Folders replaced with .TMP files ?

nesh96 · 20 Jun 2013

hey,
my os in windows 7 professional x32 bit.

I recently connected my 500gb seagate external hard drive and all i can see is a RECYCLER folder and several files with extension .TMP (eg :- trz9AC9). Each of these is of 2kb.
the interesting thing about this problem is that when i check the size occupied on the disk i find that 321 gb (as it was before).
WHAT I KNOW so far is that there is a virus and my files aren't deleted and can be restored.
I tried scanning for viruses with avast! internet security but it found none.
Please suggest me a solution on how to recover the files.

Jacee · 20 Jun 2013

You could try Recuva - Undelete, Unerase, File and Disk Recovery - Free Download
Uncheck any bundled apps that may come along with it.

cottonball · 20 Jun 2013

nesh96,

Please download WinRAR:
http://www.rarlab.com/download.htm
Select the 32-bit version.
Save to the Desktop.
(This download is a trial version of the WinRAR archiver for use during a test period of 40 days!)

Double-click the downloaded program to install...
At the WinRAR Setup, click: OK
On the last prompt, feel free to check any of the tabs, and, when finished, press: Done
Close out of WinRAR.

Now please remove all external hard disks or pen-drives using its appropriate method.

Restart the computer.

Plug-in the problem USB drive while pressing the left Shift key so that autorun is disabled.

Go to Start > All Programs, and look for the WinRAR folder
Open the folder, and double-click the WinRAR icon.

When the WinRAR console opens, navigate to the USB drive by using the down arrow on the far right of the path area.

All the files on the USB drive, including hidden files, show in WinRAR.

Search for the file autorun.inf and press View to open it with Notepad.

Please copy/paste and post the contents of the Notepad file in your reply.

If Access is denied...

Please plug in the USB drive and restart the computer in Safe Mode with Command Prompt:
As the computer starts tap the F8 key on your keyboard repeatedly until you are presented with the Windows 7 Advanced Boot Options menu.
Using the arrow keys, select: Safe Mode with Command Prompt
Press the Enter key on the keyboard, and let the computer boot.

At the command prompt, type in the following commands (contained inside the code box), one at a time, and press Enter after each:
(Note... X: = needs to be your drive's name. Replace X with the actual letter of the drive.)

Code:

X: 
attrib -s -h -a 
attrib -r -s -h autorun.inf
shutdown /r

Before shutting down, a prompt shows:
You are about to be logged off.
Windows will shut down in less than one minute.

When the computer restarts again normally, open WinRAR and browse for the USB drive using WinRAR’s explorer.

After locating the drive, open it in WinRAR to show all the files, including those that are hidden.

Search for the file Autorun.inf, open it with Notepad, name it ARfile, and save to the Desktop.

Please post the content of the ARfile in your reply.

cottonball · 21 Jun 2013

Also, can you use the Snipping tool to post an image of the RECYCLER folder and the files with extension .tmp

How to Use the Snipping Tool in Vista and Windows 7
http://www.vistax64.com/tutorials/14...ool-vista.html

How to Upload and Post a Screenshot and File in Seven Forums
https://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html