Author Topic: TrojanDownloader:Win32/Delf.FN is on my comp and i cant get rid of it  (Read 6232 times)

0 Members and 1 Guest are viewing this topic.

usiprius

  • Guest
hi im martin need some help gettin rid of a virus on my computer its the

TrojanDownloader:Win32/Delf.FN

iv run the anty virus and its not picking it up but i ceep getting a pop up
the pop up window that is reporting the foult says

windows explorer has encountered a problem and needs to close
pleas tell microsoft about this problem ext.

naw this pop up comes on every 2 to 3 seconds and lockes up my pc and exits all windows i have opened exept for my antivirus softwear and internet pages  ???

my version of avast is 4.6 home addition pleas help me with this thanks

Omar

  • Guest
is avast detecting it? Is your database up to date?

i`ve done a search and "trojandownloader:Win32/Delf.FN" is recognised by avast as trojano 760

http://www.viruslist.com/en/viruses/encyclopedia?virusid=65499

Offline polonus

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 33996
  • malware fighter
Hello Omar,

Is it this backdoor tojan?Backdoor.Win32.Delf.fn
(Backdoor.Win32.Delf.fn)

by ?

Original Filename unknown

Written in Delphi, compressed with PECompact

more in this category <UnknownDelf_all.html>


Dropped file:
c:\WINDOWS\JAVA\apps\wsock32.exe

size: 35.328 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{9EC0745F-CAD3-628A-48E9-02B9AFEC8E74} "StubPath"

registry added:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Hardware Profiles\Current\Software\Microsoft\windows\CurrentVersion\Internet Settings "EnableAutodial"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders "Common Startup"

Does try to download a file from the internet.

greets,

polonus


Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4871
  • I'm a GNU
    • Don't Surf in the Nude!
First of all, please run a boot time scan with avast! (This does not apply if you have Windows 98, where you should boot into safe mode- press F8 while booting- and scan from there.)

Right click the avast! globe and select Start avast! Antivirus.

avast! will do a memory scan: if it finds a virus or worm in memory, it will prompt you to do a boot time scan: accept this and reboot.

If avast! doesn't find anything in memory, schedule a boot time scan. (Click the button at the top left of the avast! silver console and select Schedule boot time scan from the drop-down menu.)

Run a double check for Trojans with one or both of these programs:

http://www.ewido.net/en/ (Not Win 98.)
http://www.emsisoft.com/en/
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

lmakus

  • Guest
I have the exact same problem and have been uable to correct it . I have tried a bootlog scan with Avast and I have tried Ad-a-ware 6, Noad, and Spybot all to no avial.  ???  I actually get a blue screen with an explanation of what has caused by problem that comes up along with all my icons when I complete the boot up. Then an small screen comes up It starts saying the Windows Explorer having a problem and asks to notifiy Microshoft. This screen just keeps on coming up.

What should I do?

kamulko

  • Guest
Try to deactivate the System Restore before running the AntiVirus in safe mode. Can you say the exact location of this malware on your hard disk? Is it in Temp?

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4871
  • I'm a GNU
    • Don't Surf in the Nude!
Try the two anti-trojan scanners I mention above.
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog