Scratch

Recycler is Conficker.C's fake folder. It hides in system files, and my school computers have it. It doesn't do anything, as far as we know.

1. Boot into safe mode (I think it's hold F8 during start up)
2. On different USB, save malwarebytes or something from a different computer.
3. Run it on the computer with the virus (on safe mode)
4. Hope

i tried it, but th autorun.inf respawns.

Servine wrote:

FIXED!!     

I simply made a folder called autorun.inf in me USB, and now, no autoruns can be made! few drawbacks. can't use autorun anymore and the recycler folder keeps spawning

Trying doing this:

Hello Friends,

i got one solution yesterday.

Step 1:

Create .bat file like "KillAutorun.bat" paste below code to bat file.



attrib -r autorun.inf
del autorun.inf
md autorun.inf
attrib +r +h autorun.inf
Dissable_auto_run.reg



Step 2:

Creating .reg File "Dissable_auto_run.reg" to stop windows Auto run.



REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveAutoRun"=dword:000000ff

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Policies"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
77,69,6e,64,6f,77,73,33,32,5f,72,61,69,6e,73,74,65,72,5c,6d,79,73,6c,69,64,\
65,73,2e,65,78,65,00


Step 3:

Palce both files (Dissable_auto_run.reg and KillAutorun.bat) in USB root.

Execute(doubble Click) KillAutorun.bat

Step 4:

Assume USB drive id is "I:"

Open I:\RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\

in this folder will have some exe file Eg: myslides.exe

Create one batch file same as Step 1.


Eg: Create .bat file like "KillAutorun.bat" paste below code to bat file.

attrib -r myslides.exe
del myslides.exe
md myslides.exe
attrib +r +h myslides.exe


Run this bat file from "I:\RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\"

Note: S-1-5-21-1482476501-3352491937-682996330-1013 this folder name will differ from one system to another system.

Found it on a website.