Anti-Virus detecting E:\RECYCLER , but nothing found in E Drive.

sevenshaven

New member
Local time
8:55 AM
Messages
21
We all know that upon changing the folder view options in win7 , we get to see $Recycle.Bin folder and system volume information folder present in each drive, which are part of the system & definately not viruses .
And as far as i know -

$Recycle.bin folders holds on to those files which we delete from windows explorer to the recycle bin in c drive.
$Recycle.bin holds on to those files until we delete them from the c drive recycle bin.

System volume information contain files that are responsible for the restore point for our system
.

Now im gonna talk about the RECYCLER thingy. im using windows 7 (64bit) .
My Hard Disk has 3 partitions (C, D & E)
On 16th Oct 2013 while scanning with my Anti-Virus , the scan didn't work properly that day. I mean earlier it used to scan all my partitions . But that day (16th oct) it only scanned the C Drive partially and not fully.

The next day , the scan again started to work . and while the scan was in progress , it scanned the location E:\RECYCLER . Earlier when i used to scan it never detected any E:\RECYCLER.
Anyway after the scan finished , the scan result was "No Virus Found"

... After the scan, i went to my E Drive and found no RECYCLER folders or any file by that name.
My "Show hidden files and folders" option was already enabled.
and my "Hide Protected Operating System Files" option was already disabled.
So even if there is any hidden RECYCLER folders i would be able to see it by now , but i couldn't find anything by the name RECYCLER in my E Drive.
I even tried to search the file from the start menu , but nothing.

Im seriously worried . Could it be a super hidden RECYCLER virus that has been succesfull in hiding itself bypassing all the folder view options ?? and maybe it was responsible for not letting the scan feature of my antivirus work properly.
Any Help appreciated.
 
Last edited:

My Computer My Computer

At a glance

win7 home basic 64bit
Computer type
Laptop
Computer Manufacturer/Model Number
HP
OS
win7 home basic 64bit
$Recycle.Bin folder and system volume information : $Recycle.Bin is the recycle bin used if you delete a file
"system volume information" is for System Restore. It has the previous versions of files.

folder RECYCLER is made/used by winxp as far as I can remember
 

My Computer My Computer

At a glance

Microsoft Windows 7 Home Premium 64-bits 7601...Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz4,00 GBATI Mobility Radeon HD 5400 Series
Computer type
Laptop
Computer Manufacturer/Model Number
ACER ASPIRE 5742G
OS
Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
CPU
Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Motherboard
Acer Aspire 5742G
Memory
4,00 GB
Graphics Card(s)
ATI Mobility Radeon HD 5400 Series
Sound Card
(1) AMD High Definition Audio Device (2) Realtek High Defi
Screen Resolution
1366 x 768 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
WDC WD5000BEVT-22ZAT0
$Recycle.Bin folder and system volume information : $Recycle.Bin is the recycle bin used if you delete a file
"system volume information" is for System Restore. It has the previous versions of files.

folder RECYCLER is made/used by winxp as far as I can remember

Yes, but i have windows 7 laptop and I never had any RECYCLER folders in my system before.
I only have $Recycle.bin and system volume information folders which are part of the system & not virus.
My only worry is this RECYCLER thingy that my anti-virus while scanning my system , mentioning that its in my E Drive . So, if its really in my E Drive , why can't i see it.
As i said in my above post i have already enabled show hidden files & folders ...
and disabled hide protected operating system files :( and still i can't find any RECYCLER file or folder.
 
Last edited:

My Computer My Computer

At a glance

win7 home basic 64bit
Computer type
Laptop
Computer Manufacturer/Model Number
HP
OS
win7 home basic 64bit
sevenshaven,

Let's do some checking...


:info: Please press the Windows key and the R key at the same time for the Run prompt to appear.
In the Run prompt, type the following in the Open area, and press Enter: cmd

When the Command Prompt opens, copy/paste (with the mouse) the following, and press: Enter

attrib -h -s -r /s /d E:\RECYCLER


:info: Next, please run Malwarebytes Anti-Malware:
Download: Malwarebytes Anti-Malware Download
Save to the Desktop
Double-click the downloaded MBAM file to run it.

