AS Nuke_M_All said it is mal ware that has caused it just recently got a message simular to this on my system and it did infect all the drives on the PC, even after a restore using maxblasts version of acronis of the C drive sill had it on the d: and e: drives.
If you open and allow viewing of hidden system files on the drives you will see a hidden auto run file on the root of all the drives after opening these files with notepad you see where they link to. Useing unlocker assistant and a wee bit of foot work on the drives you can remove them manualy.
Here is what was posted in the auto run file.
As you can see a real piece of workCode:[autorun] ;vrgxakxlokezvkvljzykmbyybdsskqanozssjosdsnggskwcghhszyitfp shellexecute="RECYCLER\S-4-9-78-100028107-100003638-100023492-7274.com d:\" ;fjkpsyxlnrmuwdeuqf shell\Open\command="RECYCLER\S-4-9-78-100028107-100003638-100023492-7274.com d:\" ;kkbvdlghqjusosurwjlvjgfacagzqeaigelvbzpgziwqpixeyskpzcpmebncyhqykdrbxyianhluoqjthsyvvdmzuqvjcvkhmnbultk shell=Open
Oh well a bit of a chanllenge I guess. I suspect I got it while searching for an old app that is no longer offered. And I still haven't found it.
But like some one else said I came to this thread and registered just to say
THANK YOU ALL
Just to add to this, some variants of Conficker are using the RECYCLER folder to hide their executable files. For instance, cleansing a USB pen infected with Conficker is easily done via a linux live CD, chmod 777 on the recycler folder to delete that and also the autorun.inf file. Of course many other variants just put .exe files in the root with the autorun inf file, but I'm seeing increased amounts of both dotted around various sites. The same goes for the RECYCLER folder on the C: drive, however obviously you do NOT want to be deleting that.
This thread really become a life saver guys as it solved all my problems,i also have just joined just to say thanks,Nuke Em all-your a star!
Hi everyone bye the way!
You guys are so resourceful.
I was having this problem. Now I consider myself intermediate with a computer, but whoever designed this Autorun Eater is pure genius.
I started to have this problem after I tried to install a program. After deleting the program this recycles error began to show up. I restored my factory programs back onto the drive. However the recycles message began showing up again.
Anywho this works, so thanks.
AND BY THE WAY, THE RECYCLE/S ERROR SPREADS LIKE A VIRUS. I PUT MY MEMORY CARD into my pc AND ALL OF A SUDDEN THERE WAS A RECYCLES FOLDER IN IT. I DELETED THE FOLDER; however, it continued to come up. So the person above is right, it spreads to other drives.
Last edited by Dustbunnies; 9th June 2009 at 09:32 PM.
Excellent thread. Great help to me. Thanks for the help.
To add a little more to this thread as it's being rather useful.
They don't usually use the actual Recycler folder, often they actually create other folders like RECYCLED, RECYCLE.BIN, and recently I've found a few instances of $RECYCLE.BIN. However, some of these can actually be real, so beware if using RM servers, 3rd party undeletion software and what not.
Plenty of methods to turn off Autorun using the registry - however a nice easy one for the day to day user is to create a *folder* called Autorun.inf - create it on your C drive and USB pens - it'll prevent malicious software from overwriting it.
Make sure everything is patched up to date anyway, and I won't bother to say keep your AV up to date, that's just common sense
Once I have done the anti malware ( anti virus / anti spyware ) using aformentioned tools / utils ie malware bytes, spybot search and destroy, super anti spyware and whichever AV you use I then look at :
Relevant registry files are normally located on kellys corner ( Troubleshooting Windows XP, Tweaks and Fixes for Windows XP ), I also tend to use tweak UI ( Tweak UI for Windows XP ) , think there was also an issue with the recycler always appearing full or empty even though it has items in the recycle bin.
Had to use the
RMDIR command to forcefully and silently remove the recycler directory ( c:\recycler )
Am aware this is an old thread but just thought the above might help
its either virus or malware, i had this problem ages ago on my home pc and had to format disk at the end...
There are currently 1 users browsing this thread. (0 members and 1 guests)