Recycler Virus Removal Tool Disinfects PC/ USB from Recycler.exe

by renjith on September 26, 2009 · 7 comments

in security, Trojans and Mobile Viruses, Virus Removal, windows

pc-virus-removal Recycler virus spreads mainly though removable medias like USB flash drives / pen drives,external HD’s or even iPods and mobile phone memory cards.These viruses exploit the autorun feature of windows and can be found in different names inside flash drives like recycler.exe, flashguard.exe, newfolder.exe and also create replicas using the same folder name which they occupy.So how can we completely remove recycler virus and safeguard our PC.

How Recycler Virus Work and spreads from computer to computer.

The main reason a computer gets infected with recycler virus is by exploiting the autorun feature available in windows (mainly windows xp).It copies the autorun.inf files on each drive of the computer, be it permanent or a removable media such as DVDs, CD ROMs, USB Devices, or Memory Sticks.The purpose of the autorun.inf file is to activate the actual executable virus present in the drive.In this case it’s recycler.exe.Here is the code from the autorun.inf file which executes recycler virus when the drive is opened.

[AutoRun]
open=Recycle.exe
shell1=´ò¿ª(&O)
shell1Command=Recycle.exe
shell2=ä¯ÀÀ(&B)
shell2Command=Recycle.exe
shellexecute=Recycle.exe

Once you open the infected USB drive, the recycler virus executes and copies itself inside every open folder with different name.It uses a batch file to modify the system registry and executes itself each time the system starts up.You cannot remove the virus even after formatting your removable drive. The anti-virus software may detect it but cannot remove it.

recycler-exe-virus-folder

Some versions of this virus,is known to connect to external websites and download malicious code to your hard drive and steal information’s like credit card data,password,history logs etc.Also,it disables task manager,antivirus software’s,folder options,control panel and all utilities which deals with PC security.

How to Re Enable folder options,regedit,msconfig and task manager disabled by autorun virus

To re-enable these options,you could use Remove Restrictions Tool.Run RRT as an administrator(in Windows Vista) to perform actions and restore all the options.

remove restrictions tool UI

After running the RRT,click check all and then remove.Now you will be able to see all the hidden autorun and recycler files by checking “Show hidden files” in the folder options.

How to remove Recycler/ Autorun Virus from Flash Drive

[optional] You can use Flash Disinfector to remove the virus from USB/flash drives.Download this tool and save it to your hard disk [and not portable drive].Run this software and insert your infected flash drive when prompted.

usb-virus

After clicking OK,the desktop will go blank for few seconds[it’s normal] and removes the autorun virus.

Or you can use Auto Run Eater for the perfect removal of autorun.inf files from your hard drives as well.

Please read my previous article,if you are trying to remove viruses like khatra.exe,ghost.exe or xplorer.exe.

How To Stop Recycler Virus Completely

For complete removal of USB drives virus like newfolder.exe ,recycler.exe etc and to prevent further spreading of virus you must first install protector plus software and then scan to delete every instance of the virus [you can also try Smart virus remover].After that install a fresh version of Kaspersky antivirus 2010 or Nod32,which completely removes the recycler and autorun related viruses.

Be Sociable, Share!

Related posts:

  1. How to delete Khatra.exe ,gHost.exe, Xplorer.exe Virus [Win32.Sality Removal Tool]
  2. Prevent Autorun.inf file in USB Drives From Automatically Executing Virus
  3. Orkut banned by a virus!! (Removal included)
  4. Crossplatform virus – the latest proof of concept
  5. How To Secure USB drive using Password protection and Encryption
  6. Can your PC run Windows Vista smoothly
  7. Use and Mount Images (ISO files) Without Burning Them in XP
  8. How To Disable Kaspersky Antivirus Self Defense

{ 7 comments… read them below or add one }

Anonymous September 26, 2009 at 8:33 pm

Use Smart Virus Remover
http://www.technize.com/?dl_id=6

Removes:
* Virus.Win32.Agent.aw.a
* Virus.Win32.AutoIt.a.a
* Virus.Win32.AutoRun.abt.a
* im.worm.win32.sohanad.bm.a
* im.worm.win32.sohanad.t.a
* Trojan.Win32.Agent.abt.aTrojan-Downloader.Win32.AutoIt.aa.a
* Trojan-Downloader.Win32.AutoIt.q.a
* Trojan-PSW.Win32.OnLineGames.mgw.com.a
* Trojan-PSW.Win32.OnLineGames.pno.a.com
* Virus.Win32.AutoRun.ajn.com

Reply

Anonymous August 10, 2010 at 10:51 pm

its not deleting recycler….

Reply

Anonymous December 5, 2010 at 4:31 am

it is NOT deleting Recycler and it added autorun to all my folder!!!!

Reply

Anonymous February 21, 2011 at 11:15 am

to remove recycler
use system explorer
end process commgr.exe,winalert.exe
then open cmd
go in c drive(where os is installed)
write a command dir /a
u will see 2 directories named program files
1 of them is having two space b/w program and files
simply remove it using command
rd program files /s /q

neeraj srivastav

Reply

Anonymous March 19, 2011 at 1:47 pm

NOD32 does not remove this virus. sadfrog.jpg

Reply

Anonymous September 2, 2011 at 11:21 pm

THANKS.
IT IS A VERY GOOD AND VALUABLE SOFTWARE, AND USEFUL IN DAILY BASIS.ON NET SURFING THESE KINDS OF VIRUS NOT CLEARED BY ANY OTHER REMOVAL-KIT.
IT HELPED A LOT TO ME.

Reply

Anonymous March 17, 2012 at 5:31 am

plz tell me how to delete recycler virus.it's not deleting in my system.iam using avast antivirus, the virus is not deleting in my system

Reply

Leave a Comment

Previous post:

Next post: