Need expert help with access denied files

[rdoty]

I'll make this quick. Running Windows 7 Professional, 500 GB HD maxed out because of Trojan that somehow slipped by Bitdefender. I used HouseCall which found the malware and deleted it but too late. All my icons are gone and all my folders now say "empty folder", however properties shows that all the data is there but inaccessible. I ran attrib through cmd and discovered that ALL files are now labeled "access denied". I have NO access to files except through file explorer (cmd). Since all my files are apparently intact - but inaccessible - I need to find a way to access them. I need help with two issues;

1) Restoring all files by deleting the access-denied prefix. Q: Can this be done through each directory or is there some way to "wholesale" delete the prefix through file explorer? Since I can see the folders when I click on C: is there some way to delete the empty folder designation?

2) I need to find the "super-hidden" folder or file that has stuffed about 180 GB onto my C: drive.

I do have access to internet but no email on this computer but I can access email through my laptop.
If anybody out there can help I'd be eternally grateful.

 

[MSClin]

If I was you, I would have loaded Linux installation and then moved the data, reinstalled Windows, and then set-up everything as how it was. It sounds extreme, but it seems like the best approach to avoid headaches in the long run in your situation.

 

[Snick]

Do you have a restore point or backup to external hard drive?
You could use Windows PE from CD/DVD or USB to access your drive. Can't say that you will be able to access them though. What was the name of the infection?
Here's a link to my Drive account with SIW2's AOMEI PE build.
Drive Link
You can burn the ISO to CD/DVD with ImgBurn
Or
To USB with Rufus 3.1 or Rufus 3.1 Portable
Access Boot Menu and choose the media you burned the ISO too.
Nic

 

[samuria]

What exactly are the permission on the folders you can't access who owns them?

 

[rdoty]

Here's where I am so far and the issues I've run into.

1) I have internet access (obviously)
2) I can open most or all programs such as Word, Excel, etc and I can pull up individual files and modify them.
3) Everything continues to run at a snails pace.
4) I've been running a Bitdefender Full System Scan, now going on 88 hours. It's currently at 97% and I intend to run until it's done. Not sure what it means by "unresolved" and it's found 389 Password Protected items which seems incredibly high to me.
5) Show hidden files and folders is set and Search works.
6) Icons and folders are "transparent" which I think means they are hidden files
7) I can't load any programs that require the Windows Installer because it's now "access denied" and I can't reload my email software for the same reason.
8) I'm hoping to copy all my important files - docs, graphics, photos, music etc. and then re-install Windows 7 and the programs I use most

So here's the dilemma for which I'm looking for help...

The Trojan added an attribute to most if not all files and folders - "access denied".

Apparently nobody knows of a way to delete all the access denied attributes in one pass. If they do I'd like to hear it. I know windows "purists" would caution that there are certain files that need that attribute but, hey, I'm desperate.

I'm thinking there is a way I can eliminate the attribute individually but I'm not sure of the dos commands. If somebody can help here at least I can begin work on my files.

One big question - even though I can open files in my programs, and presumably copy them or save them under another name to an external HD, won't they still have the "access denied" attribute attached? Worst case scenario is that I copy all the text in my Word docs and paste into a new doc (holy crap, hundreds of files!!!) but I can't do that in Excel or some graphics programs.

Looking for expert input. Thanks in advance.

 

[rdoty]

Also determined that "Encrypt contents to secure data" IS NOT checked. So if I go through all my files and under Properties I uncheck "hidden", hit apply and ok will the file now be missing the access denied attribute?