Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to remove $Recycle.Bin and System Volume Information virus?

10 Oct 2012   #1
rextz101

Windows 7 Enterprise 32 bit
 
 
How to remove $Recycle.Bin and System Volume Information virus?

I run a 32-bit Windows 7 machine as well as a 64-bit Windows 7 laptop. I also have a few USBs and Hard-Drives infected with the $Recycle.Bin. I am not sure if it is a virus; however, on my Hard-Drive it has made everything hidden and the FOLDER PROPERTIES (not FOLDER AND SEARCH OPTIONS) wont let me unhide the folders. Also on my laptop, it has deleted My Documents, My Pictures, My Music etc files, and the only way I can access them is through AppData (so technically it hasn't deleted them). When I unhide system files and hidden files (through FOLDER AND SEARCH OPTIONS), it shows a bunch of random folders that I have never seen before.

I have tried several anti-virus and anti-malware programs but I will not hesitate to do it again, if that is what I have to do. Hope someone can help get rid of this BOTH on my PC and LAPTOP as well as my HARD-DRIVES and USBs. Thanks!


My System SpecsSystem Spec
10 Oct 2012   #2
Coram Daes

W7x64P
 
 

$Recycle.Bin and System Volume information are system folders that are normally created (as far as I know) on all system attached harddrives.
If you right click on your recycle bin link on your desktop you will see it has allocated space for all drives and partitions that is connected to the computer.

I do not know why you are unable to show you hidden files, but if that were the case you would not see these folder either. Screenshots, more info, please?
My System SpecsSystem Spec
10 Oct 2012   #3
rextz101

Windows 7 Enterprise 32 bit
 
 

I have enabled "Show hidden files, folders and drives" and disabled "Hide protected operating system files" in the Folder Options (in Control Panel). Due to these settings I can view the $RECYCLE.BIN and System Volume Information folders. I can also see hidden folders that were not previously hidden a week ago. However these folders were shortcuts for some reason a week ago. About a month ago, the hard disk was working perfectly fine. However, when I make a new folder in my hard disk now, it is not hidden.
My System SpecsSystem Spec
10 Oct 2012   #4
rextz101

Windows 7 Enterprise 32 bit
 
 


That is an image of my hard disk. Sorry, I had to blur out my private folders, but hopefully you can tell the difference between the hidden folders and normal folders. Just to confirm, are you saying that $RECYCLE.BIN and System Volume Information folders are created by Windows itself and are NOT a virus? I have scanned my hard disk with a free version of Malwarebytes Anti-Malware (version 1.65.0.1400) and it has not found any malicious objects. So now I need a solution to unhide those folders. I do not have access to unhide any of the hidden folders. Please see the image for more details.
My System SpecsSystem Spec
10 Oct 2012   #5
rextz101

Windows 7 Enterprise 32 bit
 
 

If you cannot view the images above, here are the links:
Image of Hard-Disk folders: Folder
Image of Folder PROPERTIES (why I cant unhide them): Folder Properties
My System SpecsSystem Spec
10 Oct 2012   #6
Kevin Ismail

Windows 7 Ultimate x64
 
 

Hi Rext.
Welcome to SF

I've come across some similar cases as yours. Unfortunately once your system is infected and the virus becoming resident, any attempt to install any new AV or malware program will mostly fail as the virus itself already taking control of PC (system) environment. There are many simple local viruses in our area that hiding the folders making it non reversed read only, creating fake folder in any USB drive named Recycler. They even reside in system Volume Information folder that is unreachable by normal folder browsing.

Here is the the cure that I mostly do.
  1. Pull out the HDD, connect it to other known-virus-free system that has good AV protection. Make sure not to boot from it as you may spread the virus to the clean HDD.
  2. Copy/backup as much important data as possible.
  3. Format all known infected drive(s). It will also erase all virus reside in Volume Information folders.
  4. Shut down, put back HDD to its origin.
  5. Fresh install.
  6. When done with installation, copy back all data with good AV is active. many of the folder that were attributed as hidden might not be able to be reversed, then just copy the content.
That the only idea I can offer

Kevin.
My System SpecsSystem Spec
10 Oct 2012   #7
DarkStar GT

Windows Home Premium (64)
 
 

Quote   Quote: Originally Posted by rextz101 View Post
Just to confirm, are you saying that $RECYCLE.BIN and System Volume Information folders are created by Windows itself and are NOT a virus?
Yes, they are Windows-created folders. And, as far as I know, Windows does not let you open them. If you make a back-up image (using, e.g. Acronis True Image) then you could explore them in the backup.

