Recycler.exe—-spoils
Posted by mangaimano on December 18, 2007
Most o f the usb users definitely cme across this pblem. recycler.exe.It ‘ll hide the folders in usb nd may get spread . u even cannot open the driv by usual method.there are two hidden Files on USB Stick:a) autorun
b) RECYCLER
Scooby!. it ‘s autorun look like
[AutoRun]
open=RECYCLER.exe
shellexecute=RECYCLER.exe
shell\Auto\command=RECYCLER.exe
So I tried to rename it .but pity thing s it get replicated as the renamed name.but I could delete the renamed one but not the original.bcoz it w‘s write protected
Actually it b’longs 2 a trojan family..i certainly cleared this using antivrus[mcafee I used] with ease or by spy bot.search n yahoo answers may help u.I h’d learnt following sols to recover the hidden folder
1.if u knw the folder name enter n win address or u can make use of the cmdprompt
2.if u can’t remember the name.chechk it in linux[virus wnt work] or use windows
Vista<if u like it>
AND instead of creating folder, create new zip or .rar folder at best .[most of the pen sticks supports]
do registryfix HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
Update ur anti virus regularly
redlioness said
Most o f the usb users definitely cme across this pblem. recycler.exe.It ‘ll hide the folders in usb nd may get spread . u even cannot open the driv by usual method.there are two hidden Files on USB Stick:a) autorun
b) RECYCLER
Scooby!. it ‘s autorun look like
[AutoRun]
open=RECYCLER.exe
shellexecute=RECYCLER.exe
shell\Auto\command=RECYCLER.exe
So I tried to rename it .but pity thing s it get replicated as the renamed name.but I could delete the renamed one but not the original.bcoz it w‘s write protected
Actually it b’longs 2 a trojan family..i certainly cleared this using antivrus[mcafee I used] with ease or by spy bot.search n yahoo answers may help u.I h’d learnt following sols to recover the hidden folder
1.if u knw the folder name enter n win address or u can make use of the cmdprompt
2.if u can’t remember the name.chechk it in linux[virus wnt work] or use windows
Vista
AND instead of creating folder, create new zip or .rar folder at best .[most of the pen sticks supports]
do registryfix HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
Update ur anti virus regularly
On the post above:
Can anyone tell me WHICH entry or value should be changed here and HOW:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL?
mangaimano said
DELETE the value CheckedValue in the right window. (Its type should be REG_SZ and data should be 2.)
Now create a new DWORD value called CheckedValue (same as above, except that the type is REG_DWORD). Modify the value data to 1 (0×00000001).
please refer the following link
http://forums.cnet.com/5208-6142_102-0.html?forumID=5&threadID=232457&messageID=2396828