Spyware? Help!

[mepanick]

Hi there.

Recently my friend plugged in her thumbdrive into my laptop and now, there is this file in my Harddisk. Always returning after i reboot my system, no matter how hard i delete or shred it.

In the main drive, there is "Recycler.scr" and "autorun.inf" (C:\)
Then Program Files, there is "RRecycler.scr"

When system boots up, this extra process "Recycler.scr" appears and launches "IEXPLORER.EXE" which subsequently launches "svchost.exe"

I have to terminate the above processes before i am allowed to delete the 3 files mentioned above.

I certainly do not feel comfortable with it.

I have checked with my norton 360 as well as deleting all the Registry entries with "recycler.scr" or "rrecycler.scr" in it, but the problem still persists. When i run norton insight on the file, it says nothing about it.

Please help!

[LizardMan]

First do a scan with Hitman Pro and if it fails to remove this "virus" boot the computer into Safe Mode and then delete the file again. Please remember enable the “show hidden file” option for the folder view.

[mepanick]

Hi there.

I have the hidden files and folders enabled. That's how I managed to delete the files, only to have it returning after a reboot.
The registry also have no signs of the above 3 files. (Recycler.scr, rrecycler.scr and autorun.inf) as I have cleared it.

However, problem still persists.

I will try the program tomorrow night

Thanks

[INDRANIL]

Ok scan with this too Malwarebytes' Anti-Malware. Put a hijackthis log.

[mepanick]

Hitman pro returns:

Im having problems getting the trial.. so im deleting the file manually..

[leofelix]

@ mepanick

did you activate HitMan Pro 30 days free trial?
If you do not activate it you cannot clean any malware, moreover if you "abort the cleaning process" you won't be able to get rid of malware found

If you get some errors during activation, just try again and make sure your firewall is not blocking HitMan Pro

[solin]

maybe before he was ever activated Hitman trial. after expiry. And your computer is already in banner by Hitman shop and could not use trial again. When uninstall Hitman pro, you can see there shop banner code in a register.

[mepanick]

Hi. I have disabled my norton already. It says its unable to connect to internet.. error code was 23.

I have tried deleting the 2 files manically. Pending a system reboot as i need to rush out my report which is overdue at the moment.

[Boyfriend]

Click two arrows (red spotted) and re-post your snap. It will help us determine detection engine(s) and we might be able to help you remove it free of cost (in case Hitman Pro trial is expired).

[leofelix]

@ megapanick
please download and install MalwareBytes' Antimalware and run a full scan (as per INDRANIL's suggestion)

http://www.malwarebytes.org/mbam-download.php

the post a MBAM log in your reply (just copy and paste it)


Thank you

[EDIT TO ADD] some informations more

http://spywarefiles.prevx.com/RRCJHJ43362634/RECYCLER%20.SCR.html

http://www.threatexpert.com/report.aspx?md5=98db0cbe719e1e281813edb41a68ccbe