Trojan Dropper Win32 Delf.fd

Status
Not open for further replies.

Olja

Posts: 51   +0
[FONT=Comic Sans MS]My AVP Monitor detected Trojan Dropper Win32 Delf.fd in C:\System Volume Information\Restore{288…}…exe I clicked on "Desinfect” but I didn’t got any feedback from AVP Monitor so I wasn’t sure if it disinfected it or not.
If I run C:\System Volume Information folder opens but it’s empty. If I go one level up I can’t see it anymore even though my folders are set on showing even hidden folders and files.

I ran AntiViral ToolKit Pro and it didn't found any corrupted files but if I want to do deep search/archives it crashes (I could use some advices on new Antivirus :suspiciou ) so now I don't know - do I still have Trojan Dropper or did AVP Monitor disinfected it? If so, why I still have that folder (with "nothing" in it)? :confused:

I tried to find some info for this Dropper on net but didn't succeed so good. Help? :blush:

Btw, I really hate visiting this forum as frequently as I do! :D
[/FONT]
 

howard_hopkinso

Posts: 21,238   +17
First of all right click on my computer select properties then system restore then turn off system restore then click on apply.

Now boot into safe mode and run a full system scan.

If nothing gets detected then you should be ok in which case restart your computer and then restart system restore.

If anything does get detected the delete it.

Regards Howard

:grinthumb
 

Olja

Posts: 51   +0
  • Thread Starter Thread Starter
  • #3
[FONT=Comic Sans MS]Same thing… AVP crashes when I try to do a deep search but with normal search– nothing found.
If I try to open C:\System Volume Information in safe mode I get “access denied” but in normal mode it is still here. What is that?

Any ideas for new antivirus?
My guy sometimes "accidently" (
) visits xxx-sites (when I allow him to use pc :D) so I have to be prepared to fight all viruses he can get pick up on his way!
[/FONT]
 

howard_hopkinso

Posts: 21,238   +17
Try running hijackthis in safe mode and see if it finds it if it does then let it fix it and then delete the backup.

Regards Howard

:grinthumb
 

Olja

Posts: 51   +0
  • Thread Starter Thread Starter
  • #5
[FONT=Comic Sans MS]I'll do that. Thank you :)[/FONT]
 
Status
Not open for further replies.