Recycler virus spreads mainly though removable medias like USB flash drives / pen drives,external HD’s or even iPods and mobile phone memory cards.These viruses exploit the autorun feature of windows and can be found in different names inside flash drives like recycler.exe, flashguard.exe, newfolder.exe and also create replicas using the same folder name which they occupy.So how can we completely remove recycler virus and safeguard our PC.
How Recycler Virus Work and spreads from computer to computer.
The main reason a computer gets infected with recycler virus is by exploiting the autorun feature available in windows (mainly windows xp).It copies the autorun.inf files on each drive of the computer, be it permanent or a removable media such as DVDs, CD ROMs, USB Devices, or Memory Sticks.The purpose of the autorun.inf file is to activate the actual executable virus present in the drive.In this case it’s recycler.exe.Here is the code from the autorun.inf file which executes recycler virus when the drive is opened.
[AutoRun]
open=Recycle.exe
shell1=´ò¿ª(&O)
shell1Command=Recycle.exe
shell2=ä¯ÀÀ(&B)
shell2Command=Recycle.exe
shellexecute=Recycle.exe
Once you open the infected USB drive, the recycler virus executes and copies itself inside every open folder with different name.It uses a batch file to modify the system registry and executes itself each time the system starts up.You cannot remove the virus even after formatting your removable drive. The anti-virus software may detect it but cannot remove it.
Some versions of this virus,is known to connect to external websites and download malicious code to your hard drive and steal information’s like credit card data,password,history logs etc.Also,it disables task manager,antivirus software’s,folder options,control panel and all utilities which deals with PC security.
How to Re Enable folder options,regedit,msconfig and task manager disabled by autorun virus
To re-enable these options,you could use Remove Restrictions Tool.Run RRT as an administrator(in Windows Vista) to perform actions and restore all the options.
After running the RRT,click check all and then remove.Now you will be able to see all the hidden autorun and recycler files by checking “Show hidden files” in the folder options.
How to remove Recycler/ Autorun Virus from Flash Drive
[optional] You can use Flash Disinfector to remove the virus from USB/flash drives.Download this tool and save it to your hard disk [and not portable drive].Run this software and insert your infected flash drive when prompted.
After clicking OK,the desktop will go blank for few seconds[it’s normal] and removes the autorun virus.
Or you can use Auto Run Eater for the perfect removal of autorun.inf files from your hard drives as well.
Please read my previous article,if you are trying to remove viruses like khatra.exe,ghost.exe or xplorer.exe.
How To Stop Recycler Virus Completely
For complete removal of USB drives virus like newfolder.exe ,recycler.exe etc and to prevent further spreading of virus you must first install protector plus software and then scan to delete every instance of the virus [you can also try Smart virus remover].After that install a fresh version of Kaspersky antivirus 2010 or Nod32,which completely removes the recycler and autorun related viruses.
Comments on this entry are closed.
Use Smart Virus Remover
http://www.technize.com/?dl_id=6
Removes:
* Virus.Win32.Agent.aw.a
* Virus.Win32.AutoIt.a.a
* Virus.Win32.AutoRun.abt.a
* im.worm.win32.sohanad.bm.a
* im.worm.win32.sohanad.t.a
* Trojan.Win32.Agent.abt.aTrojan-Downloader.Win32.AutoIt.aa.a
* Trojan-Downloader.Win32.AutoIt.q.a
* Trojan-PSW.Win32.OnLineGames.mgw.com.a
* Trojan-PSW.Win32.OnLineGames.pno.a.com
* Virus.Win32.AutoRun.ajn.com
its not deleting recycler….
it is NOT deleting Recycler and it added autorun to all my folder!!!!
to remove recycler
use system explorer
end process commgr.exe,winalert.exe
then open cmd
go in c drive(where os is installed)
write a command dir /a
u will see 2 directories named program files
1 of them is having two space b/w program and files
simply remove it using command
rd program files /s /q
neeraj srivastav
NOD32 does not remove this virus. sadfrog.jpg
THANKS.
IT IS A VERY GOOD AND VALUABLE SOFTWARE, AND USEFUL IN DAILY BASIS.ON NET SURFING THESE KINDS OF VIRUS NOT CLEARED BY ANY OTHER REMOVAL-KIT.
IT HELPED A LOT TO ME.
plz tell me how to delete recycler virus.it's not deleting in my system.iam using avast antivirus, the virus is not deleting in my system