Virus keeps returning - why?

Microsoft Windows xp home edition
April 3, 2010 at 12:58:16
Specs: Windows XP Home
I have a recycld.exe virus on my external hard drive. I have scanned the drive with Malwarebytes Antimalware, which removes the virus. However, when I restart the computer, it's back.

It used to also include an autorun.inf, which I have I believe neutralized with Autorun eater and the creation of a read-only autorun.inf folder on the external.

How can I stop the recycld.exe from coming back? I have scanned the laptop proper and it has come back clean. It shows in the RECYCLER and System Information folders (at least, according to Malwarebytes, since I cannot open the System Information folder.)

How do I make it stop coming back? Is there any information I could give that would help identify the problem better?

I am running Malwarebytes Antimalware, Avast antivirus, and Autorun Eater.

See More: Virus keeps returning - why?

Report •

April 3, 2010 at 14:14:22
You may have to turn off system restore and then scan.
Try these 2 freebies that are fully functional and run untill they are clean
1- Trojan Remover
2- Hitman Pro

Some HELP in posting on plus free progs and instructions Cheers

Report •

April 5, 2010 at 16:46:15
Thanks for your advice - the virus appears to be gone from the computer and external harddrive. I'm going to keep scanning for a few days to be sure, but it seems to be beaten. I would never have thought of trying any of the three things you suggested, but they seem to have worked.

The question now is, how do I get it off of the jump drives? I cannot do them the way I did the external, as they cannot stay in the computer during start up.

I'll elaborate:

Before I posted here, I put my own autorun.inf file on one of the jump drives. It's still infected, and my autorun seems to keep it from reinfecting things, but I don't know. I tried to clean it with Malwarebytes Antimalware, but the computer reminded me that it cannot start with the jump drive plugged in by, quite simply, refusing to start up.

I attempted to use the cmd feature, typing in cmd, than the jump drive's letter while it was plugged in, typing dir /ah to see what was there. Recycld did not show, although I checked the jump drive and it's on there.

The other jump drive I formatted, then foolishly removed and plugged back in. For some reason, instead of removing the autorun, Avast freaked and kept popping up that the autorun was on the jump drive until I removed it and shut down the computer. As in, seconds would pass after I told it to remove the autorun before it popped up warning me again. I have not attempted reinserting it since.
Earlier today, I entered into the registry the following code:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
to try and disable autorun. I'm not sure if it worked, as after I restarted the computer and plugged in the external autoplay popped up. (I'm a little vague on the details, as if it were not obvious.)

I am not sure if my mp3 player is infected or not, as when we plugged it in I was told by the repair man that the driver was missing for it, but the computer was still infected when we tried plugging it in.

In short: what shall I try for the usb devices that cannot stay plugged into the computer during a restart? If I have left anything out, please say so and I will provide.

Thanks again for the help with the major drives.

Report •

April 6, 2010 at 12:04:10
I think I may have gotten it off of the jump drives - I decided to try the most basic method of all, now that autorun is disabled on this computer. I plugged in the jump drive, deleted the folder that had the virus, and unplugged it before running scans on the computer itself. The computer came back clean, and opening the jump drive again I couldn't find the virus. It seems to be gone. Holding back final judgment for a few days, but your methods seemed to have worked. Thanks!

Report •

Related Solutions

April 6, 2010 at 21:10:11
thanks for posting back, hopefully you are better now

Some HELP in posting on plus free progs and instructions Cheers

Report •

April 9, 2010 at 21:42:23
Recycler is not a virus, its a windows file. many people consider it a virus and try deleting it but it returns. maybe theres a virus using name RECYCLED but i`vnt heard about that. anyways, see this user guide, hope it`d be usefull for you

Happy Virus Free Computing(.net)
Virus Removal tutorials and Softwares

Report •

Ask Question