a right-click is what I've had to do from the computer sub-menu of the Start Menu.The only "different" thing that I've done recently is tweaking the Auto Play options in the Control Panel (I wanted to watch a movie, and the default program was annoying.) But even after I reset them all back to Default, the icon problem and File Type issues have remained. Does anyone have an idea why this is happening? (I own a new Acer laptop running on Windows 7, if that helps with anything.)All suggestions will be much obliged. Edit: Moved topic from Introductions to the more appropriate forum. ~ Animal

A:All icons and "file types" have changed. Anyone know why?

Sorry, guys-- I shouldn't have posted the question in this forum.

5 more replies
Answer Match 42.84%

Hi guys.
I was having a blonde moment and changed the default program for my dowloads.lnk folder to adobe reader and now most of my programs think they are adobe reader. Is there any way I can change the default settings without going into the registry editor as this is my school laptop and it won't allow me to use it. Any help would be appreciated.

A:Changed default program on .lnk file, how do I fix it?

Hello Madelyn, and welcome to Seven Forums.

You could download and merge the .reg file for the listed lnk option in the tutorial below to restore the default associations for all shortcuts.

Default File Type Associations - Restore

Hope this helps,

1 more replies
Answer Match 42.84%

I was asked to help a friend with an infected computer. It was slow, anti malware programs would not run even in safe mode, Google searches were re directed, regedit would not run, etc etc. The owner needed it up and running ASAP so I suggested a fresh install. I tried to save the personal files and found that all the .jpg, .doc, .pdf and .zip files had the extra extension .encrypt and would not open. Only files with .gif and .tif were not affected.

I did a fresh install of XP Home but could only save .gif and .tif files that were not changed.

I have been searching and posting all over the web to no avail to find out how to unencrypt files like this.

If it happened once chances are it will happen again and I would like to find out if this was caused by an infection and what to do about it.

Any help will be greatly appreciated.

A:File extension changed by virus?

Was the infection, by chance, Filefix.exe?

3 more replies
Answer Match 42.84%

I changed my .srt file, my subtitles file to be opened by default with notepad when it was an unknown, how do i change it back to unknown?

More replies
Answer Match 42.84%

well heres the problem I go to download something from the internet and it automatically changes the file format of the download to .efw, I can change the file format back to .exe and sometimes it works but other times it doesn't, what I want to know is can I stop this from happening? and how?
I'm on CA anti-virus suite 2007, heres a screenshot,

any help will be greatly appreciated, this is my last resort, not even my anti-virus support team helped me out with this problem,

A:File type changed in downloads to .efw?

Hello and welcome to TSF

CA antivirus does this to protect your computer if CA thinks it is a virus:

3 more replies
Answer Match 42.84%

Hello Friends
My computer recently got a strange virus
Change the extension of all files (Word, Excel, Photoshop, etc.)

File extensions such as:

Note: Only files with uppercase extensions

Please help me because I have lost important files <email address removed>

Even after changing the file extension, the file is corrupted and can not be opened

A:The virus has changed the file extension.


Hi and welcome to TSF.

Please note that this is under the supervision of an expert analyst.

Please read NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help and post/attach the three logs (dds.txt, attach.txt and gmer.txt) mentioned. These logs will give me a place to start and give you back a better working computer. If any problems completing, continue with next log and let me know what happened in your next post.

Please Read! "Who is Helping you?"

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools (near top), then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Thanks. I can begin working on removing your malware when you submit those logs.

Please be patient with me during this time.

2 more replies
Answer Match 42.84%

Dear Tech Support Guy,

1. I have all my pictures in an external hard drive

2. About a week ago I deleted some software that I didn't use including picassa, mionet etc.

3. After deleting this software some of my directories changed their name to characters like ]%&#9561;s.j

4. Not only I can't open the files but I can't delete them. I tried deleting them with explorer and with MS Dos and didn't work. When I try to delete them with explorer I get the following message:

The file name you specified is not valid or too long.

5. I have some back up of this files so I just want them removed from my H drive.

6 a) How can I delete this file

b) What cause this problem so I don't do it again.

Thank you,

Really worried

A:File name changed to corrupted characters

Welcome to TSG, Reallyworried.

If you are simply trying to remove the files/folders, copy off the data that you need. Format the drive, then copy your data back onto the drive. It might be overkill to do this just to remove a few files/folders, but it would probably be the easist.

