December 12th, 2004, 14:38 PM
I turned mt computer on this morning and went into My Documents and my antivirus (AVG 7.0) told me it found a virus. I then proceeded to run a full scan on my computer. The scan found 24 files that were infected with worm/delf.ba It could not clean the files so it put the 24 files in the virus vault. I then ran another scan and everything was clean. I then ran that Housecalls from Trend Micro and again everything was clean. BUT, I still have 24 files that are infected and not cleanable sitting in the virus vault.
What do I do now ? I don't want to just delete them. Do I need to restore them somehow ? I can't believe I got infected. I update AVG daily. I am also running behind a Linksys BEFSR41 router. I have XP Pro with service pack 2 installed ??? What should I do now ? Thanks, Mike
December 12th, 2004, 15:20 PM
Actually your AVG did it's job, it found the virus maybe somewhere you don't have it set right to scan all files when they are created ?
If the files are in the virus vault and your system is working fine then why don't you want to delete them ?
Leave them in the virus vault for awhile and if the system works fine then delete the files. You should also turn off System restore so it will delete all restore points so you don't keep get the worm if you use SR. Turn it back on after you know everything is clean.
If you have second thoughts about AVG you could try AVAST If you try AVAST make sure you completely un-install AVG.
December 12th, 2004, 15:38 PM
What kind of files are they? If they aren't important you should delete them.
Originally Posted by mike13
December 12th, 2004, 19:49 PM
The files are as follows:
nero 5.5 wma plug-in.exe
nero mpeg-2 svcd.exe
December 13th, 2004, 00:52 AM
well I don't know how Nero got to be a worm where did you get Nero ?
I say restore all the files and go to House Call and scan, check the box for auto clean and see what happens.
December 13th, 2004, 01:01 AM
maybe it got injected with......ewww.......worm code.
December 13th, 2004, 03:15 AM
Additional info. When I open the virus vault, and the click on one of the items, it gives about 10 lines of information. The last three are
Does that mean that there was a backup copy somewhere that was infected,
and since it is a backup copy, it is uncleanable ? The reason I ask is that a few days ago I unistalled AVG and was going to try AVAST. During the install I remember something that Avast was making a backup copy for my files in case something got infected. Then it could just use the backup copy to replace the file that got infected. Well, after I downloaded Avast, it looked to complicated to me, so I just uninstalled it, and re-downloaded AVG. Is it possible that AVG did clean the original files that were infected on my computer, but could not clean the backup files ? But as I said before, I don't know why all of a sudden I have 24 infected files today and two days ago I had none ?? I haven't even used Nero for at least a month. I think for now, i will delete those infected files in the virus vault and see if everything else works. Any additional comments or suggestions are appreciated.
December 13th, 2004, 04:00 AM
I agree delete them all, none are system files so you could reinstall what ever doesn't work.
I'm confused why some of the files are worms or virus......oh well
December 13th, 2004, 21:19 PM
all bets are off...
Chances are the files are not even related to Nero...just named to confuse the end-user. Mike, in my opinion it is best to delete the files and forget about them. I've seen this alot at work, worms infecting machines with bogus filenames - often porn related
December 14th, 2004, 00:17 AM
Many thanks to FastGame, Conan, lynchknot, and Supastar for your suggestions. Supastar-I believe your explanation nailed it. I "might" have
visited a not so worthy site lately.