Computing.Net > Forums > Security and Virus > Recycled virus

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Recycled virus

Reply to Message Icon

Original Message
Name: Mooks
Date: March 14, 2007 at 20:21:45 Pacific
Subject: Recycled virus
OS: all windows
CPU/Ram: all
Manufacturer/Model: all
Comment:

In my pen drive there was a folder called Recycled. The right click open menu looked like open(0). After clicking on that open(0) all my hard partitions' right click open menu came like open(0). I want to get rid off this virus. Some body help me.


Report Offensive Message For Removal


Response Number 1
Name: Jennifer SUMN
Date: March 15, 2007 at 09:04:08 Pacific
Reply:

What OS are you running? Have you tried a Restore? Is there any other strang behavior?

Life's more painless for the brainless.


Report Offensive Follow Up For Removal

Response Number 2
Name: jboy
Date: March 15, 2007 at 14:51:14 Pacific
Reply:

OS: all windows
CPU/Ram: all
Manufacturer/Model: all

... very helpful. Those fields are to be filled in with the specifications of the machine in question, for best results

The presence of a recycle bin on a Windows drive is pretty standard - have you performed any virus scans??

I'm not one of those who think Bill Gates is the devil. I simply suspect that if Microsoft ever met up with the devil, it wouldn't need an interpreter.


Report Offensive Follow Up For Removal

Response Number 3
Name: Mooks
Date: March 19, 2007 at 07:58:34 Pacific
Reply:

I use XP. I tried all AVG,Norton,Mcafee. No use. It is not a recycle bin related stuff. It's name is shown as recycled. When you try to open a pendrive in an affected computer, this virus nicely get in to the pen. when you take it home and double click on the pen drive,your computer also affected. It seems harmless, But i dont think it is wise to let it be there. Thats why i needed your help. I can send you some of the screen shots.


Report Offensive Follow Up For Removal

Response Number 4
Name: Jennifer SUMN
Date: March 20, 2007 at 06:35:52 Pacific
Reply:

I'd like to see the screen shots...

Life is more painless for those who are brainless.


Report Offensive Follow Up For Removal

Response Number 5
Name: kcha123
Date: March 28, 2007 at 03:03:11 Pacific
Reply:

try scanning with Kaspersky


Report Offensive Follow Up For Removal


Response Number 6
Name: slapshot
Date: May 16, 2007 at 07:45:32 Pacific
Reply:

Run 'regedit'
Search repeatedly for the string "open(0)" deleting ALL subkeys under
Software/Microsoft/Windows/Currentversion/explorer/MountPoints2
that contains the string "open(0)"

There will be one for each drive, flash stick, or network share that has this problem

Close and re-open explorer and you should find the problem has gone


Report Offensive Follow Up For Removal

Response Number 7
Name: rakesh4mit
Date: May 23, 2007 at 15:14:47 Pacific
Reply:

all my drives were infected by the open(0) virus..i could only open them by right clicking them and clicking on open since the default value was open(0).
i tried the regedit method mentioned above and the first time it ddnt work fine but when i patiently removed all files its working fine...also it is somehow related to ctfmon.exe trojan.


Report Offensive Follow Up For Removal

Response Number 8
Name: Mooks2
Date: June 1, 2007 at 22:14:59 Pacific
Reply:

Hi I have attached some screen shots in the following URLs I hope they can help a bit more!I tried above methods but not found helpful. In some affected computers I couldn't find "Software/Microsoft/Windows/Currentversion/explorer/MountPoints2"

So somebody help pls!

http://aycu31.webshots.com/image/15...
http://aycu31.webshots.com/image/15...
http://aycu16.webshots.com/image/17...
http://aycu37.webshots.com/image/15...

Have a nice time


Report Offensive Follow Up For Removal

Response Number 9
Name: Mooks2
Date: June 4, 2007 at 06:40:13 Pacific
Reply:

Hi! I found out the way to get rid of that virus. here you are....

1. Go to command prompt.
2. Type CD\ in drive C to go the root directory
3. Type DIR /AH and press ENTER key. This will display all hidden files in your drive C
4. If you see a file AUTORUN.INF and a folder Recycled, then your system is infected.
5. Try doing this to your USB drive and check if your USB stick contains the same folder and AUTORUN.INF, if it does then your system is really infected.

To remove it download and install a trial version of Trendmicro and scan your system.

To manually remove it follow the following steps (This is the step I take when i repair my computer without an internet connection. Note you should understand what you're about to do, you try it at your own risk!)

1. Boot your system in Safemode
2. Go to command prompt, in Drive C do the following commands.
3. Type -> ATTRIB -H -R -S AUTORUN.INF then press enter
4. Type -> DEL AUTORUN.INF then press enter
5. Type -> ATTRIB -H -R -S Recycled then press enter
6. In Windows Explorer in Safemode, remove the folder Recycled in drive C use Shift-Delete to delete the folder.
7. Repeat Step 3 to 6 for all drives of your system including the USB drive.
8. Search for CTFMON.EXE in your system using the Search of Windows found in Start Menu. If you find a file that is not located in C:\WINDOWS\SYSTEM32, delete it immediately. Dont forget to empty the recycle bin afterwards (Usually the virus will copy itself in the Startup folder of the Startmenu. Check if the file is present there and delete it then.)

To disable autorun of drives (i.e. everytime you double-click a drive or cd or usb, it is auto open) follow the following step:


1. Click Start->Run->type REGEDIT.EXE
2. Go to this key from the register HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
3. Look for the entry NoDriveTypeAutoRun, double click the entry
4. Type a new value : 03ffffff for the NoDriveTypeAutoRun and press ENTER
5. Reboot the system.

Good luck everyone!


Have a nice time


Report Offensive Follow Up For Removal

Response Number 10
Name: jebarson007
Date: June 18, 2007 at 08:51:31 Pacific
Reply:

hey dude please browse the link..
http://antivirus.about.com/library/...

the worm is named sircam and spreads through emails. even i had the same prob with my comp


-jebarson007@gmail.com


Report Offensive Follow Up For Removal






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home



Results for: Recycled virus

recycled virus
    Summary: hi once i checked hidden files from folder option i found recycled virus and sound information appearing as hidden files i tried my best to delet them but they r write protected can u tell me howto ge...
www.computing.net/answers/security/recycled-virus/23755.html

Is this virus or harddisk?
    Summary: hi all, i had posted this message few days back with subject is it virus or? http://computing.net/security/wwwboard/forum/3625.html can any body help me in deciding further steps. ...
www.computing.net/answers/security/is-this-virus-or-harddisk/3653.html

virus alert!!!!!
    Summary: New Strain of Mass-Email Virus Poses Increased Risk September 19, 2003 Security vendors on Friday continued to issue alerts about a new mass-mailing virus, which has been identified as a variant of t...
www.computing.net/answers/security/virus-alert/6536.html








Which MP3 player do you have?

iPod/iPhone
Zune
Something Else
None


View Results

Poll Finishes Today.
Discuss in The Lounge
Poll History






Data Recovery Software