Endpoint Protection

 View Only
Expand all | Collapse all

how to remove recyler.exe??

Migration User

Migration UserMay 06, 2009 04:01 AM

Migration User

Migration UserMay 06, 2009 06:09 AM

Migration User

Migration UserMay 06, 2009 06:15 AM

  • 1.  how to remove recyler.exe??

    Posted May 06, 2009 03:29 AM
     This is a very critical virus. Not searching the registy and deleting the entries, or removing the autorun.inf file will work for this. The recycler.exe will still keep running in your system.
    Recently I had the same problem but somehow at google, I got a partial solution for recycler virus and still I am not very much satisfied. The reason being this recycler virus is not like any other virus, only one solution is available till now, it is the usage of flash disinfector. Flash disinfector disables the existing autorun virus and avoids the re creation of the same.
    Also take care that you don't delete the existing autorun.inf folder because if you delete that, the virus again starts its work. Also, don't format the usb drive.
    also it cannot be deal with endpoint protection.....
    below its the image of the folder that it made during the process.........
    imagebrowser image


  • 2.  RE: how to remove recyler.exe??

    Broadcom Employee
    Posted May 06, 2009 03:56 AM

    hi,
    you able to find the autorun.inf file which executes the folder to create?

    have you scanned the system with the latest virus definition, in safe mode? Submit any suspicious file to the Security response.

    Pete



  • 3.  RE: how to remove recyler.exe??

    Posted May 06, 2009 03:58 AM
    Hi Owais, based from the screenshot it looks like a folder. Can you include on the screenshot the type column?

    First thing to do is to boot from safe mode and run a full scan from there.

    Better to inspect running process see if there is any process not familiar to you. Do this also on msconfig, startup and services tab.


  • 4.  RE: how to remove recyler.exe??

    Posted May 06, 2009 04:00 AM
     yup..i hav done the scanning in safe mode.........and this file autorun.inf is present in all folders.......
    and i already submitted the case in symantec.......



  • 5.  RE: how to remove recyler.exe??

    Posted May 06, 2009 04:01 AM
     plzz any forward guidance


  • 6.  RE: how to remove recyler.exe??

    Posted May 06, 2009 04:07 AM
     hey guys,
    the folder is executable as it follows.exe.........


  • 7.  RE: how to remove recyler.exe??

    Posted May 06, 2009 04:27 AM
    I think this happened to me before.. Is Recycler.exe on the processess tab?


  • 8.  RE: how to remove recyler.exe??

    Posted May 06, 2009 04:36 AM
    thanx fr the discussion .I was facing the same problem too.


  • 9.  RE: how to remove recyler.exe??

    Posted May 06, 2009 05:21 AM
    hey guys,
    below some info
    this is his registry entry
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run Manager Task C:\RECYCLER\S-1-5-21-1202660629-412668190-725345543-500\smss.exe
    file entry
    c:\recycler\Taskmgr.exe
    SMSS.EXE is processes it made when machine log in......nearly of 94,200 bytes.......


  • 10.  RE: how to remove recyler.exe??

    Posted May 06, 2009 05:31 AM
    Hi Owais, can post Loadpoint Diagnostic Tool logs here?

    Please check on this website how to obtain it and post the logs here

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/8f90ab8cfbbae5d688257459006a7f9f?OpenDocument


  • 11.  RE: how to remove recyler.exe??

    Posted May 06, 2009 05:37 AM


  • 12.  RE: how to remove recyler.exe??

    Posted May 06, 2009 05:40 AM
     arey above link is jst giving d description of the recycler.exe......and the recommended antivirus on d above link....i already used it.......


  • 13.  RE: how to remove recyler.exe??

    Posted May 06, 2009 05:54 AM
     hey but iam using vista.......ur link is not working........i think so its only for xp and all.....its mentioned


  • 14.  RE: how to remove recyler.exe??

    Posted May 06, 2009 06:09 AM
    Me to Facing same problem kindly suggest any help


  • 15.  RE: how to remove recyler.exe??

