Author Topic: Win32:Delf-MZG  (Read 18527 times)

0 Members and 1 Guest are viewing this topic.

street_lethal

  • Guest
Re: Win32:Delf-MZG
« Reply #30 on: December 03, 2009, 05:26:44 PM »
No, "No action" certainly doesn't modify the file.
Yes, it doesn't allow it to be loaded - but after the virus database is updated, it's possible to restart the affected program (OK, if it's an auto-start program, it might be better to restart the computer to get into the "ordinary" state).

I clicked "no action" on every warning, turned off Avast's shields, couldn't start Spybot one of the files couldn't be found. Granted I hadn't ran Spybot on the laptop for a long time but it worked the last time I used it. Who knows, I uninstalled it anyway, don't need it.

Bernez

  • Guest
Re: Win32:Delf-MZG
« Reply #31 on: December 04, 2009, 06:44:02 AM »
Hello, It is OK but when the files were restored, they remain in the quarantine zone (or double). Do you can safely remove it for now there is nothing in the quarantine zone? ? ?
Thank you very much
Bernez

Sesame

  • Guest
Re: Win32:Delf-MZG
« Reply #32 on: December 04, 2009, 06:48:03 AM »
Hello, It is OK but when the files were restored, they remain in the quarantine zone (or double). Do you can safely remove it for now there is nothing in the quarantine zone? ? ?
In theory, you can remove them safely but there are always the possibility of human errors.  So, please make sure that the applications related with the files work properly before deleting them.

Bernez

  • Guest
Re: Win32:Delf-MZG
« Reply #33 on: December 04, 2009, 07:20:38 AM »
Rumpel    OK, I'll wait a few days to see if everything works perfectly before deleting
Thank you very much
Bernez

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86548
  • No support PMs thanks
Re: Win32:Delf-MZG
« Reply #34 on: December 04, 2009, 04:07:46 PM »
The Restore and Extract options for that matter, is actually a copy and paste, a copy will remain in the chest.

After you Restored. check the original location it was sent to and if present then you can delete the copy in the chest. This is the reason a copy is left in the chest (I believe), to ensure that the extract/restore succeed, otherwise you could be left with no copy.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.2.6003 (build 22.2.7013.717) UI 1.0.697/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Bernez

  • Guest
Re: Win32:Delf-MZG
« Reply #35 on: December 05, 2009, 07:48:20 AM »
Yes, but when you're not a computer specialist, it is not always easy to find the original file to see if restoration is made........

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86548
  • No support PMs thanks
Re: Win32:Delf-MZG
« Reply #36 on: December 05, 2009, 03:32:03 PM »
No need to be an expert, if the copy of the file is in the chest as it should be, then the location will be listed under the Original Location Heading ;D

Or you can right click on it and select properties and it will show what the original location is and more detailed information.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.2.6003 (build 22.2.7013.717) UI 1.0.697/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Apttec55

  • Guest
Re: Win32:Delf-MZG
« Reply #37 on: December 05, 2009, 06:20:21 PM »
I too fell for the old Delf-MZG, totally wiped my system out, afraid to restart, most files it could not repair, so I rescanned and deleted...that was the second mistake, now in restoring most of my software, cannot due to date sensitive freeware and such, also deleted several files from Win 32 system folder :-[...so I am up s*** Creek without a paddle! I have not restarted, am moving files to large thumb drive and putting in new system...I guess its time to redo this one and sell it, new one has been built for about 3 months now...so this pushes me into switching over to it...only good thing to come from this...I understand it was a false positive, but too little too late for me! But Avast has always been good for me and does an excellent job so I am keeping it. OH WELL! :-\

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re: Win32:Delf-MZG
« Reply #38 on: December 05, 2009, 06:48:36 PM »
Apttec55, can we help you in anything? Everybody is terrible sorry with the fact...
The best things in life are free.

Apttec55

  • Guest
Re: Win32:Delf-MZG
« Reply #39 on: December 05, 2009, 07:02:53 PM »
No, but I do much appreciate the offer, my luck to just happen to be on the computer during that 5 hour period of time when this occurred...just one of those things. It will force me to move and start using my new system here...thats good. I am always reluctant to start up a new system but this time I will move old Sata drive to new system as no 2 and be able to move a lot of software that way...its XP Home, the new system is XP Pro, so looking forward to starting it up..its an AMD Quad Core 9550, glad to get away from this Athlon 2800...its been a good one. Thanks again. Ric

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re: Win32:Delf-MZG
« Reply #40 on: December 05, 2009, 07:04:35 PM »
You're welcome. Feel free to come back any time you need help or just to change experiences 8)
The best things in life are free.

Bernez

  • Guest
Re: Win32:Delf-MZG
« Reply #41 on: December 06, 2009, 04:46:16 PM »
A Davidr  Of course, I understand that, unfortunately, all records are such as :C:\System Volume Information\restore{_5259299F-BD84-4AB7-8D71-4A5979BD915A}\RP530
and when I access it, Windows tells me: "Access Denied" but that's OK, I'll leave it doubles the area of food
Thank you again to all
Bernez

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86548
  • No support PMs thanks
Re: Win32:Delf-MZG
« Reply #42 on: December 06, 2009, 05:41:15 PM »
The C:\System Volume Information is a windows protected area under the control of system restore and that is why windows blocks it.

- Infected/Suspect Restore Points - There really is little benefit in chasing a detection in the system volume information folder. It is only there because it had previously been deleted or moved from the system folders and this is a back-up created by system restore.
 
- Worst case scenario it isn't infected and you delete it, you can't use that restore point in the future, not much of a loss and the older the restore point is the less of an issue it is.
 
- So if there is any suspicion about a restore point then it is best removed from the system volume information folder or it could bite you in the rear at some point in the future when you use system restore if it included that restore point.

So unfortunately you won't be able to restore any of these restore points which happened to get caught up in the Win32:Delf-MZG FP, but because of the above this is a less serious loss. So personally I would call it a day on those detected restore points and delete them from the avast chest.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.2.6003 (build 22.2.7013.717) UI 1.0.697/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Bernez

  • Guest
Re: Win32:Delf-MZG
« Reply #43 on: December 06, 2009, 07:39:17 PM »
To DavidR   It's OK, thank you for all these explanations and for the time you take on this forum

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86548
  • No support PMs thanks
Re: Win32:Delf-MZG
« Reply #44 on: December 06, 2009, 07:52:53 PM »
You're welcome.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.2.6003 (build 22.2.7013.717) UI 1.0.697/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security