Forum Home
Press F1
 
Thread ID: 97625 2009-02-22 05:06:00 Recycler Backdoor Trojan - Won't go away kandrew009 (14426) Press F1
Post ID Timestamp Content User
750223 2009-02-22 05:06:00 I need help getting the backdoor trojan off my computer and portable devices.
To open my portable devices I have to right click and then go explore. If I just try to double click it says not available.
I have restarted in safe mode, ran symantec antivirus. When I selected my portable drive it sees the recycler file but when it scans that drive it says there is no virus.
I have downloaded malwarebytes also but it doesn't detect the file.
Help. It keeps reinfecting everything I plug into my computer and the virus scan isn't catching it.
Thank you,
Kristina
kandrew009 (14426)
750224 2009-02-22 05:07:00 I have also ran a system scan in safe mode and nothing. :o( I checked some of the typical registry files and there is nothing abnormal there. kandrew009 (14426)
750225 2009-02-22 05:10:00 Download trojan remover as well install update it and run it. Also download and run Hijack this and post the log result back here gary67 (56)
750226 2009-02-22 05:22:00 Disable system restore first

It was probably on the system and something detected it / deleted it. Which is why its in recycled

If the virus scanner, picked it up whats the name of it.

Get ccleaner (http://www.ccleaner.com) run it then click on run cleaner

Close browsers first

If this is XP, is it Home or Pro?

If its Pro, disable system restore first, open my computer, go to tools / folder options / view. Untick simple file sharing. And untick hide protected system files and select show hidden files

Highlight the recycled folder / right mouse / properties / security tab

Click on add. In the bottom, type in the name that appears at the top of the start menu / check names, if its right it''ll complete it. Then tick everything under allow then OK. Open the folder, delete whats inside this folder

Do the same for system volume information folder

Then reboot, then I would use something better than Symantec AV
Speedy Gonzales (78)
750227 2009-02-22 06:03:00 What should I use other than symantec? I've always had troubles with anti virus scanners not preforming. kandrew009 (14426)
750228 2009-02-22 06:04:00 Avast home (http://www.avast.com)

Its free, but you do have to get a serial to register it every year / 14 mths or something. The link is on the site above

Or NOD32 if you want to pay for it
Speedy Gonzales (78)
750229 2009-02-23 01:25:00 I can not change the security of the folder, so that I can delete the files. It worked fine on my mom's computer that has pro but, I also have this problem on my home laptop and it's running xp home. Any ideas? kandrew009 (14426)
750230 2009-02-23 01:40:00 You have to do it in safe mode, if its XP Home Speedy Gonzales (78)
750231 2009-02-23 01:56:00 What should I use other than symantec? I've always had troubles with anti virus scanners not preforming.

NOD32 is the best one. Its not free. If you must have free then Avast as Speedy says.

You should also have at least 2 antispywares: Spybot and Malware Bytes will do.
pctek (84)
750232 2009-02-23 02:21:00 OK... No laughing please keeping in mind that I am extremely tired and have a sick 8 month old baby.
Malwarebyted picked up a trojan.agent: c:\recycler\s-1-5-21-1482476501-1644491937-692003330-1013\destop.ini and c:\recycler\s-1-5-21-1482476501-1644491937-692003330-1013\xop32.exe and folder c:\recycler\s-1-5-21-1482476501-1644491937-692003330-1013\ and a registry key.
My question are the recycler folder and system volume folder normal folders and the trojan is just implanting itself there?
This is driving me crazy as it's on my flash drives, my sd cards and something else.
help please.
Kristina
kandrew009 (14426)
1