Sometimes you found there is a hidden folder named Recycler in the local drive or USB disk. You may doubt about that whether it is a threat. Recycler folder is a system folder used to store deleted files if you want to retrieve deleted data before. You can see the folder contains deleted files, images, files.
The attribute of Recycler folder is read only and hidden, only when the 'Hide Protected operating System Files' option is checked, it is shown.
Also System Volume Information in the root is a system folder, it keep the system restoration information.
However, more and more autorun virus copy themselves to the recycler bin folder when infecting PCs or USB devices, if you find any executable file such as RECYCLER.exe, or vbs file in it, and autorun.inf file in the root of the drive, and the content as
[AutoRun]
open=RECYCLE.exe
shellexecute=RECYCLER.exe
shell\Auto\command=RECYCLE.exe
The following is the instruction of removing the Recycler virus
Remove autorun viruses in Recycler folder
Upgrade antivirus software such as Symentec, Norton in your PC to the newest version, do a thorough scan of the local disk and external drives. If the virus/worms come back again after removal, or the antivirus tool could not detect the virus even, try to remove the virus manually.
1. Enter the Safe mode first to make the virus could not be stated
2. Kill the RECYCLER.exe process with task manager;
3. Remove the Recycler.exe file in the recycler folder and autorun.inf file in the root of drive
4. Change the key NoDriveTypeAutoRun to "03ffffff" in the path: HKEY_CURRENT_USER Software Microsoft Windows CurrentVersion Policies Explorer with Regedit
5. Reboot and use antivirus tool to scan the computer and USB drives.
It is a little difficult for most of people as we are not computer expert, also it is dangerous if you modify a registry entry wrongly, the system may break down. It is suggested to use a better autorun recycler virus removal tool to get rid of the virus completely.
The attribute of Recycler folder is read only and hidden, only when the 'Hide Protected operating System Files' option is checked, it is shown.
Also System Volume Information in the root is a system folder, it keep the system restoration information.
However, more and more autorun virus copy themselves to the recycler bin folder when infecting PCs or USB devices, if you find any executable file such as RECYCLER.exe, or vbs file in it, and autorun.inf file in the root of the drive, and the content as
[AutoRun]
open=RECYCLE.exe
shellexecute=RECYCLER.exe
shell\Auto\command=RECYCLE.exe
The following is the instruction of removing the Recycler virus
Remove autorun viruses in Recycler folder
Upgrade antivirus software such as Symentec, Norton in your PC to the newest version, do a thorough scan of the local disk and external drives. If the virus/worms come back again after removal, or the antivirus tool could not detect the virus even, try to remove the virus manually.
1. Enter the Safe mode first to make the virus could not be stated
2. Kill the RECYCLER.exe process with task manager;
3. Remove the Recycler.exe file in the recycler folder and autorun.inf file in the root of drive
4. Change the key NoDriveTypeAutoRun to "03ffffff" in the path: HKEY_CURRENT_USER Software Microsoft Windows CurrentVersion Policies Explorer with Regedit
5. Reboot and use antivirus tool to scan the computer and USB drives.
It is a little difficult for most of people as we are not computer expert, also it is dangerous if you modify a registry entry wrongly, the system may break down. It is suggested to use a better autorun recycler virus removal tool to get rid of the virus completely.
About the Author:
The manual way of recycler virus removal may be a little difficult, try to use the specific virus removal tool to get rid of the autorun recycler virus automatically.
No comments:
Post a Comment