How to remove $RECYCLE.BIN & System Volume Information from Each partition

Anonymous
2013-10-12T13:02:59+00:00

My windows 8.1 Pro (final release) infected with $RECYCLE.BIN & System Volume Information virus/malware in each partition.I have tried with windows Defender and Microsoft safety scannerto remove but windows Defender and Microsoft safety scanner not detect them.If i try to delete,it again appears.

Advice me how to remove " $RECYCLE.BIN & System Volume Information from each partition plea

<original title: How to remove $RECYCLE.BIN & System Volume Information virus from Each partition>

<moved from Virus and Malware>

Windows for home | Previous Windows versions | Files, folders, and storage

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
Anonymous
2013-10-12T13:13:08+00:00

My windows 8.1 Pro (final release) infected with $RECYCLE.BIN & System Volume Information virus/malware in each partition.I have tried with windows Defender and Microsoft safety scannerto remove but windows Defender and Microsoft safety scanner not detect them.If i try to delete,it again appears.

Advice me how to remove " $RECYCLE.BIN & System Volume Information from each partition plea

Typically $RECYCLE.BIN is for recycle bin allocation form your hard disk partition. and  System Volume Information bears the useful info regarding your volume.

These things are shown because hide protected system files tick is removed

Cant say it a virus effect or not..

If you feel like infected, much better to take the assistance of antivirus software

Download hitman pro 3.7**(shareware and can be activated for 30 days free)**and have a full system scan.. http://www.surfright.nl/en 

And/or

use malwarebyte have a full system scan http://www.malwarebytes.org/products/malwarebytes_free/

After verifying , you can just make them invisible by doing this... 

Note:- Optional/additional info -----(You DON'T have to run below to fix the problem )


Any folder and its content can be made shown as a recycle bin using a desktop.ini

Normally within this desktop.ini u can see. 

[.ShellClassInfo]

CLSID={645FF040-5081-101B-9F08-00AA002F954E}

LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-8964


open a command prompt run as administrator

https://technet.microsoft.com/en-us/library/cc947813%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

change the the folder attrattributesre desktop.ini is kept using

attrib +a +s +h +r "folder" \* /d /s

you will see a recyclear bin folder

.................................................................................................................................

Was this answer helpful?

200+ people found this answer helpful.
0 comments No comments

45 additional answers

Sort by: Most helpful
  1. Anonymous
    2014-02-11T20:21:19+00:00

    thanks for the solution!!are these files harmful in any  way??

    Was this answer helpful?

    9 people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2013-10-29T01:54:23+00:00

    What is attrib -a-s-h-re:\*/d/s? Do I type this into cmd prompt?

    Yes, but you do not need to. Follow the images is Hetti's post to hide protected operating system files from view.

    -steve

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2013-10-12T15:10:14+00:00

    thank You H.A.V. Aravinda

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2016-10-16T19:35:17+00:00

    You NEED NOT TO DO THIS ALL JUST DO ONE THING 

    OPEN COMMAND PROMT AS ADMINISTRATOR

    TYPE

    rd/s/q c:$RECYCLE.BIN

    rd/s/q d:$RECYCLE.BIN

    rd/s/q e:$RECYCLE.BIN

    CHANGE ONLY DRIVES AND RUN THIS COMMANDS LIKE C DRIVE, D DRIVE OR E DRIVE 

    AND EVERYTHING IS OK

    IT WILL FORCEFULLY DELETE THAT VIRUS

    and if you do this twice means running the code again it will show you

    The system cannot find the file specified.

    means you did delete virus on first call now it no longer available hurry!

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments