We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
2,842 Tutorials

How to remove an autorun worm

What to do when Word doc extensions are changed to .exe

If your Word documents suddenly have the file extention .exe, rather than .doc, and other files have been converted to link files, your PC has probably been infected by an autorun worm. Our Helproom expert explains what you should do.

QUESTION For several years I've been using a portable hard drive to store valuable data, but I recently picked up what I believe to be a malware infection. Microsoft Word documents now feature the file extension .exe rather than .doc, while other files and directories have been converted to link files. Please help me reclaim my files. Adeniyi Afonja

HELPROOM ANSWER This looks like the work of an autorun worm. Such malware is designed to infect shared files on a network, or those stored on removable devices such as your USB drive.

An up-to-date antivirus should be able to detect and remove this worm. Launch your security program, install any updates, then set it to perform a full system scan.

Autorun worms use Microsoft Word files as a vehicle on which to propagate themselves, rather than destroying the information stored within. By changing the file extension to .exe, innocent users wanting to open the Word document are tricked into launching the malicious code attached.

Because the worm doesn't tamper with the data stored within the Word document, your antivirus software should be able to clean the infected files and return them to their original state for editing.

McAfee's antivirus has reportedly recovered files damaged in this way; many other programs will also be up to the job.

See all How to articles

Get free tech support in the Helproom Forum

IDG UK Sites

iPhone 6 release date, price, specs and new features: Convincing leaked photos show iPhone 6

IDG UK Sites

Gateway to your kingdom: why everybody should check and update their broadband router

IDG UK Sites

Netflix whips up 3D VR viewing room for Oculus Rift during company hack day

IDG UK Sites

Best Mac? Complete Apple Mac buyers guide for 2014