Recycler error message when opening hard drives

I have just formatted and partitioned my hard drive to run XP Pro and Windows 7. I was having a lot of problems with my PC, one of which was a Recycler error message, attached, every time I tried to open any hard drive. I could only open the drive by right clicking and running Explore. I thought a format would solve this problem but it has made no difference.
Also I have installed Zone Alarm for the first time. I now find I cannot access Windows Update. I ran a search for Windows Update with Google and now everytime I try to access Update, even if I type directly into the address bar it takes me back to Google and I can't get out of it. Do you think this is anything to do with Zone Alarm or something else?
Thanks
Matthew
Recycler-Error.doc
medcomputersAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jsbhatiaCommented:
If no one has mentioned it, a program called Autorun eater will fix it,

http://www.softpedia.com/progDownload/Autorun-Eater-Download­-85585.html

it is usually part of a bigger problem, I fixed it by running Avast, Prevx, and Combifix.

No problem since.
0
jsbhatiaCommented:
The above problem is due to the virus distributed via usb flash drives using autorun.inf technique. The above program should fix this issue
0
jcimarronCommented:
medcomputers--Perhaps of help concerning Windows Update problem
http://support.microsoft.com/kb/943144
Do you still have the Recycler problem?  A reformat (meaning wiping the hard drive) should take care of malware.  But if you still have the Recycler problem, I agree with jsbhatia that you probably still have malware on the drive.  See this
http://www.bleepingcomputer.com/forums/topic199413.html
0
Webinar: What were the top threats in Q2 2018?

Every quarter, the WatchGuard Threat Lab releases an Internet Security Report that describes and analyzes the top threat trends impacting companies around the world. Are you ready to learn more about the top threats of Q2 2018? Register for our Sept. 26th webinar to learn more!

medcomputersAuthor Commented:
Hi guys
Thanks for comments. I think Autorun eater has fixed the Recycler problem. I have also removed a 1tb external hard drive, could this have caused the autorun problem? But I'm still having real problems with the Internet which was mainly why I formatted the drive in the first place. I applied your Microsoft update resolution to no effect. If I try to go to Windows Update I'm just redirected to Google or Ask and can get nowhere. I have downloaded Malwarebytes but it won't run. SuperAntiSpyware keeps saying it has encountered a problem and needfs to close. I'm currently running a full Zone AAlarm scan but am not very hopeful. I thought formatting would remove all these problems and I would be able to start from scratch again. Any suggestions gratefully recceived.
0
jcimarronCommented:
medcomputers--Did you mean what you said about running both WinXP and Win7?  I presume you are dual booting.
What version(s) of IE are you running.?
A possible quick fix is to uninstall any third party toolbar, such as Google Toolbar.
Then, put Windows Update site into your Trusted Sites.
If still no help, here are some general troubleshooting ideas for WinUpdate
http://v4.windowsupdate.microsoft.com/troubleshoot/
But it sounds like you still have malware on the PC.  You should consider scanning with your antivirus program (or is that part of Zone Alarm?), MalwareBytes and SuperAntiSpyWare (the latter two in Safe Mode).  They are free for scans.
http://www.malwarebytes.org/
http://www.superantispyware.com/
And then if there are still problems scan with HiJackThis
http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html
If you need help in interpreting the log, post here.
P.S.  If you were infected in the first place (Recycler problem), your external hard drive is probably the source and is still infected.  You will have to scan it, too, or reformat.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
medcomputersAuthor Commented:
Hi jcimarron:
Yes I am dual booting but my problems are all on the XP Pro partition where I'm running IE8. I will try all your suggestions and get back to you if I can get HijackThis to run. The Zone Alarm scan shows no problems at the moment but is still running. As I have said I have already formatted and partioned the drive once and this is now a completely new install of both operating systems. Do you think it would help if I zeroed the drive and started again?
Matthew
0
jcimarronCommented:
medcomputers--"Do you think it would help if I zeroed the drive and started again? "
If none of the suggestions have helped, I think the answer is yes.  But if you are using that external drive to restore data, recognize that you are likely to re-infect the drive.
You, unfortunately, may have to start from scratch--re-installing everything.
0
jsbhatiaCommented:
Hi medcomputers,

I am glad that autorun eater has fixed one of your problems. The second problem with ie is usually caused by a virus or malware which has installed itself as a rootkit. Which listens to your keystrokes and disables the browsing. I know 2 different malwares which doesn't let you browse a few selected websites.

Fist, clean your system and the 1 tb external harddisk to ensure this doesn't happen again.
Download http://research.pandasecurity.com/archive/Panda-USB-and-AutoRun-Vaccine.aspx
and run it on your system WITHOUNT attaching the external drive.
It will Disable the autorun feature in windows.
Then attach the external drive and run this utility again and try to clean the external drive.

Then, run a rootkit remover
http://www.softpedia.com/get/Antivirus/Panda-Anti-Rootkit.shtml
or get a list of other rootkit removal softwares
http://www.pchell.com/support/rootkitremovaltools.shtml
0
medcomputersAuthor Commented:
Hi guys
Thanks for all your suggestions. Ihave installed and run Panda vaccine as you suggest. I have also created HijackThis log which I have pasted into Word doc attached. Malwarebytes will not open and when I try to download SuperAntiSpyware or Panda Anti Rootkit I just get IE cannot display webpage. If you could give me feedback on HijackThis log I'd be very grateful.
Thanks
Matthew
I cannot attach log as file. Is there another way I could send this to you?
0
jcimarronCommented:
medcomputers--I think you can post it here
http://www.ee-stuff.com/accessLogin.php?returnURL=%2FExpert%2Findex.php%3F
But if that is not correct, I am sure someone will guide you.

