FRIHOSTFORUMSFAQTOSBLOGSDIRECTORY
You are invited to Log in or Register a Frihost Account!

Recycler.exe - virus

 


ainieas
Hey does anyone know about this virus/trojan Recycler.exe. It affects removable drives. Right now it has become a nightmare for me tryig to get rid of it. AVG Anti-Virus doesn't detect it even though I can see it is scanning the virus files. Trend Micro Internet security shows everything safe even when I delete the folder and it regenerates while Trend Micro is running. Kaspersky Internet Security detects that the files are infectected but cannot clean it up. I've the latest updates of the said anti-viruses yet I'm going around in circles. Any help would be much appreciated.
brokenadvice
Boot your computer in safe mode by pressing F8 during startup, and re run the AVG scan. It should be able to detect the files in safe mode. You will also have to delete the autorun files off the flash drive. I suggetst you find a friend who has a mac to delete if for you. There may be an easier way, but this way should work.
aningbo
such a thing will keep playing around. one has to be careful with removable drives and get yourself a good anti virus.
ainieas
I've tried every anti virus i could think of. No use. Of course I'm using the trial versions. Don't know if that might have something to do with that. I even tried to remove it manually, no avail!
aningbo
wats ur actual problem? why dont you manually delete the fileand also the autorun.inf from your pendrive. i guess there must be a service running under the name wscript.exe too

specify more details plz.
jembo
at least, you'd better turn off your autorun first..
or like they said before, run your windows in safe mode first, then you scan with your antivirus
Diablosblizz
I use NOD32, and I was able to remove various viruses while they were running. It's pretty good!
ainieas
aningbo wrote:
wats ur actual problem? why dont you manually delete the fileand also the autorun.inf from your pendrive. i guess there must be a service running under the name wscript.exe too

specify more details plz.


I did try to manually delete the files. My anti-virus does scan the autorun.inf file but it just doesn't delete it. Even in safe mode its not working. My main problem is everytime i delete the file it regenerates. I can't find the auto-run.inf file to delete it manually. Let me try and disable auto-run and see if I can get that to lessen my headache.
frih
if all the steps have been failed, if you dont have any important data in your usb , then just format your device through command prompt without opening that device.
ezekiel_rage
ainieas wrote:
Hey does anyone know about this virus/trojan Recycler.exe. It affects removable drives. Right now it has become a nightmare for me tryig to get rid of it. AVG Anti-Virus doesn't detect it even though I can see it is scanning the virus files. Trend Micro Internet security shows everything safe even when I delete the folder and it regenerates while Trend Micro is running. Kaspersky Internet Security detects that the files are infectected but cannot clean it up. I've the latest updates of the said anti-viruses yet I'm going around in circles. Any help would be much appreciated.


The reason antivirus suites dont see the virus is because the file attribute its files were set to system/superhidden.

So even if you set your folder view to Show hidden files, it would still not show up.

You have to enable showsuperhidden key in the registry then do a full system scan as that virus/trojan put files iside the windows directory and modify keys in the registry. Particularly the ShowSuperHidden key.

To modify that key;

Click "run" at the start menu, type regedit

the Registry editor will open.

Go to HKEY_CurrentUser\Software\Microsoft\Windows\Explorer\Advanced

on the left side look for the key ShowSuperHidden and set it to 0 (ZERO).

Close the Registry editor then on Folder options' View tab select Show hidden files. You may havee to reboot for the changes to take effect. then Do a full system scan, with your removable drives plugged in.

AVG should see it and clean it.


Hope this helps
Reply to topic    Frihost Forum Index -> Computers -> Computer Problems and Support

FRIHOST HOME | FAQ | TOS | ABOUT US | CONTACT US | SITE MAP
© 2005-2007 Frihost, forums powered by phpBB.