Gamingforce Interactive Forums
85240 35212

Go Back   Exploding Garrmondo Weiner Interactive Swiss Army Penis > Garrmondo Network > Help Desk
Register FAQ GFWiki Community Donate Arcade ChocoJournal Calendar

Notices

Welcome to the Exploding Garrmondo Weiner Interactive Swiss Army Penis.
GFF is a community of gaming and music enthusiasts. We have a team of dedicated moderators, constant member-organized activities, and plenty of custom features, including our unique journal system. If this is your first visit, be sure to check out the FAQ or our GFWiki. You will have to register before you can post. Membership is completely free (and gets rid of the pesky advertisement unit underneath this message).


Help! RECYCLER (virus/trojan) Removal
Reply
 
Thread Tools
Vemp
fuuuuuu


Member 929

Level 33.83

Mar 2006


Reply With Quote
Old Sep 23, 2009, 02:25 PM Local time: Sep 24, 2009, 03:25 AM #1 of 7
Help! RECYCLER (virus/trojan) Removal

Apparently I have this thumbdrive virus which creates a hidden folder on all drives named "RECYCLER" which I can't delete even after AVG and Anti-Malware scanned my pc and removed malicious items.

At first I had errors after booting Windows XP. An error occurs with Explorer which leaves Windows frozen. After scanning and removing the items, the errors disappeared but the folder remains in my drives. It then re-activates after I insert any removable drive in my laptop. It even infected my camera's SD card and my NDS' microSD card.

I can't seem to remove the folder from C:\ (which I think is the source).

Any help is very much appreciated.

Jam it back in, in the dark.
packrat
Mountain Chocobo


Member 8785

Level 28.07

Jun 2006


Reply With Quote
Old Sep 23, 2009, 02:38 PM #2 of 7
I don't think the RECYCLER folders are indicative of any computer problems. I'm fairly sure Windows XP creates these hidden folders by default on all rewritable media as part of the recycle bin system.

Aside from that, are you having any other noticeable computer problems?

There's nowhere I can't reach.

Vemp
fuuuuuu


Member 929

Level 33.83

Mar 2006


Reply With Quote
Old Sep 23, 2009, 03:39 PM Local time: Sep 24, 2009, 04:39 AM #3 of 7
The system time changes to Sept. 2020, and the RECYCLER folder appears on every drive I plug in to my laptop (including my camera's SD card and the microSD I use for my NDSlite's M3real). The RECYCLER folder appears along with an autorun.inf file, which I can delete. But the RECYCLER remains undeletable even after I scan with AVG and Malwarebytes' Anti-Malware.

This thing is sticky, and I don't like it. I don't appreciate it.
packrat
Mountain Chocobo


Member 8785

Level 28.07

Jun 2006


Reply With Quote
Old Sep 23, 2009, 04:49 PM #4 of 7
I'm still skeptical that the appearance of a Recycler folder on these drives is at all indicative of anything more than a functioning Recycle Bin system. Now if there were any fishy files in them, then that might be a cause for concern.
What is the content of the autorun file? (open in notepad)

I am a dolphin, do you want me on your body?

Zergrinch
Evil Grinch


Member 666

Level 50.98

Mar 2006


Reply With Quote
Old Sep 23, 2009, 06:26 PM Local time: Sep 24, 2009, 07:26 AM #5 of 7
Vemp, is this page relevant?

Also, try booting into safe mode and running Flash Disinfector...

I was speaking idiomatically.
Single Post URL
Transparent Color Code:
[color=#14194e]
Vemp
fuuuuuu


Member 929

Level 33.83

Mar 2006


Reply With Quote
Old Sep 23, 2009, 07:22 PM Local time: Sep 24, 2009, 08:22 AM #6 of 7
I was browsing the interwebs about this virus, and the Flash Disinfector suggestion popped up. I read that it only places a temporary fix and adds a file that prevents the autorun.inf file from functioning. So it doesn't really remove the virus, just stops it from working.

I'm going to try deleting the CTFMON.EXE file method, isn't it a system file? I read it's something to do with MS Office, so deleting won't hurt Windows. I'll try to look for other stuff.

Most amazing jew boots
Zergrinch
Evil Grinch


Member 666

Level 50.98

Mar 2006


Reply With Quote
Old Sep 23, 2009, 09:24 PM Local time: Sep 24, 2009, 10:24 AM #7 of 7
CTFMON.exe deals with the Windows language bar, so deleting this will make you unable to use the various IMEs that come with Windows. For example, you won't be able to input in 日本語.

So, do a backup of this file before deleting it.

____________________

If you ever wish to delete obstinate files, boot into Safe Mode Command Prompt, and use ATTRIB to unset any system, hidden, or read-only attributes first. Then delete away.

If you wish to delete the contents of \RECYCLER, disable the Recycle Bin in Windows beforehand. Then feel free to remove any folders inside it. Deleting the \Recycler folder is not recommended however, so do so at your own risk.

FELIPE NO
Single Post URL
Transparent Color Code:
[color=#14194e]
Reply


Exploding Garrmondo Weiner Interactive Swiss Army Penis > Garrmondo Network > Help Desk > Help! RECYCLER (virus/trojan) Removal

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Removal of Software Doctor mortis Help Desk 1 Jul 20, 2006 07:09 PM
Free Malware Removal Software GrimReaper Help Desk 1 Jun 3, 2006 08:13 PM


All times are GMT -5. The time now is 08:23 AM.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2025, vBulletin Solutions, Inc.