I have the same issue, but I can't get rid of it.
Symptoms:
1) At search engines, if I click a link from the search results, a browser hijack sends me to some other crap page. If I go back to the results and click the link a second time, it goes through properly.
2) It originally had an autorun.inf on all my hard drives and ran ctfmon without my permission and was clearly disguising itself as ctfmon because ctfmon only runs after running a Microsoft Office product, which I don't own.
3) As usual with RECYCLER, I cannot remove it without returning itself. And it is malicious, I don't feel like describing it all in detail, but this is not just my Recycle bin. It has a file named "S-1-5-21-275612506-2139200233-1739133022-1005" in the RECYCLER folder, and another hidden folder in addition to the original poster's folders named RRbackups
What I have done:
1) I installed hijackthis, couldn't even get it to run. I double click the installed exe and nothing happens. I've tried reinstalls and nothing helps.
2) I ran TrendMicro antivirus which has only failed me this one time, and it found nothing, even in safe mode.
3) I ran just about every free anti-virus and anti-spyware software out there, and got nothing, including malware bytes, ad-aware, and superanitspyware. All of them came up empty.
4) I ran the USB flash drive cleaner, and all that did was create the autorun.inf folder which I now on my hard drive and usb external harddrive for all of eternity, but has not stopped RECYCLER from coming back.
The only two things that has stopped me from formatting and starting fresh are this:
1) It is on my external hard drive which is my only Backup option, so as soon as I restore the backup, im right back where I started.
2) I've read reports of this bastard persisting through formats, which I know can be possible, just rare.
PLEASE HELP, I'm really sick of this annoying piece of software, and I just want it to go away.
Symptoms:
1) At search engines, if I click a link from the search results, a browser hijack sends me to some other crap page. If I go back to the results and click the link a second time, it goes through properly.
2) It originally had an autorun.inf on all my hard drives and ran ctfmon without my permission and was clearly disguising itself as ctfmon because ctfmon only runs after running a Microsoft Office product, which I don't own.
3) As usual with RECYCLER, I cannot remove it without returning itself. And it is malicious, I don't feel like describing it all in detail, but this is not just my Recycle bin. It has a file named "S-1-5-21-275612506-2139200233-1739133022-1005" in the RECYCLER folder, and another hidden folder in addition to the original poster's folders named RRbackups
What I have done:
1) I installed hijackthis, couldn't even get it to run. I double click the installed exe and nothing happens. I've tried reinstalls and nothing helps.
2) I ran TrendMicro antivirus which has only failed me this one time, and it found nothing, even in safe mode.
3) I ran just about every free anti-virus and anti-spyware software out there, and got nothing, including malware bytes, ad-aware, and superanitspyware. All of them came up empty.
4) I ran the USB flash drive cleaner, and all that did was create the autorun.inf folder which I now on my hard drive and usb external harddrive for all of eternity, but has not stopped RECYCLER from coming back.
The only two things that has stopped me from formatting and starting fresh are this:
1) It is on my external hard drive which is my only Backup option, so as soon as I restore the backup, im right back where I started.
2) I've read reports of this bastard persisting through formats, which I know can be possible, just rare.
PLEASE HELP, I'm really sick of this annoying piece of software, and I just want it to go away.
