My zipped folders have all turned into mp3 nfiles

  • Thread starter Thread starter YaBoy Ruuusssooo
  • Start date Start date
Y

YaBoy Ruuusssooo

I have a Dell Inspiron with Windows Vista. I logged in one day and found that
all the zipped folders on my computer had turned into mp3 files. This
includes all that I had created to store and send files via email and all
that I received via email. I know that my son was using my computer and had
accessed my Itunes. I have tried everything, including system restore, but
nothing has worked. Can anyone tell me what happened and how I might
re-convert these files to zipped folders? Thank you.
 
You have a virus. I would try the download from the Win Update site for the
"Malicious Software Removal Tool". You can also try Windows Defender, on
Start.
 
YaBoy said:
I have a Dell Inspiron with Windows Vista. I logged in one day and
found that all the zipped folders on my computer had turned into mp3
files. This includes all that I had created to store and send files
via email and all that I received via email. I know that my son was
using my computer and had accessed my Itunes. I have tried
everything, including system restore, but nothing has worked. Can
anyone tell me what happened and how I might re-convert these files
to zipped folders? Thank you.

I don't understand your observation.

Did "BIRTHDAY.ZIP" simply have its name changed to "BIRTHDAY.MP3"

Are your MP3 files now in a ZIP file?

What is a "zipped folder" anyway?

Can you give an example of what you had, what you have now, and what you
want?
 
YaBoy said:
I have a Dell Inspiron with Windows Vista. I logged in one day and found
that all the zipped folders on my computer had turned into mp3 files. This
includes all that I had created to store and send files via email and all
that I received via email. I know that my son was using my computer and
had accessed my Itunes. I have tried everything, including system restore,
but nothing has worked. Can anyone tell me what happened and how I might
re-convert these files to zipped folders? Thank you.

Your computer is infected. It is unlikely that you will be able to retrieve
data from the changed files but you can see what happens after your
computer is clean. I would opt for restoring those files from a recent
backup instead.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech;
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.

Malke
 
YaBoy Ruuusssooo said:
I have a Dell Inspiron with Windows Vista. I logged in one day and found
that
all the zipped folders on my computer had turned into mp3 files. This
includes all that I had created to store and send files via email and all
that I received via email. I know that my son was using my computer and
had
accessed my Itunes. I have tried everything, including system restore, but
nothing has worked. Can anyone tell me what happened and how I might
re-convert these files to zipped folders? Thank you.

Have you tried simply changing the file extension back to zip?
 
Mark L. Ferguson said:
You have a virus. I would try the download from the Win Update site for
the "Malicious Software Removal Tool". You can also try Windows Defender,
on Start.

How about naming the virus and citing some reference pages.
 
I tried Windows Defender and the Malicious Software Removal Tool. Neither
detected any problems. What shall I do? I really need some of the files in
those folders.
 
YaBoy said:
I tried Windows Defender and the Malicious Software Removal Tool. Neither
detected any problems. What shall I do? I really need some of the files in
those folders.

What happens when you rename a file to [some-file].zip? You told us that you
"tried everything" but didn't tell us what you tried. I would not rely on
Windows Defender and the MSRT as a definitive answer as to whether your
computer is clean. What are you using for a regular antivirus? Perhaps
questioning your son more closely in a loving fashion (if you can stand to)
will help. These things don't magically happen all by themselves.

Malke
 
If I want to email several documents, speadsheets or power point
presentations to someone, I put them into a compressed zipped folder by
opening one of the documents, clicking on File, Send to, Compressed Zipped
Folder. It creates a compressed zipped folder that I can add Word documents
or Power Points or Excel Spreadsheets to and attach to emails. I also receive
items in zipped folders and keep them in folders on my hard drive. What was
BIRTHDAY.zip is still BIRTHDAY.zip, but the icon is now an Itunes icon and it
will not open. Whe I right click on it and do "open with", it does not give
me an option that will allow me to access the files that were in the folder.
I want to gain access to Word docs, Excel Spreadsheets, Power Points, jpegs
and othe files that I stored in these folders. Thanks.
 
YaBoy Ruuusssooo said:
I tried Windows Defender and the Malicious Software Removal Tool. Neither
detected any problems. What shall I do? I really need some of the files in
those folders.

I'm not trying to be a smart-ass but I have a question. If these files
are so important why didn't you create copies of them and store them on an
external drive or use imaging software to create snapshots of your system?

C.B.
 
Actually the file extension is still.zip. I have tried Right click, Open
with....but there are no option available to allow access to the files. It is
puzzling.
 
I have completed every diagnostic available on the computer. It does not
appear to be a virus.
 
I believe that you are correct. My zip function is broken. I tried your fix.
I copied your text into a note and saved it as zipfix.reg. However, when I
right clicked, I was not given the option "Merge".
Dave-UK said:
YaBoy Ruuusssooo said:
If I want to email several documents, speadsheets or power point
presentations to someone, I put them into a compressed zipped folder by
opening one of the documents, clicking on File, Send to, Compressed Zipped
Folder. It creates a compressed zipped folder that I can add Word documents
or Power Points or Excel Spreadsheets to and attach to emails. I also receive
items in zipped folders and keep them in folders on my hard drive. What was
BIRTHDAY.zip is still BIRTHDAY.zip, but the icon is now an Itunes icon and it
will not open. Whe I right click on it and do "open with", it does not give
me an option that will allow me to access the files that were in the folder.
I want to gain access to Word docs, Excel Spreadsheets, Power Points, jpegs
and othe files that I stored in these folders. Thanks.



It sounds like your zip function is broken.
Copy and paste the following into a blank text document.
Save the document as zipfix.reg , right-click and select 'Merge'.


Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.zip]
"PerceivedType"="compressed"
"Content Type"="application/x-zip-compressed"
@="CompressedFolder"

[HKEY_CLASSES_ROOT\.zip\CompressedFolder]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.zip\UserChoice]

[HKEY_CLASSES_ROOT\.zip\CompressedFolder\ShellNew]
"Data"=hex:50,4b,05,06,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"ItemName"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
00,7a,00,69,00,70,00,66,00,6c,00,64,00,72,00,2e,00,64,00,6c,00,6c,00,2c,00,\
2d,00,31,00,30,00,31,00,39,00,34,00,00,00

[HKEY_CLASSES_ROOT\.zip\OpenWithProgids]
"CompressedFolder"=""

[HKEY_CLASSES_ROOT\.zip\PersistentHandler]
@="{098f2470-bae0-11cd-b579-08002b30bfeb}"

[HKEY_CLASSES_ROOT\CompressedFolder]
@="Compressed (zipped) Folder"
"FriendlyTypeName"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,\
00,6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,\
32,00,5c,00,7a,00,69,00,70,00,66,00,6c,00,64,00,72,00,2e,00,64,00,6c,00,6c,\
00,2c,00,2d,00,31,00,30,00,31,00,39,00,35,00,00,00

[HKEY_CLASSES_ROOT\CompressedFolder\CLSID]
@="{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}"

[HKEY_CLASSES_ROOT\CompressedFolder\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,7a,00,69,00,\
70,00,66,00,6c,00,64,00,72,00,2e,00,64,00,6c,00,6c,00,00,00

[HKEY_CLASSES_ROOT\CompressedFolder\shell]
@="none"

[HKEY_CLASSES_ROOT\CompressedFolder\shell\find]
"SuppressionPolicy"=dword:00000080

[HKEY_CLASSES_ROOT\CompressedFolder\shell\find\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\
65,00,00,00

[HKEY_CLASSES_ROOT\CompressedFolder\shell\find\ddeexec]
@="[FindFolder(\"%l\", %I)]"

[HKEY_CLASSES_ROOT\CompressedFolder\shell\find\ddeexec\application]
@="Folders"

[HKEY_CLASSES_ROOT\CompressedFolder\shell\find\ddeexec\topic]
@="AppProperties"

[HKEY_CLASSES_ROOT\CompressedFolder\shell\Open]

[HKEY_CLASSES_ROOT\CompressedFolder\shell\Open\Command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\
65,00,20,00,2f,00,69,00,64,00,6c,00,69,00,73,00,74,00,2c,00,25,00,49,00,2c,\
00,25,00,4c,00,00,00
"DelegateExecute"="{11dbb47c-a525-400b-9e80-a54615a090c0}"

[HKEY_CLASSES_ROOT\CompressedFolder\ShellEx]

[HKEY_CLASSES_ROOT\CompressedFolder\ShellEx\ContextMenuHandlers]

[HKEY_CLASSES_ROOT\CompressedFolder\ShellEx\ContextMenuHandlers\{b8cdcb65-b1bf-4b42-9428-1dfdb7ee92af}]
@="Compressed (zipped) Folder Menu"

[HKEY_CLASSES_ROOT\CompressedFolder\ShellEx\DropHandler]
@="{ed9d80b9-d157-457b-9192-0e7280313bf0}"

[HKEY_CLASSES_ROOT\CompressedFolder\ShellEx\StorageHandler]
@="{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}"

;
 
I have virtually the same problem, and I know how it happened! I received a
zip file of photo's in Dec/Jan which was fine. Sometime later I was sorting
my photo's and when I opened this file one of the photo's was missing. I
inadvertently tried opening the zip file using Windows Photo Gallery - BIG
mistake! All my zip files changed to Windows Photo Gallery files, i.e.
..zip, but icon was Windows Photo's Gallery. They would not open. I have
also tried everything but could not find a solution. I will now try Dave
UK's solution, and failing that, Ramesh's. Please let us know if they have
helped you. Thanks - JD
 
I have followed Dave UK's instructions and also didn't get "merge"option. I
now have zipfix.reg.doc. Should I re-save without the .doc? Thanks - JD
 
Options given:
Paste, Font..., Paragraph..., Bullets and Numbering, Hyperlink..., Look
Up..., Synonyms, Translate, Select Text with Similar Formatting.
 
Sorry, I have re-done using text document. Now I have options: Undo, Paste,
Select all, Right to left reading order, Show unicode control characters,
Insert unicode control character, Open IME.
 
Back
Top