Windows 7: How to remove $Recycle.Bin and System Volume Information virus?

I run a 32-bit Windows 7 machine as well as a 64-bit Windows 7 laptop. I also have a few USBs and Hard-Drives infected with the $Recycle.Bin. I am not sure if it is a virus; however, on my Hard-Drive it has made everything hidden and the FOLDER PROPERTIES (not FOLDER AND SEARCH OPTIONS) wont let me unhide the folders. Also on my laptop, it has deleted My Documents, My Pictures, My Music etc files, and the only way I can access them is through AppData (so technically it hasn't deleted them). When I unhide system files and hidden files (through FOLDER AND SEARCH OPTIONS), it shows a bunch of random folders that I have never seen before.



I have tried several anti-virus and anti-malware programs but I will not hesitate to do it again, if that is what I have to do. Hope someone can help get rid of this BOTH on my PC and LAPTOP as well as my HARD-DRIVES and USBs. Thanks!

$Recycle.Bin and System Volume information are system folders that are normally created (as far as I know) on all system attached harddrives.
If you right click on your recycle bin link on your desktop you will see it has allocated space for all drives and partitions that is connected to the computer.

I do not know why you are unable to show you hidden files, but if that were the case you would not see these folder either. Screenshots, more info, please?

I have enabled "Show hidden files, folders and drives" and disabled "Hide protected operating system files" in the Folder Options (in Control Panel). Due to these settings I can view the $RECYCLE.BIN and System Volume Information folders. I can also see hidden folders that were not previously hidden a week ago. However these folders were shortcuts for some reason a week ago. About a month ago, the hard disk was working perfectly fine. However, when I make a new folder in my hard disk now, it is not hidden.

That is an image of my hard disk. Sorry, I had to blur out my private folders, but hopefully you can tell the difference between the hidden folders and normal folders. Just to confirm, are you saying that $RECYCLE.BIN and System Volume Information folders are created by Windows itself and are NOT a virus? I have scanned my hard disk with a free version of Malwarebytes Anti-Malware (version 1.65.0.1400) and it has not found any malicious objects. So now I need a solution to unhide those folders. I do not have access to unhide any of the hidden folders. Please see the image for more details.

If you cannot view the images above, here are the links:
Image of Hard-Disk folders: Folder
Image of Folder PROPERTIES (why I cant unhide them): Folder Properties

Hi Rext.
Welcome to SF

I've come across some similar cases as yours. Unfortunately once your system is infected and the virus becoming resident, any attempt to install any new AV or malware program will mostly fail as the virus itself already taking control of PC (system) environment. There are many simple local viruses in our area that hiding the folders making it non reversed read only, creating fake folder in any USB drive named Recycler. They even reside in system Volume Information folder that is unreachable by normal folder browsing.

Here is the the cure that I mostly do.

1. Pull out the HDD, connect it to other known-virus-free system that has good AV protection. Make sure not to boot from it as you may spread the virus to the clean HDD.
2. Copy/backup as much important data as possible.
3. Format all known infected drive(s). It will also erase all virus reside in Volume Information folders.
4. Shut down, put back HDD to its origin.
5. Fresh install.
6. When done with installation, copy back all data with good AV is active. many of the folder that were attributed as hidden might not be able to be reversed, then just copy the content.

That the only idea I can offer

Kevin.

Yes, they are Windows-created folders. And, as far as I know, Windows does not let you open them. If you make a back-up image (using, e.g. Acronis True Image) then you could explore them in the backup.

I recommend that you leave them alone.

The USB is marked as Read-only. That may prevent you from doing changes.

C:\users\<your name>\Documents is location of "My documents" . It's not in appdata! Same for my images, my pictures etc.

If you activate "show hidden files" everythings is normal?
really all folders are hidden?

Yes, thats the folder I meant.

No, I cannot activate "show hidden files" as you can see in the second image.