When the installation begins, follow the prompts in the setup process.
Do not make any changes to default settings and when the program has finished installing, make sure only the following options are checked:
>Update Malwarebytes’ Anti-Malware
>Launch Malwarebytes’ Anti-Malware
Uncheck:
>Enable free trial of Malwarebytes Anti-Malware PRO
Click on the Finish button.

If an update is found, the program automatically updates itself.
At the program console, on the Scanner tab, and select: Perform Full Scan

When the Select the Drives to scan prompt appears, make sure all drives (except: CD-Rom/DVD) are selected.
Next, click on the Scan button.

When the Malwarebytes scan is completed, click on: Show Results
When presented with a screen showing the malware detected, make sure everything is Checked, and click on: Remove Selected

When removal is completed, a report opens in Notepad.

:ar: Please copy/paste the entire contents of the MBAM report in your reply.

Note: If MBAM encounters a file that is difficult to remove, you are asked to reboot the computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) prevents MBAM from removing all the malware.
 

My Computer My Computer

At a glance

Windows 7 Home Premium
Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
@ cottonball,
im already using malwarebytes anti malware for many years. No virus found after scanning with it .
and also did the cmd thingy in the command promt that you said and this is what i got in reply
File Not Found E:\RECYCLER

Then why my antivirus is constantly scanning E:\RECYCLER ???
 

My Computer My Computer

At a glance

win7 home basic 64bit
Computer type
Laptop
Computer Manufacturer/Model Number
HP
OS
win7 home basic 64bit
Your title suggests your (unnamed) AV is calling E:\RECYCLER a virus. Do you simply mean it is scanning it instead? Scan and detect aren't the same. I suspect the AV is coded to check all attached drives for a RECYCLE folder/file to check it. If you've not "Send to recycle bin" from the E:\ drive there shouldn't be a E:\RECYCLER until you do.

I think you have a non problem if no badware is being detected.
 

My Computer My Computer

At a glance

Windows 7 Ultimate X64 SP1Intel i5-2550K, Differing ~4.4-4.8GHz No buil...16GB G.Skill Sniper 1866MHz @ 2133MHz 2x8GBASUS GTX650TIB-DC2OC-2GD5, (650TI Boost)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Home Built Desktop By DataTech
OS
Windows 7 Ultimate X64 SP1
CPU
Intel i5-2550K, Differing ~4.4-4.8GHz No built in GPU
Motherboard
ASUS P8Z68-V PRO/GEN3
Memory
16GB G.Skill Sniper 1866MHz @ 2133MHz 2x8GB
Graphics Card(s)
ASUS GTX650TIB-DC2OC-2GD5, (650TI Boost)
Sound Card
Onboard Realtek 5-1
Monitor(s) Displays
Samsung P2570HD
Screen Resolution
1920x1080
Hard Drives
Samsung 840 Pro 256GB SSD for OS, 500GB Seagate Constellation (Enterprise drive) for Data
PSU
Corsair HX650W
Case
Inwin Dragon Rider
Cooling
Hyper 212 EVO w/two Noctua fans, push-pull, @1300 RPM
Keyboard
E-Z Eyes, bright yellow keys with large characters
Mouse
steelseries SENSEI Laser Pro Gaming
Internet Speed
48-51Mbs Mbs down, 11 Mbs up Xfinity Cable
Antivirus
Norton Internet Security 2013
Browser
IE 10, Opera, Pale Moon if needed
Other Info
4 case fans, LG BluRay-RE, ASUS DVD-RW, Mr. Fusion power supply, 1.21 gigawatts.
Your title suggests your (unnamed) AV is calling E:\RECYCLER a virus. Do you simply mean it is scanning it instead? Scan and detect aren't the same. I suspect the AV is coded to check all attached drives for a RECYCLE folder/file to check it. If you've not "Send to recycle bin" from the E:\ drive there shouldn't be a E:\RECYCLER until you do.

