Spyware, viruses, & security forum: file with virus in recycle bin

the recyble bin or use any tools below:
Download ATF Cleaner
http://www.atribune.org/index.php?option=com_content&task=view&id=25&Itemid=25
Select "all items" in ATF Cleaner then click "empty selected items"

BTW, what's the name of the infection Norton found?

I ran a quick scan this morning to find the virus again so I could get the name and it didn't find it. I hadn't done anything since I posted here, so I'm not sure what happened. I'll try it again later today to see if it changes.

Is there a place I can look for the virus it found previously. I tried looking in the history, but all it had was that there was a virus, but it didn't name it. I just purchased norton this weekend when my trial subscription ran out, so i'm not sure which version. I was so flabbergasted that the virus was gone that I forgot to check lol.

Install Autorun Eater from http://www.download.com/Autorun-Eater/3000-2239_4-10752777.html

Hellow i need to talk to Mick York from symantec or another symantec personnel who specialises in Malware and Trojans or whatever, So mike could you cantack me I need your help to develop a removal tool for this recycler virus.. I think i now now where its comming from and why most ant virus giants cannot remove it. I have found the actual nesting place where it sources itself from.

Mike you need to reply my e-mail is dbrendo@gmail.com My knowledge on computers is limited but i do know my way around a bit. I need to talk to a qualified personnel. Anyone know any programmers who can help me? Please contact me.

You format you pc it dosent go away I think i kow why but i need a qualified personell to talk with. please assist..

Dereck

I inadvertently downloaded the virus onto my computer and as Norton Internet Security did it's Quick Scans it did not detect it for a week until I did a Full System Scan. At that point the virus/worm was detected and under the Action label was the message "Get Help" and stated it had to be manually resolved by using the Removal Tool for which I was taken to the Symantic website and ran the tool.

Unfortunately, after running the tool I receive a message stating the virus was not detected when clearly it still existed in my music folder. So I deleted the file myself and it was in the recycle bin. I emptied the recycle bin and the file appears to be gone.

However when I run Norton Internet Security 2009 with definitions updated 14 minutes ago, the virus is found with Affected Areas reported as '1 File & 1 Browser Cache' and the Details of where the virus is found is 'C:\recycle.bin\s-1-5-21-4221182752-1523537148-2203155865-1000\$rupnmod.mp3.

System Specs: Windows Vista Home Premium SP1, IE7, HP Pavilion dv4

Can I get rid of this thing with Norton or will I need to visit the GeekSquad?

Use Malwarebytes Anti-malware or another anti-malware instead.

Hi ccthatgirl,

If the removal tool did not remove all of the infected files, please follow the instructions in the document below to manually remove the infected files.

Manually remove Trojan Brisv A!inf

This particular infection usually comes from the use of file sharing and peer to peer applications like LimeWire, etc. Please read the following document for more information.

Information about Trojan.Brisv.A

Thanks,
Mike

Michael York
Norton Authorized Support Team
Symantec Corporation
http://service.symantec.com/priority

Michael York

Symantec Corporation

http://service.symantec.com/priority

Hi ccthatgirl,

The manual removal instructions will allow you to delete the infected files, as long as you run the scan in Windows Safe Mode. First, manually run LiveUpdate to ensure you have the latest updates applied, then restart your computer into Windows Safe Mode, launch Norton, and then run a "Full System Scan." When Norton notifies you of the infected files, select each one individually and choose to remove them.

Please try this method and let me know if you still are unable to remove the infected files.

Thank you,
Mike

Michael York
Norton Authorized Support Team
Symantec Corporation
http://service.symantec.com/priority

Michael York

Symantec Corporation

http://service.symantec.com/priority

Just a note before I begin: the Recycler folder is a system-protected folder that contains all (or at least most) of your file that have been emptied from the Recycle Bin.

There's also been indications that infected files deleted by any anti-virus programs end up there (that is why the original starter of this thread could not remove it). I have experienced it before with my BitDefender AV 2009, which have detected one particular file in that folder over & over again in real-time & on-demand scans.

Anyways, to remove files from this Recycler folder:

First go to Start > Run... (for Windows XP & earlier), then type in "cmd.exe". Then type in the following code:"rd /s /q c:\recycler".

Note that if this can also work if you have files deleted from any removable storage like thumb drives & portable hard drives, you can also empty the Recycler folders in them. Just change the drive name in the code above

E.g.

If drive is E:\, type in "rd /s /q e:\recycler"

Yes, I have test run this method, & it works in removing files I have deleted over the past year.

Hope this helps!

I'm working on removing a virus from an older Dell PC, running XP. It was infected with a new version of the Total Security Anti-Virus Trojan
I booted it up in Safe Mode, ran the scan, and deleted the files it found (a couple of registry entries, an exe, and a dll). After running the virus scan again, the virus detection that was there has disappeared, but a new one popped up in the location:
C:\RECYCLER\S-1-5-21-3334764220-1305196271-4071926818-500\Dc138.dll
It shows up as the same kind of Trojan that the first virus was.

Is this the same dll (from the virus) that I deleted? If so, is it still a threat? If so, how do I get rid of it once and for all?