How to remove trojan dowloader,delf.2.BT ?

BullGuard Antivirus Forum > Virus Removal > Removal Tools > How to remove trojan dowloader,delf.2.BT ?

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

Crawford
New Member

Date Joined Oct 2004
Total Posts : 4

Posted 10-9-2004 6:25 (GMT +1)

AVG has picked up this trojan which is causing programs to open and start up willy nilly all over place. AVG and spyware are unable to repair/remove. What do I do. Please

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 10-9-2004 8:09 (GMT +1)

Hey Crawford cool

If it is XP or ME, disable system restore:

http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Download this scanner: http://www.mwti.net/antivirus/free_utilities.asp
Use link nr.7 activate all in settings, run it.

Tell if it help ;-)

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Crawford
New Member

Date Joined Oct 2004
Total Posts : 4

Posted 10-10-2004 1:00 (GMT +1)

Thanks Touch but as my system is Windows 2000 I couldnt find System Restore. I downloaded the Microworld scan and ran it after returning virus from the vault back to WIINTSVCHOST.exe where it was when found. the new scaan found a virus in this folder but called it trojanDownloader.Win32.Delf.bf - a different name to how AVG identified it. Any way couldnt remove/repair so I placed the virus back in AVG vault. Meanwhile my moouse arrow wizzes around and opens all sorts of programmes randomly. shakehead

Apreciate your assistance - any other ideas please.

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 10-10-2004 1:16 (GMT +1)

Hey

Do this

Download Hijackthis: http://www.spywareinfo.com/~merijn/downloads.html
http://www.spychecker.com/program/hijackthis.html

Unzip to own permanent folder. Scan, scan button change to-save log. Post log here

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Crawford
New Member

Date Joined Oct 2004
Total Posts : 4

Posted 10-13-2004 6:41 (GMT +1)

Thanks Touch. I presume I would have to take this thing out of AVG virus vault first - before run this programme? Yours in ignorance. Crawford

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 10-13-2004 6:46 (GMT +1)

Sorry, but i can´t read it, with that Font color ;-)

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Crawford
New Member

Date Joined Oct 2004
Total Posts : 4

Posted 10-13-2004 7:32 (GMT +1)

Thanks/sorry for inconvenience Touch, Take virus out of AVG vault first I presume and then run scan.?

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 10-13-2004 8:01 (GMT +1)

Well, it don´t seems to AVG can fix it. Take an onlinescan: http://housecall.trendmicro.com/housecall/start_corp.asp

Touch

Proud member of:

ALLIANCE OF SECURITY ANALYSIS PROFESSIONALS

Forum Information

Currently it is Saturday, November 22, 2008 2:31 PM (GMT +1)
There are a total of 64.050 posts in 15.836 threads.
In the last 3 days there were 26 new threads and 157 reply posts. View Active Threads

Who's Online

This forum has 27197 registered members. Please welcome our newest member, hitesh.
45 Guest(s), 2 Registered Member(s) are currently online. Details
Cheated, r1ch1e

5 Latest Threads

Antivirus trigger is now the threat or what? (6)	22-11-2008 13:01:06 (thegascomp)
Generic.PWS.WoW.B7078E0 (16)	22-11-2008 11:55:15 (Behram)
Redirecting virus? (5)	22-11-2008 10:29:08 (r1ch1e)
Help please!!! (15)	22-11-2008 10:05:45 (Touch)
HELP I AM GOING MAD (5)	22-11-2008 06:51:49 (Touch)

Need Support? Write to:

| Forum Help Manual

Download free trial version of Bullguard