1 more replies
Answer Match 42.84%

A similar problem was posted but not replied a few weeks back in win95/98/me. Now I faced the same problem.
Check disk ran on booting a couple of days back and said that there was inconsistency in one of my drives, a drive on external usb disk. It went on to check it and without asking me changed a few folders into files of 32kb. How can I retrieve them back?
I used some data recovery softwares, but was partially successful. Is there a good solution.
Thanks in advance.

A:Folder changed to file 32k by chkdsk

I use a program called GetDataBack for everything to do with retrieving files from dodgy partitions. I'm not sure it would work in your scenario, it really depends on what it has done to the folders.

2 more replies
Answer Match 42.84%

I am having some problems after changing my laptop's name. I changed it under System in the Control Panel. The only folder in it is the users folder. My user name is incorrect & I have several NTUSER.DAT files under my user name. Where are all of my files under my computer name? Everything is still under my C: drive. I'm having a problem using the Homegroup now too. Anyone that can tell me how to fix this & my user name. I tried changing it with netplwiz but it didn't change it under users folder.

This is my laptop info:
Toshiba Satellite L775D PSK4OU-OOGOOP
Windows 10 Home x64 Version 1511 Build 10586.71 IE Version 11.63.10586.0CO
Chrome Version 48.0.2564.103 m
Boot Mode: Legacy BIOS in UEFI
Secure boot not supported
Board: Pegatron Corporation TKBSS 1.50
Bus Clock: 100 MHz
UEFI: American Megatrends Inc. 1.50 10/18/2011
1.40 Gigahertz AMD A6-34OOM APU with Radeon HD graphics
Graphics Chipset:AMD Radeon(TM) HD 6520G
512 KB primary memory cache
4096 secondary memory cache
64=bit ready
BIOS Version:
BIOS Part Number:BR40547.bin
BIOS Date:04/07/2011
HGST 1Tb hard drive, 7200 RPM, Advanced Format
P/N H2T100032725 SATA 6 0Gb/s FW: 350
HL-DT=ST BDDVDRW CT31F Optical Drive
PCI to USB host controller 3x
Standard open HCD USB host Controller 3x

ATA Channel 0
ATA Channel 1
Standard du... Read more

More replies
Answer Match 42.84%

Have an e-machine - that runs (or ran) Wndows XP. Virus has changed the spelling of all the start up files. Have tried system restore and even destructive system restore using the disc that came with the computer, but it won't fix the computer enough to even get in to safe mode. Can get into boot menu (F-10) and system restore (F-11) where all the words are garbled. Any ideas??? Thank you,

A:Virus Changed All File Names

Hi, I am by no means an expert, as I have issues in my own XP that I am here to get help with, but I would say you will likely not change them (the files) back, so you might want to save whatever you can in the way of data.
I would wait for others to respond before trying this, but I would probably load the hard drive into another computer, and access it from there to attempt to save anything such as pictures or letters, which should be possible if the file extensions (the three letters after the dot) are still the same as they should be.
Then, I would place the drive back into the original PC, then full format and re-install the XP.
If you have no important data to save, just wipe it all clean and start again right away.
To do this, you will need a copy of the actual XP operating system installation disc that matches your operating system, (Not what they call a 'restore disc') and you might have to contact Microsoft with the old product key that should be on the PC case to get it validated.
The other way is to do what is called a 'repair install' which is writing the XP over the top of the existing XP without formatting.
You might try getting more info on that, then you might be able to save more data. After which you can format and reinstall XP to ensure no infections are still there.
The whole thing (course of action) will depend on how much data you need to save, if any.
Above all, don't rush, wait until you get a few responses.

6 more replies
Answer Match 42.84%

My computer infected and change all my xls file to xls.micro. File can open but content cannot be read.
Is there any way to fixed ? Thanks.


A:My Excel file xls changed to xls.micro

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===This is the infection you are dealing withn.TeslaCrypt 3.0 Released with Modified Algorithm and .XXX, .TTT, and .MICRO File Extensions is nothing we can do to restore your files. can help remove any traces of the infection but no restore is possible unless you have good back up of your files or an imange of your computer.If you wish me to clean what I can please run this tool and post the logs. I will review them.Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.How to attach a file to your reply:In the Reply section in the bottom of the topic Click the "more reply Options" button.Attach the file.Select the "Choose a ... Read more

2 more replies
Answer Match 42.84%

My Excel files have been change to "ZEPTO file". I've got no idea as to why or how to access the information. It seems all the files in Microsoft word are the same also. Any Ideas.

