Home > General > C:\recycler\s-1-5-21

C:\recycler\s-1-5-21

Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy logo-symantec-dark-source I have four hard drivers in my computer the four of them repet the same folder and files. I ran the following commands but after rebooting, the s-1-5-2 virus reinserted itself. You may find that although you have determined there are deleted files within one or more of the C:\recycler\S-1-5-21**** folders, these files may be hidden or inaccessible.

S - The string is a SID.1 - The revision level.5 - The identifier authority value. 21-1417001333-920026266-725345543 - Domain or local computer identifier.1003 A Relative ID (RID). etc the recycle bin is configurated to use one setting for all drivers, and is empty Is that ok? hopefully your last instructions can keep me safe... Then reboot and Enable System Restore to create a new clean Restore Point. https://www.bleepingcomputer.com/forums/t/272858/recycler-s-1-5-21/

Learn More. etc... On FAT file systems, the folder is named Recycled. Emptying C:\recycler Started by Rick Duley , Feb 19 2009 12:00 AM Please log in to reply 8 replies to this topic #1 Rick Duley Rick Duley TEG Forum Member Members

wonder if that was ok or enough... c:\recycler\S-1-0-5.. Question has a verified solution. Hassle-free live chat software re-imagined for business growth. 2 users, always free.

my other question is, if i delete the partitions on both drives, reinstall xp and load up malware bytes and avast home, will they detect infected files when i reload them. no scan ive run has picked it up. Attached Files: SUPERAntiSpyware Scan Log - 02-07-2009 - 11-51-10.log File size: 465 bytes Views: 4 mbam-log-2009-02-06 (21-53-00).txt File size: 897 bytes Views: 3 SpybotSD.Report.txt File size: 1.9 KB Views: 4 vvgomez, If you need technical support please post a question to our community.

They are useful as backup scanners. Download this: http://www.thatcomputerguy.us/downl...ditnt2000xp.zip Extract find.bat and run it. but I got a kind of surfphobia after this... what happen if I delete desktop.ini with no restore point and it was a good file?

  1. There are various ways to delete these hidden files as VA(s)T has pointed out.Also see Recycle bin is corrupt? 0 ..Microsoft MVP Consumer Security 2007-2015 Microsoft MVP Reconnect 2016Windows Insider MVP
  2. This will be demonstrated using Microsoft Expression Encoder 4.
  3. Hang in there...
  4. vvgomez, Feb 3, 2009 #4 vvgomez Private E-2 update...
  5. Join & Ask a Question Need Help in Real-Time?
  6. Newer Than: Search this thread only Search this forum only Display results as threads Useful Searches Recent Posts More...
  7. I have not detected any effect on the operation of any programs. -------------------------------------------- Rick Duley North Perth, Western Australia .-_|\ / \ perth *_.-._/ v -------------------------------------------- "Good counsel failing men may
  8. I cannot delete this folder.
  9. vvgomez, Feb 6, 2009 #7 TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member They may be malware......though the desktop.ini is a normally hidden system file.

Cause The Sophos Endpoint may have problems cleaning Malware from therecycle bin for another logged on user account What To Do The following set of instructions will allow you to locate Source unfortunately, so did the new RECYCLER folder. Connect with top rated Experts 26 Experts available now in Live! Best of luck!

vvgomez, Feb 6, 2009 #11 TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member If you have re-enabled system restore, then all is fine. c:\recycler\S-1-0-5... This number, starting from 1000, increments by 1 for each user that's added by the Administrator. 1003 means the 3rd user profile that was created.Well-known SIDsWell-known security identifiers in WindowsOnce the This morning I used a similar process to the one in my earlier post to delete 350-odd files from recycler.

What do I do? 0 user(s) are reading this topic 0 members, 0 guests, 0 anonymous users Reply to quoted postsClear BleepingComputer.com → Security → Am I infected? After doing the above, you should work thru the below link: How to Protect yourself from malware! Do you think is necesary to post you a last HijackThis log to see if everything is ok? Back to top #4 VA(s)T VA(s)T Senior TEG Forum Member Members 3,131 posts Location:The Netherlands Interests:Huh?

Removal of such malicious files sometimes can be difficult and may require security tools that scan such areas for these threats. They were the files of a software project on which I am still working. The Recycler folder is hidden by default unless you reconfigured Windows to show hidden files and folders by unchecking "Hide protected operating system files" in Tools > Folder Options > View.

Click here to Register a free account now!

Windows Explorer (WE) did not display this data despite WE -> Tools -> Folder Options -> View -> 'Show hidden files and folders' being set and WE -> Tools -> Folder But i would go for the brute force way without cmd prompt i described above.I don't know about this being a recycle bin problem. dawgg 16.11.2008 20:07 Which cant be deleted by Kaspersky or manually?Location? I had a look in the KillBox quarantine folder and it had in it all the stuff the old RECYCLER folder had.

can't be delete Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by vvgomez, Feb 3, 2009. Covered by US Patent. Generated Wed, 01 Feb 2017 22:33:58 GMT by s_wx1219 (squid/3.5.23) Help - Search - Members Full Version: Virus cannot be deleted Kaspersky Lab Forum > English User Forum > Virus-related issues READ & RUN ME sticky not followed.

now that I am more relaxed and started reading line by line I understand what I missed...