The name of my antivirus is QuickHeal Internet Security 2013.
and NO , my AV never said E:/RECYCLER is a virus ... it just scanned the RECYCLER file/folder.
But hey , many anti-viruses couldn't detect such viruses . So, that doesn't means my pc is clean.
and yeah , i didn't send any files from my E Drive to the recycle bin of C Drive.

Now here's another thing i'll will say . My 1TB External HDD also has 2 hidden folders which becomes visible after changing the folder settings. One is the $Recycle.bin and the other one is RECYCLER . and they are not virus , coz they have been there in my external HDD the day i purchased it . and they are only visible if i change the folder settings.


Now coming back to my PC RECYCLER issue , that my AV is scanning and saying its in my E Drive.
So if its really in my E Drive , why can't i see it even after changing my folder settings.
I mean , if i can see the RECYCLER folder in my external HDD after changing the folder settings , then why not in my pc.
Weird isn't it ? ... btw today when i turned on my PC (net was still turned off) i got a popped up message saying an unknown driver installation failed . Let me tell you , i have all the drivers installed .
Could it be, that the virus is trying to automatically install softwares into my system ?
 

My Computer My Computer

At a glance

win7 home basic 64bit
Computer type
Laptop
Computer Manufacturer/Model Number
HP
OS
win7 home basic 64bit
sevenshaven,

Please give this a try to see if we find the elusive E:\RECYCLER

Go to Start, and, in the Search programs and files above, type: cmd
Right-click cmd.exe icon in Programs and select: Run as Administrator
OK/Yes the User Account Control box.

Next, please enter the commands that follow, one at a time, at the blinking cursor of the Command Prompt:

Code:
dir /a e:\ 
dir /a:h e:

After each, press: Enter

Please provide the results generated by clicking on the small icon on the upper left frame of the Command Prompt, and selecting Edit > Select All
Once again, do the same and select: Edit > Copy

Open Notepad, and please provide the results in your reply.
 

My Computer My Computer

At a glance

Windows 7 Home Premium
Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
So your AV is saying you have a virus? you said,
Could it be, that the virus is trying to automatically install softwares into my system ?
 

My Computer My Computer

At a glance

Windows 7 Ultimate X64 SP1Intel i5-2550K, Differing ~4.4-4.8GHz No buil...16GB G.Skill Sniper 1866MHz @ 2133MHz 2x8GBASUS GTX650TIB-DC2OC-2GD5, (650TI Boost)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Home Built Desktop By DataTech
OS
Windows 7 Ultimate X64 SP1
CPU
Intel i5-2550K, Differing ~4.4-4.8GHz No built in GPU
Motherboard
ASUS P8Z68-V PRO/GEN3
Memory
16GB G.Skill Sniper 1866MHz @ 2133MHz 2x8GB
Graphics Card(s)
ASUS GTX650TIB-DC2OC-2GD5, (650TI Boost)
Sound Card
Onboard Realtek 5-1
Monitor(s) Displays
Samsung P2570HD
Screen Resolution
1920x1080
Hard Drives
Samsung 840 Pro 256GB SSD for OS, 500GB Seagate Constellation (Enterprise drive) for Data
PSU
Corsair HX650W
Case
Inwin Dragon Rider
Cooling
Hyper 212 EVO w/two Noctua fans, push-pull, @1300 RPM
Keyboard
E-Z Eyes, bright yellow keys with large characters
Mouse
steelseries SENSEI Laser Pro Gaming
Internet Speed
48-51Mbs Mbs down, 11 Mbs up Xfinity Cable
Antivirus
Norton Internet Security 2013
Browser
IE 10, Opera, Pale Moon if needed
Other Info
4 case fans, LG BluRay-RE, ASUS DVD-RW, Mr. Fusion power supply, 1.21 gigawatts.
Back
Top