A:File Ext changed in microsoft Office

I suspect you have been hit by ransomware!!

2 more replies
Answer Match 42.84%

I was trying to look into an Outlook 2007 .pst file with Notepad in Windows 7 HP. Guess what... I didn't uncheck "Always use this program..."
I don't know what to re-associate it with.

Any help would be appreciated.


A:Accidentally changed a .pst file association

right click the file again and choose "open with" . relate it back to outlook and check the box that says always open with.

3 more replies
Answer Match 42.84%

Hello, we use a small network with all the same username on each computer. I want to be able to look at a saved file and find out who made the change or who created the file.

Is there any possible way to do this based on the computer name or ip address of the computer who created/modified a file?

This is a somewhat rare need so I am fine with going through log files to find out.


A:Can I detect which computer changed a file?

AFAIK, the only way you could determine this is by cross referencing the MACE timestamps with timestamps in Windows logs (uptime/logon) and router logs (MAC addresses and hostnames). If all your machines are generally always on and connected to the network, you may be out of luck.

The MACE timestamps are viewable through the properties menu, they are just the Modified, Accessed, and Created entries. This will tell you the time of creation and time of last modification.

After that you should collect the info on each machine's computer name/hostname (Right-click Computer > Properties > Advanced) and MAC addresss (command prompt: ipconfig /all).

The router will tell you when each computer requested an IP (if you're on a DHCP network) and this will tell you when each machine was online. If your network is not DHCP (the IP addresses are static) then you can record each machine's IP as well (Network and Sharing > Change Adapter Settings > Right-click adapter > Properties > IPv4 > Properties). If this dialog has Obtain IP address Automatically selected, then DHCP is enabled.

However, if your network is not internet-enabled, it may not have a router, and while DCHP may be enabled on your computers, your machines may obtain their addresses using APIPA. In this case I do not know that there will be any Windows event logs with this information.

I do not think there are any logs created upon file access, creation, or modification either, as these are noted in t... Read more

2 more replies
Answer Match 42.84%

Hello Friends
My computer recently got a strange virus
Change the extension of all files (Word, Excel, Photoshop, etc.)

File extensions such as:

Note: Only files with uppercase extensions

Please help me because I have lost important files

Even after changing the file extension, the file is corrupted and can not be opened

A:The virus has changed the file extension

Probably, the best hope is: any prior to this unfortunate occurance backup. If no backup/restore, then you will have to remake the files. It is remotely possible that a System Restore Point might bring back some but not all your files.

7 more replies
Answer Match 42.84%

I accidentally (don't ask me how!) changed a file type when I right clicked on a .tps file. Now instead of saying TPS file in the Type column when I'm looking in the directory, it lists a program file installed on my computer. Is there a way to get these .tps files working again? I tried looking in my backups of the files but since the "always use this program to open these files" box was checked, it also changed the type in the backups. Thanks in advance.

A:accidentally changed file type

Here's a simple solution.
right click on the .tps file and click on properties
go to where it says open with and next to it, you should see change
click on it and choose the program that originally opens .tps

1 more replies
Answer Match 42.84%

Hi guy, I got some problem with my excel format function is only working on certain cells and I cannot see any difference in the way the cells that won't change to the desired format.
I am selecting 4th march 2010 but it refuses to change certain cells they remain 04/03/10 and some changed to MM/DD/YY which is give me the wrong detail. Do you have any solution for this ?Could you help me to slove it plz. Thank you very much.

A:Cant changed the date in excel file.

16 more replies
Answer Match 42.84%

one of our users recently had all his files changed to a strange format. For example if a word file is named "Committee.DOCX" then it would change to "Committee.DOCX.isycjje". All the MS files as well as pdf files are changed to that extension of " .isycjje". I tried applying several anti-malware programs as well as mounting the drive to linux with no avail to retrieve sucess.
Any one faced with this issue recently , please advise suggestions.
Thank you

A:Virus changed all my file extensions

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Answer Match 42.84%

I come in to work today and in one network share folder, all of the MS Office files,(word, excel) file extensions have changed to .dcxmxub So the new files would be file.doc.dcxmxub I attempted to changed the extension back to .doc and I was able to, but when word attempts to open the file I get a compatibility window and once windows default is selected the file opens to misc. characters and Chinese letters. I googled this extension and got nothing.Any suggestions?

A:Ms Office file extensions changed? Need HELP!

Are you able to restore from a backup?

