Results 1 to 4 of 4

Thread: Trojan-Downloader.Win32.Delf.awy

  1. #1
    dragoncubed Guest

    Default Trojan-Downloader.Win32.Delf.awy

    Recently while looking in the Quarantine tab of my ZA Anti-virus, I
    encountered two entries of the following: "Trojan-Downloader.Win32.Delf.awy".
    Nothing was listed at either Symantec or McAfee. Googling, I found very little on this item.
    Most sites had only the name and very little else.
    The only thing that I did find on it was located at F-Secure.com here
    and from what I can tell, it is a false-positive. Does anyone else know anything about it? If this is a false-positive how do I notify ZoneAlarm? Also, the items that it is attached to are located in the backup drive (I have a compaq) and they appear to be important files and I am having difficulty accessing them for deletion.
    Path =
    D:\MiniNT\system32\notepad.exe and D:\System Volume Information\_restore{6D05FAB2-7A62-4A96-A638-2F0B6A273527}\RP256\A0049708.exe
    Any help is appreciated.
    Thanks

    Operating System:Windows XP Home Edition
    Product Name:ZoneAlarm Antivirus
    Software Version:7.0

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Trojan-Downloader.Win32.Delf.awy

    Hi!if you are sure they are false positives just restore the quarantine and you will get them back.The you can upload the file(s) to www.virustotal.com and get an snapshot of more than 20-30 AVs on the file(s).Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    dragoncubed Guest

    Default Re: Trojan-Downloader.Win32.Delf.awy

    Thanks Fax for your help.
    Any idea how I can tell if it is a false-positive other than what you have suggested? If it is not a false-positive and it indeed is a Trojan-Downloader, by restoring it wouldn't I
    then be allowing it to run rampant on my laptop?.

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Trojan-Downloader.Win32.Delf.awy

    Hi!If it is a trojan it should be blocked again by the AV after restoring, as soon as (and if) it tries to load again.... so, there is a risk but the risk is minimal.Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •