Asked By
fchloe
0 points
N/A
Posted on - 02/15/2012
Hi
 I am using Windows XP Professional with Microsoft Works 6.0. Two times I have seen one of my databases (Saved as "name.wdb") disappeared and renamed WK38XXXX and WK381298 "file" as an alternative as a works database (WDB).
When I am going to "open with" Microsoft Works it opens and lets me to save again as a WDB file. But I am afraid that I am heading for mislay my database. I get no warning or notice about this occurrence.
Need to know about its reason and how to avoid it?
Thanks in advance.
Problem with disappearance and renaming of database
Dear Fchole
Â
I guess your folder is hidden, u can access it by typing its full path in the explorer address bar. Your infected by a malware and this file should be deleted. your folder is still exists on your USB but with a system file attribute. U can remove this attribute by following the below steps
Â
1. Open a command terminal
Â
2. Go to Your USB drive
Â
3. Type in the prompt: attrib –s –h –r *.* /s /d, this removes the system read only and hidden attributes set to all the files, folders and subdirectories.
Â
4. Open windows explorer and type the USB drive letter "DO NOT double click the drive yet", u should see an autorun.inf file in the root, open it using notepad and check the files written in it. U'll find files with extension .exe, .cmd or .bat, those files run automatically when u double click the drive.
Â
5. Delete these files and the autorun.inf too
Â
6. You should do all the previous steps in all your computer drives and DO NOT try with the c: drive
Â
7. To delete infections in c:, try the following:
Â
a. Open a command terminal
Â
b. attrib –s –h –r autorun.inf (remove the file attributes)
Â
c. attrib –s –h –r <filename>.exe (remove attributes to the malware files mentioned in the autorun.inf), do this step to all the file names mentioned in the autorun.inf
Â
d. Open the c: drive in windows explorer and delete the autorun.inf file and the other malware files.
Â
e. Close all windows and restart pc
Â
f. Right click any drive, if u see the "Open" option in the default option in bold, then Your computer is not infected anymore, if u see the "Autoplay" option in the default, then u r still infected.
Â
Hope this may help you.
Â
Best of luck
