Home » Worm » resycled\ntldr.com

resycled\ntldr.com

19 January 2009

resycled\ntldr.com is a worm that usually spreads on local and removable USB drives. resycled\ntldr.com can modify system files and prevent access on the infected drives. When removed with antivirus it will display a message “resycled\ntldr.com is not a valid Win32 application” because some remnants are still present.

Aliases:
-

Risk Level: Low

File Size: Varies

Affected System: Windows

Related posts:

  1. resycled/boot.com

    resycled/boot.com is a worm that propagates on local fixed and removable USB drives. resycled/boot.com may infect drives via autorun.inf file it created that runs a command each...

  2. Trojan Horse SHeur.CODS

    Trojan Horse SHeur.CODS is a trojan that can spread on removable USB drives. Trojan Horse SHeur.CODS start itself by creating an...

  3. WyHit

    WyHit is a worm that propagates on local, network drives and removable storage device. It creates an autorun.inf file to run itself...

26 Comments »

  • 1 }
    webmaster (author) said:

    1. Download and run Flash Disinfector. Reboot your computer in SafeMode and do another scan.
    http://www.precisesecurity.com/tools-resources/adware-tools/flash-disinfector/

    19 January 2009 at 11:39 am
  • 2 }
    Rajneesh said:

    you are gods… thank you so much for the application. i owe you one guys.

    20 January 2009 at 6:26 am
  • 3 }
    ralf said:

    Once you have removed the infection to get your hard drives back working you need to copy all data to another drive, then format the drive with the resycled\ntldr.com problem as this is a hidden folder\file that windows wont allow you to delete and windows wont access the drive normally whilst this directory\file exists, once formatted the data can be copied back and normal operation will be resumed… this wirked for me guys as both my d: and e: drives suffered…

    20 January 2009 at 9:11 am
  • 4 }
    Memo said:

    Just wanted to give you my gratitude, this flash exterminator immediately killed the bug.

    I know this bug seem to hide below the “hidden” files, I just dont know how to make it visible, but this tool just destroyed them anyways.

    Thanks a lot.

    22 January 2009 at 12:18 am
  • 5 }
    Chris said:

    holy crap man…. (i owe yyooouuu)….

    lol i went through nortan 09 and Spy sweeper… and i have 2 computers that this hit… the worst part is it transfered between them firstly through my cell phone… MY DAM CELL PHONE!!! lol

    22 January 2009 at 2:12 pm
  • 6 }
    Andy said:

    Thank You very very much!!!

    22 January 2009 at 7:19 pm
  • 7 }
    Pasi said:

    Thanks :)

    22 January 2009 at 10:00 pm
  • 8 }
    Pramod said:

    My special thanks to webmaster and thanks to ralf.. This worked like the king ! Destroyed the f*****g worm.. :P

    23 January 2009 at 1:09 pm
  • 9 }
    Saurabh said:

    Thanku very much..Its really worked for me. Now all drives get opened by double click…

    23 January 2009 at 5:21 pm
  • 10 }
    Anonymous said:

    Ty, rly helped, altough Kaspersky already blocked it.

    23 January 2009 at 6:03 pm
  • 11 }
    Nunson said:

    Thak you very much for the help.
    Concluding the time from the other posts, i understand that this is a recent virus. I got him recently since last saturday 17th. By then i could not find any info in the net, only a french forum site spoke about it in wich it advise to used the regedit from the laptop. I follow the info, but since i’m not a pc expert i guess i erase some sistem file i shouldn’t. The outcome was a blocked Laptop and 120€ bill from some “local usurer informatic store” just to restore the sistem and guess what… with the virus included. Only after find your site and follow your advises i could fix the problem.
    Once more THANKS A LOT.

    23 January 2009 at 7:48 pm
  • 12 }
    canski said:

    Tons of thanks Webmaster and Ralph…It worked like a miracle!.. After running the program I`ve rebooted and scanned again and everything is back to normal…Thanks a lot.

    23 January 2009 at 10:49 pm
  • 13 }
    Sailorscoutx said:

    There is a slight problem to this, I have to do this everytime I reload the same drive…

    24 January 2009 at 7:08 am
  • 14 }
    Zero said:

    I can’ believe it! You guys rock! I’m so blessed that I went to this page! Awesome!

    24 January 2009 at 4:52 pm
  • 15 }
    Bob Brewster said:

    On word “amazing” after running various programmes I still could not access drives E & D by clicking on them and got that resycled message.I could access them through explorer however. After days of research came across this site and downloaded flash Disinfector, run it and within seconds can now click on drivrs and access them.
    Diolch yn fawr.
    Thank you in Welsh
    Big Bob
    Wales

    25 January 2009 at 11:17 am
  • 16 }
    pramod said:

    thank u very very much!!! u r awesome!!!

    25 January 2009 at 6:50 pm
  • 17 }
    Gautam said:

    Thank u very much. It works.

    26 January 2009 at 2:39 am
  • 18 }
    Nube said:

    Thank you so much. I owe you one :)

    26 January 2009 at 2:55 am
  • 19 }
    bongma said:

    thank you so much!!!

    26 January 2009 at 7:42 pm
  • 20 }
    jesse said:

    da coolest and fastest worm-killer ever!!!!!rocks

    27 January 2009 at 10:55 am
  • 21 }
    hidayat (sekamat) said:

    man !!!
    u’r the one !!!
    i love u damn much…hahahaah
    thank for the software…

    28 January 2009 at 8:18 am
  • 22 }
    firdaus From Sekamat,Kajang,Malaysia said:

    thank you very much for the Flash Disinfector.. it realy work.. i owe you very much.. i just can thank you.. Thanks very much.. i can open my partition after used the Flash Disinfector.. i’m very glad.. thanks..

    28 January 2009 at 8:24 am
  • 23 }
    Bobgraag said:

    Thank you somuch, i’ve been busy to clean my disks for hours and this is the first one that works instantly !!

    28 January 2009 at 12:22 pm
  • 24 }
    ak said:

    I don’t believe but it worked! Thanks a lot.

    1 February 2009 at 6:49 am
  • 25 }
    kiki said:

    Thnx you so verry much man

    6 February 2009 at 2:12 pm
  • 26 }
    kostas said:

    thanks very much its work very nice
    but i want to ask you somthing about this “resycledntldr.com”
    is it a virus? is it a worm?
    what is this ?
    and were is in my system?
    why my antivirus “avira antivir dosent found it?
    can you anser me please?
    thanks

    8 March 2009 at 10:15 pm

Leave your response!

Add your comment below or subscribe to these comments via RSS.
Be nice. Keep it clean. Stay on topic. No spam.