Recycled folder

Discussion in 'NOD32 version 2 Forum' started by CYRUS, Sep 10, 2007.

Thread Status:
Not open for further replies.
  1. CYRUS

    CYRUS Registered Member

    Joined:
    Jul 17, 2007
    Posts:
    2
    Hallo,
    I'm experiencing a very wierd virus that is creating a RECYCLER FOLDER on the root directory of my Pc, This recycler folder is having similar icon like that of recycle bin and when i open it, has a info.exe and desktop.ini. When i delete it, disappear for a while and then pop-up again now with autorun.inf file.
    Any help i will appreciate.

    Cyrus
     
  2. WSFuser

    WSFuser Registered Member

    Joined:
    Oct 7, 2004
    Posts:
    10,639
    The RECYCLER folder is the Recycle Bin, so its normal to have that folder in the root of your drive.
     
  3. bharper

    bharper Registered Member

    Joined:
    Sep 12, 2007
    Posts:
    1
    INFO.exe is a virus. It overrides the default action for the drive. Instead of opening the drive, it will execute the virus. The virus places itself in the startup folder and tries to infect more drives. If you see ctfmon.exe under the Task Manager then you probably have the virus. One ctfmon.exe is legit, the other is the virus. It doesn't seem to be dangerous, it only seems to want to spread. This script should get rid of it, but use it at your own risk. Just save this into a batch file (something.bat) and run it on the root (I:\) of the drive that is infected.

    @echo off
    attrib -r -s -h *.*
    del autorun.inf
    cd Recycled
    attrib -r -s -h *.*
    del INFO2
    del desktop.ini
    del ctfmon.exe
    cd Recycled
    attrib -r -s -h *.*
    del ctfmon.exe
    cd ..
    rmdir Recycled
    cd ..
    attrib -r -s -h Recycled
    rmdir Recycled



    Best regards,


    Brian Harper
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.