Earlier did you click one of  the "Attach" options at the bottom left of the Post Comment/Solution window?  Is the HJT log in a .txt or .doc file?  There could be restrictions on the type of file you can Attach.
0
medcomputersAuthor Commented:
Hi jcimarron:

I have just uploaded log uing your link. Yes I originally clicked on the Attach button and tried to upload both .doc and .txt fille but neither worked.
I now find I can access some sites like bbc, Ebay, TV guides, college where I work, etc. But when I try to access sites like SuperAntiSpyware, Windows Update, Adobe Flash Plugin, etc something always goes wrong. I have downloaded and installed Malwarebytes twice now but it just does not open. Problems seem to be selective and I have to say I'm mystified. If you see any problems in HijaxkThis log I'd be grateful if you could let me know.

Matthew
0
jcimarronCommented:
medcomputers--I do not know all the tricks of navigating around here. :)
Please post the URL for your uploaded HiJackThis log.
0
medcomputersAuthor Commented:
Hi
Can't get file to upload now. Just get error message "Invalid Question Value" I've deleted Zone Alarm as I could not get it to update. I'm now running AVG 8.5 which seems to have installed and updated without any problems. I'm now going to run a full scan and will let you know the results. I could paste the HijackThis log here but I understand that is not good etiquette.
Matthew
0
jcimarronCommented:
medcomputers--Try http://www.ee-stuff.com/Expert/Upload/upload.php
I do not know the etiquette concerning pasting the HJT log here. People used to do it, but I see much less lately.
You could click the Request Attention button at the right bottom of your original post and post the problem.
Or you could to get an analysis of the HJT log yourself by copying it and then pasting into
http://www.hijackthis.de/
It is not foolproof.  You can copy any key of concern and paste it into a post here.
0
medcomputersAuthor Commented:
Hi
I have completed a scan with AVG 8.5 which reported some recycler problems which were quarantined. Otherwise no problems. I have also installed and run Panda AntiRootkit which also reported no problems. I no longer have Google toolbar installed but everytime I try to run Windows Update, even directly from Microsoft, I'm returned to Google. I will try again to upload HijackThis log later today.
Matthew
0
medcomputersAuthor Commented:
Hi guys
Hijackthis.de have picked out the 4 lines below:
O17 - HKLM\System\CCS\Services\Tcpip\..\{E2E5F1AB-8E04-49C7-AD1F-DBC70C099317}: NameServer = 85.255.112.206,85.255.112.116
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.206,85.255.112.116
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.112.206,85.255.112.116
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.206,85.255.112.116
They say if I do not know this IP address it needs to be removed. Could you advise me how I should do this? Everything else was Ok except I need to apply Windows Updates which i still cannot access
I have tried to install Spybot and everything sems fine until I get to the Install box when I get an error message saying "Error sending request. The server name or address cannot be resolved" Installation then fails. I have received the same error message trying to install other programmes. Does this mean anything?
Thanks
Matthew
0
jcimarronCommented:
medcomputers--Unless you live in the Ukraine ( :) ), yes, do run HJT again and Fix those items.
85.255.112.0 - 85.255.127.255
UkrTeleGroup Ltd.
Figure 6 and accompanying text in this reference will help you Fix (remove) those items
http://www.bleepingcomputer.com/tutorials/tutorial42.html
After you do that, tell us what problems remain.
0
medcomputersAuthor Commented:
Hi guys

Apologies for delay in posting. Good news, looks like everything is back to normal.

After deleting entries detected by HijackThis I was able to get into Windows Update. I have subsequently also been able to install and run SuperAntiSpyware which now works fine. For some reason I still cannot run Spybot even though it seems to have installed correctly.

I still notice that if I run a link directly from Google it takes me all over the place and not directly to the requested site as it used to do. I have to copy and past the address from the Google search into the address bar to get to the site. I have seen this on a friend's computer recently as well. Do you know of any reason why this should happen?

I will of course accept and reward points. I hope you don't mind if I split them as you have both been so helpful. I personally have learnt a lot. I was about to give up and try and reformat the drive again, but I'm reall glad now that I didn't follow that route.

Thanks again

Matthew
0
jsbhatiaCommented:
Hi medcomputers,
Good to know that the problem is resolved.
I have no idea why you are not able to open a link directly from google.
By any chance, are you using Firefox and have installed an addon that might be interfearing with the google page, or may be a greasemonkey script
0
jcimarronCommented:
medcomputers--"I still notice that if I run a link directly from Google it takes me all over the place and not directly to the requested site as it used to do."
It sounds like Google is taking you to random, different sites.  Or is it to only one or a few?  If the latter, what sites are these?  I hate to say it, unwanted redirects are often a sign of continuing malware.  However, if the sites to which you are redirected are not bad sites, perhaps malware is not the case.
A work around would be to use Yahoo Search.  And in a few days MS will introduce Bing.
I believe you uninstalled Google Toolbar (if you had it) earlier.
0
medcomputersAuthor Commented:
Hi guys
I am not using Firefox. When I'm redirected in Google it is not to a bad site, just somewhere completely different. I have just done a search on Bing and had the same problem, I had to copy and paste URL into address bar. I will try again with Yahoo.
Now I have another problem with my Windows 7 partition, but that is a story for another question!
Thanks again for all your help.
I'm being chased to close open questions so I will do that now.
Matthew
0
medcomputersAuthor Commented:
Problem took a while to solve especially as I had started with a freshly formatted hard drive with a clean install of XPPro. Thanks to patient and knowledgable advice I was able to resolve the problem and learnt a lot in the process. Many thanks guys. Another PLUS for Experts Exchange.
Matthew
0
jcimarronCommented:
medcomputers--You are most welcome!!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.