    Posted May 06, 2009 06:15 AM
     hey hii sujay...
    wats ur symptoms....


  • 16.  RE: how to remove recyler.exe??

    Posted May 06, 2009 06:17 AM
    hi sujay

    You are running vista or xp

    Do the full scan of your system in safe mode


  • 17.  RE: how to remove recyler.exe??

    Posted May 06, 2009 07:41 AM
    Follow these instructions to remove :

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AUTORUN.HW&VSect=Sn

    The virus propagates via removable media or network drives.... if you RDP into a machine that's infected you will pickup the infection.

    Disable autorun on your machine and disinfect all removable media .

    I submitted the virus files to Symantec in March and the SEP definitions now detect and prevent this virus from spreading

    What AV are you using ? and what defs ?



  • 18.  RE: how to remove recyler.exe??

    Posted May 06, 2009 07:46 AM
    1) run Process Explorer and kill all suspicious rundll32.exe processes (normally, in most cases it must not be such processes in memory)
    2) check services, and disable/stop any named like "autorun" or seemed not must be there
    3) download and run w32.downloadup removal tool from symantec site
    4) if you make boot scan and there is no viruses, may be there is only traces of them. delete them manually. you can use unlocker tool (google unlocker download)


  • 19.  RE: how to remove recyler.exe??

    Posted May 06, 2009 11:33 PM
    Were you able to remove the infection just by deleting the file?


  • 20.  RE: how to remove recyler.exe??

    Posted Aug 21, 2009 06:10 AM
    im also encountering this kind of prob. can some one help me and make a step by step procedure to removed my recycler virus on my computer, the screenshot was the same to owais prob. pls help me my comp. is windows xp. pls help me...thank you all,.ill wait for your reply on my account...tnx


  • 21.  RE: how to remove recyler.exe??

    Posted Aug 21, 2009 09:18 AM
    Are you folks SURE, beyond a doubt, that you are not seeing the NORMAL WINDOWS recycler???!!!
    That's your recycle bin!! That screenshot at the top is PART OF WINDOWS!
    Recycler is a WINDOWS process.

    Be REALLY certain you aren't following bogus advice, like those hoax emails that circulate telling of doom and gloom and that your system is already infected - when in fact it's PART OF WINDOWS............

    It's possible a real virus will exist that uses the names of VALID Windows processes to try to fool folks, but too often people see somthing and will believe anything they read on a web site or in an email.

    The example in the first screen shot in this thread from May 6th is NOT A VIRUS! The original poster in this thread is showing what is a normal part of Windows.
    Someone has UNhidden hidden files and folders in their windows folder settings and is now all excited and concerned.
    My advice - rehide the hidden folders and files - hide system files and ignore that.
    That's your recycle bin, and recycler is a Windows process. Recycler exists on every Windows XP machine. That folder exists on every Windows XP machine.
    BE VERY CAREFUL what you read from non-experts - and verify before removing.
    Check where the process resides. Check a new install on a known clean computer and compare. You WILL find recycler.


  • 22.  RE: how to remove recyler.exe??

    Posted Aug 21, 2009 09:42 AM
    If you go to c:\recycler does it open up as a folder should?
    Like Shadows indicated above, this is part of Normal Windows operating system and is your recycling bin.

    I have seen the "Recycler" virus before, and it is always misspelled, generally replacing the C with an S.  Hence you get Resycler...

    You don't want to be removing the regular Recycle bin on your system.

    You will also find a "Recycler" folder on every drive.

    D:\recycler
    e:\recycler
    etc.


  • 23.  RE: how to remove recyler.exe??

    Posted Aug 21, 2009 10:01 AM
    Recycler is a part of windows system, the thing that you will worry about is the recycle.exe, I submitted the file before to symantec security reponse team fortunately they found out the file is a virus, but there is some instances that eventhough my virus def is up to date the file cannot be detected by SEP, I need to submit it again it might be a new variant but seeing the same result.