Results 1 to 5 of 5

Thread: Win32.Delf.Zq?

  1. #1
    mr_yoda Guest

    Default Win32.Delf.Zq?

    I ran a scan with Spybot S&D and found a virus/trogan called Win32.delf.zq. Does anybody know whether this is a false positive or whether I need to remove it?

    The scan I have done with ZA AV and Anti-Spyware didn't pick it up so i'm a little confused as to waht to do.

    Operating System:Windows XP Home Edition
    Software Version:7.0
    Product Name:ZoneAlarm Internet Security Suite

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Win32.Delf.Zq?

    Hi!
    upload the file to www.virustotal.com and check what the other 30 AV/AS engines will tell you.
    Most probably a false positive or a dead left over.

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    mr_yoda Guest

    Default Re: Win32.Delf.Zq?

    I've scanned the file at VirusTotal and I think it's ok. These were the results (doesn't say 'clear' or 'ok' but neither does it say infected):

    Antivirus Version Last Update Result
    AhnLab-V3 2008.2.6.10 2008.02.05 -
    AntiVir 7.6.0.62 2008.02.05 -
    Authentium 4.93.8 2008.02.04 -
    **bleep** 4.7.1098.0 2008.02.04 -
    AVG 7.5.0.516 2008.02.05 -
    **bleep** 7.2 2008.02.05 -
    CAT-QuickHeal 9.00 2008.02.04 -
    ClamAV 0.92 2008.02.05 -
    DrWeb 4.44.0.09170 2008.02.05 -
    eSafe 7.0.15.0 2008.01.28 -
    eTrust-Vet 31.3.5512 2008.02.05 -
    Ewido 4.0 2008.02.05 -
    FileAdvisor 1 2008.02.05 -
    Fortinet 3.14.0.0 2008.02.05 -
    F-Prot 4.4.2.54 2008.02.04 -
    F-Secure 6.70.13260.0 2008.02.05 -
    Ikarus T3.1.1.20 2008.02.05 -
    Kaspersky 7.0.0.125 2008.02.05 -
    McAfee 5222 2008.02.04 -
    Microsoft 1.3204 2008.02.05 -
    NOD32v2 2849 2008.02.05 -
    Norman 5.80.02 2008.02.04 -
    Panda 9.0.0.4 2008.02.04 -

  4. #4
    mr_yoda Guest

    Default Re: Win32.Delf.Zq?

    There has just been a message on the Spybot S&D forum from the administrators saying that it is a false positive and will be fixed in their next update.

    Thanks for the link to that other site, much appreciated.

  5. #5
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Win32.Delf.Zq?

    Hi!
    good to hear everything is fine... don't always trust Spybot S&D, I have seen more and more false positives and the application is not as great as it was. There are better antispyware programs out there. The same applies for ad-ware.

    Then with ZASS you already have two antispyware programs. Kaspersky and the ZA antispyware.
    So Spybot S&D will be good only to clean cookies. A waste of resources (IMO)

    Not only, Spybot S&D active guard can interfere with ZASS cleaning of malware.
    So, be careful....

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •