SysChat is a free online computer support community. Ask questions, share resources, contribute knowledge and discuss technology. Join our growing community to access all features. Register Now!

SysChat » Tutorials » Security » How to Remove the Recycler Virus


Guides and tutorials on computer security, antivirus, antispyware, malware, parental control, and privacy protection

LinkBack (6) Tutorial Tools
How to Remove the Recycler Virus

How to Remove the Recycler Virus

Published by KarlM

Default How to Remove the Recycler Virus

The Recycler virus is malicious code that originated from the worm W32.Lecna.H. It infiltrates a computer system through the Windows Autorun feature. The virus enters via permanent media, as well as removable devices (including CD-ROMs, DVDs, USB drives, memory sticks, and other devices). The Recycler copies all autorun.inf files on each drive, and duplicates itself onto all active computer drives.

An infection by the Recycler virus results in a hidden folder per active drive. The virus executes itself every time removable media is inserted. The virus alters the System Registry with a batch file and activates itself during start-up. Anti-virus programs may identify the presence of the Recycler virus, although many of these will be unable to eliminate it from the system. The virus is resistant to removable even after formatting of any the removable media.

Upon installation of the Recycler virus, your browser will be redirected to malicious websites, upon which your computer will automatically download additional malicious code. This code will then be able to fleece various private information, including account numbers, credit card data, passwords, social security information, and usernames stored within the system.

Recycler Virus Manual Removal

1. End the Recycler Virus Processes. Press the Ctrl, Alt, and Delete keys simultaneously to access Windows Task Manager. [Ctrl + Alt + Esc] will also allow access to the program. Look for the [ctfmon.exe] process, select it, and choose ‘End Process’.

2. Erase the Recycler Virus Files. Click on the ‘Start’ menu on your desktop and proceed to the ‘Search’ option. Go to ‘For Files and Folders’ and choose the [ctfmon.exe] file. Erase this file.

3. Restart your system in ‘Safe Mode’. Access the command prompt and disable the following folders and files associated with [autorun.inf]:
• Hidden folders
• System folders
• Read-only attributes

4. Change the associated Recycler Virus entries in the Windows Registry. Go to the Windows Registry Editor. Modify the ‘NoDriveTypeAutoRun’ entries which have the ‘03fffffff’ value in these registry folders:

5. Download any reputable antivirus software. Make sure that the virus database is updated. Reboot your system and do a thorough scan after cleaning up the Recycle Bin.

As always, professionals or users with proficient working knowledge of amending contents of the Windows Registry should undergo manual removal of the Recycler Virus or any malicious code. Any erroneous alterations may result in critical system damage. The best course to resolve this issue is to download, install, and properly utilize a specialized virus removal program.

By jubert on 11-08-2009, 11:07 PM

could i just remove the harddisk and scan it with an anti-virus? I've done this once and it was fine. recycler virus replicated too fast and so many. This can't be remove by formatting if not to format all drives and leave no file left, complete reformat of the harddisk.
Reply With Quote

Tutorial Tools

LinkBacks (?)
LinkBack to this Thread:
Posted By For Type Date Hits
How to remove recycler virus from rootkit? - Yahoo! Answers This thread Refback 01-10-2011 05:01 AM 2
How to remove recycler virus from rootkit? - Yahoo! Answers India This thread Refback 01-07-2011 07:14 AM 2
How to Remove the Recycler Virus From a USB | This thread Refback 10-18-2010 05:09 PM 165
Download recycler Virus Removal Tool - 3D Search This thread Refback 07-20-2010 12:20 AM 1
Recycler Folder - PCWorld Forums This thread Refback 05-10-2010 03:06 AM 122
CTFMON.EXE, troianul RECYCLED « Mister Pan(k)sament This thread Refback 09-03-2009 03:56 AM 168

Similar Threads
Tutorial Tutorial Starter Category Comments Last Post
Remove the Google Hijack Virus! KarlM Security 0 06-17-2009 07:06 AM
How to Remove the Raila Odinga Virus KarlM Security 3 04-01-2009 10:30 AM
Remove Win32 Heur Virus: Windows Vista and XP KarlM Security 0 02-19-2009 09:49 PM
remove pen drive virus poojakumar General Tech Support 1 05-31-2008 05:23 PM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are on

» Ads

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54