9 more replies
Answer Match 42.84%

Today I opened my music folder to find that the extensions are now part of the file names. It doesn't matter folder view or arrange icons by - the extension is still part of the file name.
Does anyone know why that is?

A:Solved: File Names Changed

In the folder, click tools, folder options, and on the view tab make sure 'hide file extensions for known file types' box is checked.

2 more replies
Answer Match 42.84%

Hello FriendsMy computer recently got a strange virusChange the extension of all files (Word, Excel, Photoshop, etc.) File extensions such as:10.93.DOCX.kbuibxdamar.XLSX.kbuibxdkhorasan.XLSM.kbuibxd Note: Only files with uppercase extensions Please help me because I have lost important files (email address deleted) Even after changing the file extension, the file is corrupted and can not be opened

A:virus has changed the file extension.

You also posted your issue today here should only seek malware removal help at one forum.We ask that you select one forum from those where you sought help and ask the others to close your topics.Although we understand you wish your problems to be addressed as soon as possible, there are reasons why multi-posting causes problems.By Multi Posting you are utilizing the time of two (or more) trained helpers. Helpers take a long time to train. They need a great deal of expertise and knowledge to be able to safely remove Malware from your computer and because of this are in short supply. We wish to use them to help the maximum number of people, and if they are researching the log of someone who is already being helped, then their time and effort is going to waste.Understandably this causes a certain amount of bad feeling and frustrationFrom the helper who has needlessly spent time researching your log and compiling and posting instructions.From others who have to wait longer for their problems to be addressed.Advice from two separate helpers can cause problems.A helper at one place has no idea what a helper somewhere else is doing. Different helpers may use different methods to combat your infection. While each one is safe to use, problems can arise if you follow the advice of both together. Some of the tools used are very powerful and have to be used in a specific way and in some c... Read more

3 more replies
Answer Match 42.84%


While installing Comodo Firewall/Geek Buddy, I had to reboot. I lost some file ext. assoc., also lost some files comepletely.

Everytime I open IE or click on a link, an installation window for DAO.msi pops up. I've searched my computer for it & also deleted files with Recuva...nothing.
I've run sfc /scannow no avail.
Also ran CHKDSK in DOS & Windows Defrag.

I believe the missing DAO.msi file may be from a microsoft plus! disk that a friend installed about a year ago & I don't have the disk.
Please Help...

A:File ext. Association lost/changed

1 more replies
Answer Match 42.84%

My system is Windows xp dell dimension 512 mb cpu 266ghz

My File extions changed from exe to lnk....I have tryed and tryed....nothing is working, I've tryed the:



regedit -s"C:\windows\regedit.exe\linkrestore.reg"

the only thing I can do is use the command prompt in safe mode....I downloaded exefix.reg and copyed to a cd,

while trying to import the file, this is the message

X Cannot import D:\exefix.reg: not all data was successfully written to the registry some keys are open by system or other processes
I have no Ideal what else to do , maybe someone can help

Thank you

A:Solved: File extentions changed from EXE to LNK

9 more replies
Answer Match 42.84%

can anyone tell me how do i get it back to Default
because i changed the default opening to i.e and now its not acting right
how to restore to default file extension?

thanks in Advance

A:I accidentally changed all my rar File extensions..

system restore?!

9 more replies
Answer Match 42.84%

Today I was on my laptop and when I closed my internet explorer I noticed a folder had changed to the icon that is usually used for unknown programs. When I looked I noticed all the folders in my computer now look like this and when you double click it goes to search instead of open. So now I have to right click and choose explore. I went to folder options to see if the icon had been changed but it was still set as the folder. I restarted my computer, ran a mcafee virus scan (nothing detected), ran microsoft anti spyware (nothing detected), restored my computer to an earlier point and it is still is not working correctly. Does anyone know why?? Thanks.

I have a Gateway M520 Laptop, Pentium 4 (2.8 GHz), 512 mb ram, Windows XP Home SP2

A:File Folder Icons Changed

NOTE: This is a registry edit. If you're not familiar with working in the registry, DO NOT ATTEMPT.Improper changes to the registry could render your computer inoperable.Remember to backup the registry before making any changes.Instructions, on how to do that, can be found here:Backing up the Registrykellys-korner#18, the one on the RightTo use the Regedits:Save the REG File to your hard disk.Double click it and answer yes to the import prompt.REG files can be viewed in Notepad by right clicking on the file and selecting Edit.

7 more replies