Results 1 to 4 of 4

Thread: Win32.deliver.nc

Hybrid View

  1. #1
    mmcc Guest

    Default Win32.deliver.nc

    I've used ZA Security Suite for years but recently when I do a full virus scan of the hard drive, ZA picks up WIN32.DELIVER.NC in my Thunderbird/GMail/Spam folder. I think it shows up as a Trojan and ZA treats it successfully but the next time I scan, its there again. Any suggestions?
    Last edited by mmcc; March 5th, 2012 at 10:50 PM.

  2. #2
    Join Date
    Dec 2002
    Location
    San Carlos, California
    Posts
    1,636

    Default Re: Win32.deliver.nc

    I would suggest you do not quarantine or try to treat any emails.

    Doing so could corrupt all your emails.

    Its best to exclude the mail file for thunderbird or the entire directory where the mail files exist.


    Forum Moderator
    Click here for ZA Support
    Monday-Saturday__ 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    mmcc Guest

    Default Re: Win32.deliver.nc

    OK but is "Win32.deliver.nc" a danger? I did a google search on it and could not find too much about it. What exactly is it and what is it trying to do. Thanks.

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Win32.deliver.nc

    The correct naming should be "Trojan-Downloader.Win32.Deliver.nc". There are thousands of different versions of this trojan and it is simply impossible to tell you what the file exactly does.

    ZA uses the Kaspersky engine. A Trojan downloader as the following behaviour:

    Programs classified as Trojan-Downloader download and install new versions of malicious programs, including Trojans and AdWare, on victim computers. Once downloaded from the Internet, the programs are launched or included on a list of programs which will run automatically when the operating system boots up.
    Information about the names and locations of the programs which are downloaded are in the Trojan code, or are downloaded by the Trojan from an Internet resource (usually a web page).
    This type of malicious program is frequently used in the initial infection of visitors to websites which contain exploits.

    http://www.securelist.com/en/threats...havior=27#list

    Yes, it is dangerous as any malware.

    Thanks,
    Fax
    P.S. Check you are on the latest version of ZASS (we are at 10.1.079.000), if not please update to it
    Last edited by fax; March 6th, 2012 at 03:32 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 5
    Last Post: June 28th, 2009, 11:59 AM
  2. Trojan-GameThief.Win32.OnlineGames.ywg / Worm.Win32.AutoRun.dgt
    By lateralus in forum Malware Discussion
    Replies: 4
    Last Post: October 20th, 2008, 11:03 AM
  3. Replies: 1
    Last Post: April 26th, 2008, 12:47 AM
  4. Replies: 0
    Last Post: April 26th, 2008, 12:33 AM
  5. Zone Anti-Spyware server does NOT deliver updates (4 days)
    By m_fortune in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 1
    Last Post: April 17th, 2008, 08:39 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •