ESET Protect - How to clean the Recycle Bin malware from Console

[eti 0]

Hello ! Many users having malware in theirs Recycle Bin, i tried to clean up it with full scan with cleanning or tried to deleted them from the Quarantine. Nothing worked.

How we suppose to deleted this moth*** malware without any manuelly intervention ?

Thanks for the HELP

[Marcos 5,242]

Please provide logs collected with ESET Log Collector for a start.

[eti 0]

I can't share device data... I'm not sure to understand what is relatable with the question ? Is not an issue with a computer. I would like to know how and if ESET could delete malware in the Recycle Bin

 

Thanks

Edited February 3, 2022 by eti

[Marcos 5,242]

The question is why malware is in the Recycle bin in the first place. Was it not detected by ESET, a user deleted it manually and now it's in the Recycle bin? Had it been detected by ESET, the malicious file would have been quarantined.

[eti 0]

So, i dont talk about the trash bin on the desktop. The recycle .BIN I referred(pretty bad, I'm sorry) to is a hidden place where things are previously deleted always for recovery purposes. But, ESET has detected malware in this hiding place. But, when I deleted them from quarantine and performed a cleanup scan. Even after that, the malware is still there... So, I would like to know if ESET is able to clean this folder or files in there: $recycle.bin

If not, I created a script that could do this cleanup manually, but I'm still waiting for the cleanup analysis to see if it works in that order.

Thanks

[itman 1,743]

1 hour ago, eti said:

So, I would like to know if ESET is able to clean this folder or files in there: $recycle.bin

The file you reference is indeed the Windows recycle bin: https://www.digitalcitizen.life/where-is-recycle-bin/ .

As far as I am aware of, the only way files could have been placed in the recycle bin without Eset detecting them previously is if Eset was disabled in some fashion prior to the files being deleted. Just remove the files via normal Empty recycle bin procedure or delete them individually.

 

Edited February 3, 2022 by itman

[eti 0]

Okay, thanks for your help, but you don't understand what i explained. It's ok ! For people who have the same issue, use this script to delete this unallocated place in $Recycle bin  :

@echo off

 call :isAdmin

 if %errorlevel% == 0 (
    goto :run
 ) else (
    echo Requesting administrative privileges...
    goto :UACPrompt
 )

 exit /b

 :isAdmin
    fsutil dirty query %systemdrive% >nul
 exit /b

 :run
  rd /s c:\$recycle.bin
 exit /b

 :UACPrompt
   echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
   echo UAC.ShellExecute "cmd.exe", "/c %~s0 %~1", "", "runas", 1 >> "%temp%\getadmin.vbs"

   "%temp%\getadmin.vbs"
   del "%temp%\getadmin.vbs"
  exit /B`

pause

After, you could perform a clean up scan from ESET console, and the malware will be cleaned.