I recommend that you leave them alone.
My System SpecsSystem Spec
10 Oct 2012   #8
Coram Daes

W7x64P
 
 

Quote   Quote: Originally Posted by rextz101 View Post
If you cannot view the images above, here are the links:
Image of Hard-Disk folders: Folder
Image of Folder PROPERTIES (why I cant unhide them): Folder Properties

The USB is marked as Read-only. That may prevent you from doing changes.
My System SpecsSystem Spec
10 Oct 2012   #9
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by rextz101 View Post
I run a 32-bit Windows 7 machine as well as a 64-bit Windows 7 laptop. I also have a few USBs and Hard-Drives infected with the $Recycle.Bin. I am not sure if it is a virus; however, on my Hard-Drive it has made everything hidden and the FOLDER PROPERTIES (not FOLDER AND SEARCH OPTIONS) wont let me unhide the folders. Also on my laptop, it has deleted My Documents, My Pictures, My Music etc files, and the only way I can access them is through AppData (so technically it hasn't deleted them). When I unhide system files and hidden files (through FOLDER AND SEARCH OPTIONS), it shows a bunch of random folders that I have never seen before.

I have tried several anti-virus and anti-malware programs but I will not hesitate to do it again, if that is what I have to do. Hope someone can help get rid of this BOTH on my PC and LAPTOP as well as my HARD-DRIVES and USBs. Thanks!
C:\users\<your name>\Documents is location of "My documents" . It's not in appdata! Same for my images, my pictures etc.

If you activate "show hidden files" everythings is normal?
really all folders are hidden?
My System SpecsSystem Spec
10 Oct 2012   #10
rextz101

Windows 7 Enterprise 32 bit
 
 

Quote   Quote: Originally Posted by Kaktussoft View Post
Quote   Quote: Originally Posted by rextz101 View Post
I run a 32-bit Windows 7 machine as well as a 64-bit Windows 7 laptop. I also have a few USBs and Hard-Drives infected with the $Recycle.Bin. I am not sure if it is a virus; however, on my Hard-Drive it has made everything hidden and the FOLDER PROPERTIES (not FOLDER AND SEARCH OPTIONS) wont let me unhide the folders. Also on my laptop, it has deleted My Documents, My Pictures, My Music etc files, and the only way I can access them is through AppData (so technically it hasn't deleted them). When I unhide system files and hidden files (through FOLDER AND SEARCH OPTIONS), it shows a bunch of random folders that I have never seen before.

I have tried several anti-virus and anti-malware programs but I will not hesitate to do it again, if that is what I have to do. Hope someone can help get rid of this BOTH on my PC and LAPTOP as well as my HARD-DRIVES and USBs. Thanks!
C:\users\<your name>\Documents is location of "My documents" . It's not in appdata! Same for my images, my pictures etc.

If you activate "show hidden files" everythings is normal?
really all folders are hidden?
Yes, thats the folder I meant.

No, I cannot activate "show hidden files" as you can see in the second image.
My System SpecsSystem Spec
Reply

 How to remove $Recycle.Bin and System Volume Information virus?




Thread Tools





Similar help and support threads
Thread Forum
Virus - Access denied - H:\system volume information
Access denied - H:\system volume information, I’m confronting serious problem due the virus that 1. Hides folders 2. Generate shortcuts Through the search in the web, none of the solutions could remove this virus! According to one of the advices, the...
System Security
System Volume Information and $RECYCLE.BIN wont delete
its nearly the same problem as this thread http://www.sevenforums.com/system-security/283727-virus-access-denied-h-system-volume-information-3.html i have files laying on the hdd but i cant remove them. it tried reformatting but using roguekiller to fix shortcuts only brings them back. and i...
System Security
Couldn’t delete folders: “$RECYCLE.BIN” and “System Volume Information
Couldn’t delete folders: “$RECYCLE.BIN” and “System Volume Information” , I wanted to delete two folders from my external hard drive but sounds not to work (attached) What might be the issue? How to delete them? Thank you
General Discussion
Removing System Volume Information virus with $recycle bin
Buddies, With some of steps with this link, i got to delete the folder RECYCLER. However, the System Volume Information folder dont allow the access to delete it (MSDOS or Explorer). I know that have to manage folder options, to show hidden files, etc... run CMD as Administrador and the...
System Security
How can I remove System Volume Information on a USB drive
I was wondering if anyone can help me please .. how one removes SVI from a non-fixed USB disk? I have system restore switched off on this drive..shows zero on scale but the disk has 623mb of SVI information possibly from a previous restore point setting..not sure where it came from Not sure if...
General Discussion
System Volume Information 109 GB !!
So, I set configs to allow 111 GB for System Restore, thinking I'd buy some extra insurance, on a 1.5 TB HDD. And now looking why I can't create Drive Image backup on 250 GB Drive, when I used to. Turns out, the last "critical" update for Win7 restore point is using a whopping 70 GB of space. ...
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 06:22.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App