cannot find file d:\recycler\S-1-5-~1\DD7 etc.......

I had the same problem with my system. Mine would say Recycler\s-1-7-37****6616.com. Spiider11 had 6712.com so it must be a different name for everyone. In Windows Task Manager i could see the ****6616.com file running in the processes section so i ended it .My shortcuts to each partition worked but i couldn't access the partition directly from "MY Computer". I found that i could still access the partition by going to Start / Run / and entering C:/ or whatever letter the partition was on. Whatever was causing the problem for me was in the Recycler folder. The folder had three files in it (1.) recycler file (2.) Recycler file with .com in the name (3.) Batch file . I deleted files 2 and 3 on each partition. I also searched the registry (Start / Run / Regedit) Then i went to Edit / Find and searched for the last part of my file name "6166.com" I found two entries in the autostart for each of the partitions. I just deleted each one and restarted my computer. That fixed it for me.

Quote:

---

Originally Posted by trip0x

The autoexec.bat is a hidden file, you need to make sure that not only is 'Show hidden system files and folders' is checked but also that 'Hide protected system operating files' is un checked..

These actions if applied to all your files and folders should allow you to see the RECYCLER folder which will be in the root of each of your hard drives.. i.e. C:\RECYLCER

also my .ini file was autorun.ini not autoexec.ini as stated on spiiders post.. if you dont delete all the files it will still be on your computer :D

---

I don't have autorun.ini or autoexec.ini. Only autorun.inf and autoexec.bat .
The problem remain .

This discussion is totally worthless.
As I said before, this is some malware issue, and all of you who are having this problem, should follow the steps, I listed in reply #7, and start a new topic in HJT forum.

Quote:

---

Originally Posted by Broni

This discussion is totally worthless.
As I said before, this is some malware issue, and all of you who are having this problem, should follow the steps, I listed in reply #7, and start a new topic in HJT forum.

---

I followed the steps and I started a new topic in HJT forum but nobody answered me.

http://discussions.virtualdr.com/sho...d.php?t=236785

Excellent, now we have to wait until some one gets home from work or the like. Remember we are scattered all over the world.

windows cannot find RECYCLER\S-8-6-76-100003598-100010904-100014070-6284.com

Download Autorun Eater. this is a free program. This will take care of your problem.

Quote:

---

Originally Posted by sikosrus

windows cannot find RECYCLER\S-8-6-76-100003598-100010904-100014070-6284.com

Download Autorun Eater. this is a free program. This will take care of your problem.

---

Thanks a million ....worked like a charm :D

Quote:

---

Originally Posted by sikosrus

windows cannot find RECYCLER\S-8-6-76-100003598-100010904-100014070-6284.com

Download Autorun Eater. this is a free program. This will take care of your problem.

---

Thanks a million...it worked like a charm :D

I have had a similar problem before and upon my own investigations, I found that there was a call being made from the system to a hidden system file within the recycle bin folder. This file IS in fact a virus, that attaches itself to programs on a USB key or other removable drives. Once the program is loaded, it "triggers" a hidden installation process and keeps the file loaded at all times (or at least locks the file). Loading the computer in safe-mode (F8 at startup), removing ALL attributes using the attrib command (you can google how to use it) should make the file deletable, but if it has already infected your system files, this might not work (see below if this is the case) but you must ALSO remove the reference to the file with HiJackThis before the reboot. The removable drive and whole computer should be scanned for this virus with an updated anti-virus after you do that (after re-boot).

If the files are un-deletable in safe-mode with the attributes cleared:
Insert your windows installation CD, do a repair if possible (Windows XP). If not, do a re-install. Make sure that after it is done it does NOT load into windows, but into safe-mode instead (to avoid being re-infected). Once loaded in safe-mode, immediately run "sfc /scannow", and when that is done, run "sfc /purgecache". This is to make sure that all of the files are replaced with signed versions. Restart and GO BACK INTO SAFE-MODE. Now, within safe-mode, re-try the attribute change and delete of the file. After that is done, scan with HiJackThis and then re-start into Windows and run the updated Anti-Virus program to get rid of the rest.