Haunted by the Backdoor Recycler Virus

[georgethetee]

Driving me round the frickin bend! Name any virus detector and NONE of them can deal with it, not Nortons, not AVG, not Trend, not any of them. You can right click and tell them to check it and they ALL assure you it does not contain a virus, only it IS a virus

What is the Recycler? It's a folder which appears on every drive you have with that name. Inside is a folder with number S-1-5-21- etc etc. At this point please may I stress THIS IS NOT THE RECYCLE BIN as some doughnuts insist, you can get rid of it with difficulty but it always but always comes back. Usually it's pretty harmless, just annoying, then suddenly your system starts pausing all the time and you know it's upto some no good, it usually ends up trying to use the RPC backdoor, which I shut up long ago.

It's of course Russian in origin, why did we ever pull down that iron curtain, everything was safer when we were all on the right side of it.

[-=Gib-McFragger=-]

It's not a virus, it's part of Windows. We all have it. :retard:

[-=DVS=-]

Hehe (spit) thanks for laugh.

[georgethetee]

Ha ha yerselves. See here:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.rpcbot.html

BTW, if you guys get an email from your bank asking to confirm your passwords, dont answer it. It's aimed exactly at guys like you and it is a scam

[-=DVS=-]

Obviously your not very smart and overreacting we all know what Tojan is , and specific one you linked to does this Creates the folder, C:\RECYCLER\S-1-5-21-57989841-1715567821-725345543-1004\LOGS, and copies Bot.rar into this folder. Recycler folder and all other numbers are perfecly normal 4. Deleting the files in the C:\RECYCLER\S-1-5-21-57989841-1715567821-725345543-1004\LOGS folder

1. Using Windows Explorer, look for the folder C:\RECYCLER

WARNING: Do not confuse this with the similarly named Recycle folder
2. Do one of the following:
* If the folder does not exist, go on to the next section.
* If the folder does exist, go on to step c.
3. In the C:\RECYCLER folder, look for the S-1-5-21-57989841-1715567821-725345543-1004 folder. If it exists, look for the LOGS subfolder within it.
4. Delete any files contained within the \Logs subfolder.
5. Delete the S-1-5-21-57989841-1715567821-725345543-1004\LOGS folder itself.

And wow you realy think we should not give out our Passwords , bank account numbers over Email :rolleyes2: only half brain monkey would do something like that.

[-=Gib-McFragger=-]

Ha ha yerselves. See here:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.rpcbot.html

BTW, if you guys get an email from your bank asking to confirm your passwords, dont answer it. It's aimed exactly at guys like you and it is a scam
Guys like us eh? Guys that are smart enough to know that there is a recycler folder in Windows that is NOT a Trojan. Just because you have the folder doesn't mean you have a trojan. It's a normal Windows folder, the trojan just creates a sub folder INSIDE it when you get infected. :retard:

Long story short: If you have a Recycler folder in Windows XP, don't automatically start screaming "OMG, I am soo ha><ord, someone help a n00b like me" :lol2:

Wait.......you mean I am NOT supposed to give them my passwords? Thanks for the sarcasm, but we are not (newb)'s

[Son Goku]

Plz tell me you're joking... The Recycle Bin is there for a reason :POKE:

This reminds me of the person who created a forum thread on one of the battle.net forums to warn people about a new cheat program that allows people to steal items...

The cheat program turned out to be someone telling him to go in a corner and drop all his items

then hold down the alt key while hitting F1 through F5 in quick succession...aka Alt + F4 He was warning everyone of this horrible hack and mentioning how Blizzard should do something to prevent these hackers from making cheat programs and how Blizzard was being irresponsible for allowing this, should be sued, or whatever... Someone finally laughed and reminded him of alt + F4 :D

Sorry man, but that isn't a virus...

[Kamel]

lol, omg that's hilarious.

thanks sir, the whole iron curtain and russian thing just kicked it up a notch. much needed entertainment for a stressful evening.

[CaptNKILL]

lmao :rofl :lol2:

george, as others have said, the Recycler folder is supposed to be there... if a trojan puts something in there that isnt supposed to be there, THEN you have a virus.

Go install windows on a computer that has no internet connection. You will have a Recycler folder. And obviously, you cant get a virus without an internet connection, sooo... case closed :D

[Skrot]

And obviously, you cant get a virus without an internet connection, sooo... case closed :DOh I dunno... I wouldn't put it past Microsoft to be able to have a security hole that bridges the connectivity gap... :)

[Daneel Olivaw]

as some doughnuts insist
Such a thread deserves flaming. Much flaming, evil flaming. Holier than thou flaming. Since we're doughnuts. I'm joking, I'm joking... :angel2:

That would be a nice band name, Flaming Doughnuts. Kinda reminds me of Smashing Pumkins.

[Drumphil]

:D:D:D lol, this thread is hilarious.

[CaptNKILL]

Such a thread deserves flaming. Much flaming, evil flaming. Holier than thou flaming. Since we're doughnuts. I'm joking, I'm joking... :angel2:

That would be a nice band name, Flaming Doughnuts. Kinda reminds me of Smashing Pumkins.
Smashing Pumkins... goood...

This thread.... baaad.....

:D

[CaptNKILL]

At this point please may I stress THIS IS NOT THE RECYCLE BIN as some doughnuts insist, you can get rid of it with difficulty but it always but always comes back.

http://www.nvnews.net/vbulletin/attachment.php?attachmentid=7904&stc=1


:lol2:

[saturnotaku]

:lol2:

Outstanding.

[CaptNKILL]

I likes my Paint Shop Pro :lol2:

[NightFire]

Oh man, you can't match the gold in this thread.

[CaptNKILL]

This is still teh funneh :rofl :lol2:

[Clay]

OMG. I am laughing soooo hard right now...

:rofl

[CaptNKILL]

!!!!!!!!!!!!!!!
http://www.nvnews.net/vbulletin/attachment.php?attachmentid=7930&stc=1

[NightFire]

:lol2:

Hilarious!

[CaptNKILL]

Oh ya, you laugh!

I bet you all have teh virus!

If you want to check, delete something then check your hard disk space! J00 dont get it back! Teh recycler viruss takes your supposedly deleted filez, stores them and searches them for pr0n, then sends the good stuff to teh Russians!!! If you dont believe me! You must be one of the rusky spies yourself!!!

nub!!!!

(crazy)(crazy)(crazy)

[Clay]

This just in... :D

http://www.nvnews.net/temp/clay/donuts.jpg

[CaptNKILL]

:lol2:

That was just nuts...

Well... Doughnuts :|(omg)

[Clay]

*drum snare* :D

I likes my PSP too. You have 9 yet? 7 and 8 weren't too hot IMO. 9 seems like a big improvement so far.