A strange Recycler issue !

[zooco]

On the desktop, when I clicked on "my computer" -> Drive: E,F or G, I got this error message :

http://i44.tinypic.com/29woorq.gif

Note that if I right-click on the drive and select "Explore" , I can still access everything on the drive .

Drive C;\ and D:\ are unaffected by this problem

(My system : WinXP Pro + SP3 , Celeron 2200 MHz, 512 MB Ram )

How can I fix this problem ?

Thanks,

Zooco

 

[goombawaho]

What are those drives - E,F,G Hard drives?? If so, are they part of the physical hard drive that is C,D. Are they flash memory drives, what???

I would install MalwareByte's Anti-Malware and run a full scan just to see if it's malware related. Report back.

 

[smah]

It sounds like something is corrupted with the Recycle Bin (did someone delete the file manually somehow?). I would try turning off the Recycle Bin, reboot, and turn it back on. Right click on RB, properties, use one setting for all drives, do not move files to the recycle bin...

 

[zooco]

Thanks goombawaho & smah for your inputs !

I searched the Net , using Google for a solution and by pure luck, I stumbled on a right-on-the-neck fix .

It turned out to be a terrible malware : Rootkit.win32 , an extremely resistant one !!

I DL the the fix, followed the instruction and Voila` , everything is back to normal again .

The lesson learned : When you see the message like the one I showed in the screenshot , it's the big-bad Rootkit malware folks !!

------------------------------



I just enclosed the instruction just in case anyone else got the same diaster !


"....
Download it here ->

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Before saving it to Desktop, please rename it to something like 123.exe to stop malware from disabling it.

Now, please make sure no other programs are running, close all other windows and pause Kaspersky (right click the K icon and click pause protection > Choose the
option "resume manually" if still active) until after the scanning and removal process has taken place.

Please double click on the file you downloaded. Follow the onscreen prompts to start the scan.
Once the scanning process has started please DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall.
It may take a while to complete
scanning and this is normal.

You will be disconnected from the internet and your desktop icons/toolbars will disappear during scanning, do not worry, this is normal and it will be restored after
scanning has completed.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt .

....

 

[zooco]

BTW, I have ZoneAlarm Internet Security installed and this RootKit Win32 malware was still able to sneak in ....

I heard Kaspersky could catch this bugger easily ... Any comment ? Thanks

 

[BadBigBen]

When I first read the error message, that showed CLEARLY that it was a trojan/malware...

Hint: the DOT COM at the end...

glad you fixed it... and Thank You for posting the fix as well...

ZA - ditched it long ago, due to the fact that it did not go well with certain software I am using, shortly before all the news about it crippling lots of PC internet/network capabilities...

Kapersky - is ok in my book...

I prefer Avira Personal Classic (free version) and as Firewall Comodo also free...

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

How to ask a question, when posting them to a professional forum.

 

[zooco]

Thanks, BadBigBen , for your kind comment ... I'll try out Avira .

Best regards,

 

[goombawaho]

Load MalwareByte's regardless of the fact that you think you are clean and do a scan. It's always a good idea to get a "2nd opinion" on your system's health.

Do it!!! It's free.