Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: How to remove $Recycle.Bin and System Volume Information virus?

10 Oct 2012   #1

Windows 7 Enterprise 32 bit
 
 
How to remove $Recycle.Bin and System Volume Information virus?

I run a 32-bit Windows 7 machine as well as a 64-bit Windows 7 laptop. I also have a few USBs and Hard-Drives infected with the $Recycle.Bin. I am not sure if it is a virus; however, on my Hard-Drive it has made everything hidden and the FOLDER PROPERTIES (not FOLDER AND SEARCH OPTIONS) wont let me unhide the folders. Also on my laptop, it has deleted My Documents, My Pictures, My Music etc files, and the only way I can access them is through AppData (so technically it hasn't deleted them). When I unhide system files and hidden files (through FOLDER AND SEARCH OPTIONS), it shows a bunch of random folders that I have never seen before.

I have tried several anti-virus and anti-malware programs but I will not hesitate to do it again, if that is what I have to do. Hope someone can help get rid of this BOTH on my PC and LAPTOP as well as my HARD-DRIVES and USBs. Thanks!

My System SpecsSystem Spec
.

10 Oct 2012   #2

W7x64P
 
 

$Recycle.Bin and System Volume information are system folders that are normally created (as far as I know) on all system attached harddrives.
If you right click on your recycle bin link on your desktop you will see it has allocated space for all drives and partitions that is connected to the computer.

I do not know why you are unable to show you hidden files, but if that were the case you would not see these folder either. Screenshots, more info, please?
My System SpecsSystem Spec
10 Oct 2012   #3

Windows 7 Enterprise 32 bit
 
 

I have enabled "Show hidden files, folders and drives" and disabled "Hide protected operating system files" in the Folder Options (in Control Panel). Due to these settings I can view the $RECYCLE.BIN and System Volume Information folders. I can also see hidden folders that were not previously hidden a week ago. However these folders were shortcuts for some reason a week ago. About a month ago, the hard disk was working perfectly fine. However, when I make a new folder in my hard disk now, it is not hidden.
My System SpecsSystem Spec
.


10 Oct 2012   #4

Windows 7 Enterprise 32 bit
 
 


That is an image of my hard disk. Sorry, I had to blur out my private folders, but hopefully you can tell the difference between the hidden folders and normal folders. Just to confirm, are you saying that $RECYCLE.BIN and System Volume Information folders are created by Windows itself and are NOT a virus? I have scanned my hard disk with a free version of Malwarebytes Anti-Malware (version 1.65.0.1400) and it has not found any malicious objects. So now I need a solution to unhide those folders. I do not have access to unhide any of the hidden folders. Please see the image for more details.
My System SpecsSystem Spec
10 Oct 2012   #5

Windows 7 Enterprise 32 bit
 
 

If you cannot view the images above, here are the links:
Image of Hard-Disk folders: Folder
Image of Folder PROPERTIES (why I cant unhide them): Folder Properties
My System SpecsSystem Spec
10 Oct 2012   #6

Windows 7 Ultimate x64
 
 

Hi Rext.
Welcome to SF

I've come across some similar cases as yours. Unfortunately once your system is infected and the virus becoming resident, any attempt to install any new AV or malware program will mostly fail as the virus itself already taking control of PC (system) environment. There are many simple local viruses in our area that hiding the folders making it non reversed read only, creating fake folder in any USB drive named Recycler. They even reside in system Volume Information folder that is unreachable by normal folder browsing.

Here is the the cure that I mostly do.
  1. Pull out the HDD, connect it to other known-virus-free system that has good AV protection. Make sure not to boot from it as you may spread the virus to the clean HDD.
  2. Copy/backup as much important data as possible.
  3. Format all known infected drive(s). It will also erase all virus reside in Volume Information folders.
  4. Shut down, put back HDD to its origin.
  5. Fresh install.
  6. When done with installation, copy back all data with good AV is active. many of the folder that were attributed as hidden might not be able to be reversed, then just copy the content.
That the only idea I can offer

Kevin.
My System SpecsSystem Spec
10 Oct 2012   #7

Windows Home Premium (64)
 
 

Quote   Quote: Originally Posted by rextz101 View Post
Just to confirm, are you saying that $RECYCLE.BIN and System Volume Information folders are created by Windows itself and are NOT a virus?
Yes, they are Windows-created folders. And, as far as I know, Windows does not let you open them. If you make a back-up image (using, e.g. Acronis True Image) then you could explore them in the backup.

I recommend that you leave them alone.
My System SpecsSystem Spec
10 Oct 2012   #8

W7x64P
 
 

Quote   Quote: Originally Posted by rextz101 View Post
If you cannot view the images above, here are the links:
Image of Hard-Disk folders: Folder
Image of Folder PROPERTIES (why I cant unhide them): Folder Properties

The USB is marked as Read-only. That may prevent you from doing changes.
My System SpecsSystem Spec
10 Oct 2012   #9

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by rextz101 View Post
I run a 32-bit Windows 7 machine as well as a 64-bit Windows 7 laptop. I also have a few USBs and Hard-Drives infected with the $Recycle.Bin. I am not sure if it is a virus; however, on my Hard-Drive it has made everything hidden and the FOLDER PROPERTIES (not FOLDER AND SEARCH OPTIONS) wont let me unhide the folders. Also on my laptop, it has deleted My Documents, My Pictures, My Music etc files, and the only way I can access them is through AppData (so technically it hasn't deleted them). When I unhide system files and hidden files (through FOLDER AND SEARCH OPTIONS), it shows a bunch of random folders that I have never seen before.

I have tried several anti-virus and anti-malware programs but I will not hesitate to do it again, if that is what I have to do. Hope someone can help get rid of this BOTH on my PC and LAPTOP as well as my HARD-DRIVES and USBs. Thanks!
C:\users\<your name>\Documents is location of "My documents" . It's not in appdata! Same for my images, my pictures etc.

If you activate "show hidden files" everythings is normal?
really all folders are hidden?
My System SpecsSystem Spec
10 Oct 2012   #10

Windows 7 Enterprise 32 bit
 
 

Quote   Quote: Originally Posted by Kaktussoft View Post
Quote   Quote: Originally Posted by rextz101 View Post
I run a 32-bit Windows 7 machine as well as a 64-bit Windows 7 laptop. I also have a few USBs and Hard-Drives infected with the $Recycle.Bin. I am not sure if it is a virus; however, on my Hard-Drive it has made everything hidden and the FOLDER PROPERTIES (not FOLDER AND SEARCH OPTIONS) wont let me unhide the folders. Also on my laptop, it has deleted My Documents, My Pictures, My Music etc files, and the only way I can access them is through AppData (so technically it hasn't deleted them). When I unhide system files and hidden files (through FOLDER AND SEARCH OPTIONS), it shows a bunch of random folders that I have never seen before.

I have tried several anti-virus and anti-malware programs but I will not hesitate to do it again, if that is what I have to do. Hope someone can help get rid of this BOTH on my PC and LAPTOP as well as my HARD-DRIVES and USBs. Thanks!
C:\users\<your name>\Documents is location of "My documents" . It's not in appdata! Same for my images, my pictures etc.

If you activate "show hidden files" everythings is normal?
really all folders are hidden?
Yes, thats the folder I meant.

No, I cannot activate "show hidden files" as you can see in the second image.
My System SpecsSystem Spec
Reply

 How to remove $Recycle.Bin and System Volume Information virus?





Thread Tools



Similar help and support threads for2: How to remove $Recycle.Bin and System Volume Information virus?
Thread Forum
Solved Virus - Access denied - H:\system volume information System Security
Solved Couldn’t delete folders: “$RECYCLE.BIN” and “System Volume Information General Discussion
Removing System Volume Information virus with $recycle bin System Security
Solved ~8-9 GB used in C:\System Volume Information\ ? Performance & Maintenance
How can I remove System Volume Information on a USB drive General Discussion
System Volume Information Performance & Maintenance
C:\System Volume Information General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 09:29 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33