Results 1 to 7 of 7

Thread: Recycler and System Volume Information-Recycler virus

  1. #1
    anjoy Guest

    Default Recycler and System Volume Information-Recycler virus

    Hi, all my Windows Xp, sp3 computers have RECYCLER and System Volume Information folders in the root drive. This is something new, they have not been there in the past. From what I have read, these can be normal system folders for XP. However, I have found these same folders on my USB drives which leads me to believe I have been infected with the Recycler Virus. Inside the RECYCLER folder is a file named S-1-5-21-684212494-17770114600-391. All my attempts to remove it has failed... it keeps coming back. I have read that disabling the Recycle Bin and System Restore will help in it's removal, but it does not help.

    I am a Zone Alarm user, but Zone Alarm does not detect it. I have tried various virus removal software from many software developers (ie, Norton AVG, Avast, Comodo, GData, and Kaspersky etc.) in an effort to detect and remove this virus with no success.

    In addition, I have tried many of the suggested manual removal techniques suggested on the internet with still no success.... from deleting various files and changes in the registry.

    The question I have is... first is this a truly a virus? Is Zone Alarm aware of this virus/worm/trojan and working on a solution? Is there a fix?

    Any help would be appreciated.

  2. #2
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,473

    Default Re: Recycler and System Volume Information-Recycler virus

    Try this: Malware Clean-up Guidance
    NOTE: the steps below works only if you are on the latest versions of ZA (version 9.1.507 onwards). If you are not, please update.
    Try to perform a full Antivirus/Antispyware scan but in SAFE MODE WITH NETWORKING.

    1. Set ZA Antivirus/antispyware to "Super Scan" under the advanced options of the ZA antivirus/antispyware tab (scan modes);
    2. Reboot in SAFE MODE WITH NETWORKING;
    3. Manual run ZA (ZA firewall will be OFF but Antivirus/Antispyware will be functional);
    4. Run a full ZA AV/AS scan;
    5. Reboot in Normal Mode
    6. Set ZA Antivirus/Antispyware back to default Quick scan

    How to start in SAFE MODE WITH NETWORKING

    If the above fails try to clean your system with:

    A. Download update and scan with MBAM
    WARNING: Some malware will block the download of this software, rename the installer to a random name before saving and running (you can change the .exe into a .com)
    B. Use the superantispyware online cleaning tool --> Here or download, update and scan with superantispyware FREE
    WARNING: Some malware will block the download of this software, rename the installer to a random name before saving and running.

    Still Problems? Try the bootable CD fromDrWeb

    For a final check that your PC is clean run Hitman Pro cloud scanning (the scanner is free not the cleaning)

    if ALL the above fails please post your Hijackthis log to Bleepingcomputer or SpywareHammer

    Once you have cleaned the system please remember to purge the windows system restore points. You may be reinfected otherwise.
    - Disable system restore (How to disable windows SYSTEM RESTORE);
    - Reboot the PC
    - Re-ensable system restore
    GeorgeV
    ZoneAlarm® Extreme Security


    Click here for ZA Support
    Monday-Saturday__ 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    anjoy Guest

    Default Re: Recycler and System Volume Information-Recycler virus

    Thank you very much for the quick response. I will give you suggestions a try and post the results. Thanks again!

  4. #4
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,473

    Default Re: Recycler and System Volume Information-Recycler virus

    Your Welcome.

  5. #5
    garywa Guest

    Default Re: Recycler and System Volume Information-Recycler virus

    Or, as you asked, it may not be a virus at all. Don't confuse the RECYCLER folder with the recycler.exe virus file. Read here: http://wiki.answers.com/Q/What_is_th...ontained_in_it

    I also run WinXP Pro SP3 and this is what I see in my C:\RECYCLER folder - 2 sub-folders named similar to yours. WinXP creates a sub-folder for each partition on a HDD and/or for each HDD in your system. My PC has 2 HDD's with one partition each, thats why I have 2 sub-folders, one for each drive.




    Here is the RECYCLER folder on the second HDD. Notice that the sub-folder name is the same as the second folder above.





    I inserted two of my flash drives and found folders on both with a slightly different name, E:\Recycled but it was empty, no sub-folders




    None of these have ever caused a problem on my PCs or been detected as a virus.

    My point is that you may be chasing something that is not a problem. On my system, they appear to be put there by WinXP and are normal. If you delete them, WinXp will put them back.

  6. #6
    anjoy Guest

    Default Re: Recycler and System Volume Information-Recycler virus

    Ok folks, thank you very much for the help.

    I ran all the tests recommended above and none of the applications detected or removed the RECYCLER and System Volume Information folders in the root drive.

    Looks like I am making something out of nothing. Thanks a bunch and have a good day!

  7. #7
    garywa Guest

    Default Re: Recycler and System Volume Information-Recycler virus

    Glad it turned out to be nothing.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Phisbbank virus in System Volume Information-HTML/Phishbank.CAT
    By eliuri in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 3
    Last Post: April 14th, 2008, 03:09 PM
  2. C:\System Volume Information\tracking.log
    By wwffcc in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 40
    Last Post: March 31st, 2008, 03:03 AM
  3. recycler.exe virus
    By compaddict in forum Security Issues
    Replies: 1
    Last Post: March 28th, 2008, 06:43 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •