TROJAN

Question

Got rid of about:blank, now this remains after mwav:   File C:\WINDOWS\eqwja.sys infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\loadclean.exe infected by 'Trojan-Downloader.Win32.Delf.cb' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\780h.exe infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\90zb7up.exe infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\eqwja.sys infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\hdwnr.dll infected by 'HackTool.Win32.Hidd.c' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32
6b204i.exe infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\od-stnd807.exe infected by 'Trojan.Win32.DNSChanger.e' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32dspclips.exe infected by 'HackTool.Win32.Hidd.f' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\sprestrst.exe infected by 'Trojan.Win32.DNSChanger.f' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32	l4xj1.dll infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\upncont.exe infected by 'Trojan.Win32.StartPage.sl' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\wowdbe.exe infected by 'Trojan-Dropper.Win32.Small.qt' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\xjpwqa.dll infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\DOCUME~1\kem\LOCALS~1\Temp\eqwja.sys infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\DOCUME~1\kem\LOCALS~1\Temp	emp.frD79E infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken.

Midnight Star · Answer

Kem, Let's go ahead and remove these, then see if we can remove the other two during the final cleanup... Locate and delete the following item(s), if present. Make sure your able to view system and hidden files/ folders: files... C:\WINDOWS\loadclean.exe C:\WINDOWS\System32\780h.exe C:\WINDOWS\System32\90zb7up.exe C:\WINDOWS\System32\hdwnr.dll C:\WINDOWS\System32
6b204i.exe C:\WINDOWS\System32\od-stnd807.exe C:\WINDOWS\System32dspclips.exe C:\WINDOWS\System32\sprestrst.exe C:\WINDOWS\System32	l4xj1.dll C:\WINDOWS\System32\upncont.exe C:\WINDOWS\System32\wowdbe.exe C:\WINDOWS\System32\xjpwqa.dll C:\WINDOWS\eqwja.sys C:\WINDOWS\System32\eqwja.sys - Note that some of these file(s) may or may not be present. If present, and cannot be deleted because they're ' in use', try deleting them from ' Safe Mode'. When your done, post back a new log and if we're still clear, we'll just need to do the final cleanup, and you should be good to go. - Mike.

kem14 · Answer

File C:\WINDOWS\eqwja.sys infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\780h.exe infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\90zb7up.exe infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\eqwja.sys infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32	l4xj1.dll infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\DOCUME~1\kem\LOCALS~1\Temp\eqwja.sys infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken. File C:\DOCUME~1\kem\LOCALS~1\Temp	emp.frD79E infected by 'Trojan.Win32.Delf.cf' Virus. Action Taken: No Action Taken.     I can't find these in Windows Explorer.

Midnight Star · Answer

Kem,   Have you tried deleting them from a command prompt? If not, try that, and let me know what error message is returned, if any.   Mike.

Virus & Spyware

TROJAN

Was this post helpful?