Results 1 to 10 of 10

Thread: worm/delf.ba

  1. #1
    Gold Member
    Join Date
    Aug 2002
    Location
    Penna.
    Posts
    409

    worm/delf.ba

    I turned mt computer on this morning and went into My Documents and my antivirus (AVG 7.0) told me it found a virus. I then proceeded to run a full scan on my computer. The scan found 24 files that were infected with worm/delf.ba It could not clean the files so it put the 24 files in the virus vault. I then ran another scan and everything was clean. I then ran that Housecalls from Trend Micro and again everything was clean. BUT, I still have 24 files that are infected and not cleanable sitting in the virus vault.
    What do I do now ? I don't want to just delete them. Do I need to restore them somehow ? I can't believe I got infected. I update AVG daily. I am also running behind a Linksys BEFSR41 router. I have XP Pro with service pack 2 installed ??? What should I do now ? Thanks, Mike

  2. #2
    Hardware guy Super Moderator FastGame's Avatar
    Join Date
    Apr 2002
    Location
    Blasters worm farm
    Posts
    3,416
    Actually your AVG did it's job, it found the virus maybe somewhere you don't have it set right to scan all files when they are created ?

    If the files are in the virus vault and your system is working fine then why don't you want to delete them ?

    Leave them in the virus vault for awhile and if the system works fine then delete the files. You should also turn off System restore so it will delete all restore points so you don't keep get the worm if you use SR. Turn it back on after you know everything is clean.

    If you have second thoughts about AVG you could try AVAST If you try AVAST make sure you completely un-install AVG.

  3. #3
    Techzonez Governor Super Moderator Conan's Avatar
    Join Date
    Apr 2002
    Location
    Philippines
    Posts
    4,343
    Quote Originally Posted by mike13
    I don't want to just delete them. Do I need to restore them somehow ?
    What kind of files are they? If they aren't important you should delete them.

  4. #4
    Gold Member
    Join Date
    Aug 2002
    Location
    Penna.
    Posts
    409
    The files are as follows:
    setup.exe
    xpkey.exe
    d83z10us.exe
    pc 2004.exe
    _isdel.exe
    w9x_433c.exe
    easywritereader 1.0.exe
    nero 5.5 wma plug-in.exe
    nero mpeg-2 svcd.exe
    neromix 1.3.0.34.exe
    inst_16.exe
    imagedrive.exe
    nero.exe
    nrestore.exe
    backitup.exe
    nerostartsmart.exe
    hwinfo.exe
    wmfdist.exe
    old84.tmp
    old88.tmp
    old86.tmp
    old8a.tmp

  5. #5
    Hardware guy Super Moderator FastGame's Avatar
    Join Date
    Apr 2002
    Location
    Blasters worm farm
    Posts
    3,416
    well I don't know how Nero got to be a worm where did you get Nero ?

    I say restore all the files and go to House Call and scan, check the box for auto clean and see what happens.

  6. #6
    Titanium Member
    Join Date
    Jul 2002
    Location
    blk helo target, WA
    Posts
    3,536
    maybe it got injected with......ewww.......worm code.

  7. #7
    Gold Member
    Join Date
    Aug 2002
    Location
    Penna.
    Posts
    409
    Additional info. When I open the virus vault, and the click on one of the items, it gives about 10 lines of information. The last three are
    Healable---NO
    Source----Backup copy
    Status ----Infected.

    Does that mean that there was a backup copy somewhere that was infected,
    and since it is a backup copy, it is uncleanable ? The reason I ask is that a few days ago I unistalled AVG and was going to try AVAST. During the install I remember something that Avast was making a backup copy for my files in case something got infected. Then it could just use the backup copy to replace the file that got infected. Well, after I downloaded Avast, it looked to complicated to me, so I just uninstalled it, and re-downloaded AVG. Is it possible that AVG did clean the original files that were infected on my computer, but could not clean the backup files ? But as I said before, I don't know why all of a sudden I have 24 infected files today and two days ago I had none ?? I haven't even used Nero for at least a month. I think for now, i will delete those infected files in the virus vault and see if everything else works. Any additional comments or suggestions are appreciated.

  8. #8
    Hardware guy Super Moderator FastGame's Avatar
    Join Date
    Apr 2002
    Location
    Blasters worm farm
    Posts
    3,416
    I agree delete them all, none are system files so you could reinstall what ever doesn't work.

    I'm confused why some of the files are worms or virus......oh well

  9. #9
    all bets are off... TZ Veteran SupaStar's Avatar
    Join Date
    Jul 2002
    Location
    Australia
    Posts
    1,680
    Chances are the files are not even related to Nero...just named to confuse the end-user. Mike, in my opinion it is best to delete the files and forget about them. I've seen this alot at work, worms infecting machines with bogus filenames - often porn related

  10. #10
    Gold Member
    Join Date
    Aug 2002
    Location
    Penna.
    Posts
    409
    Many thanks to FastGame, Conan, lynchknot, and Supastar for your suggestions. Supastar-I believe your explanation nailed it. I "might" have
    visited a not so worthy site lately.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •