BDS/Delf.lhl back-door program

Viruses and worms
1

I ran an AVSCAN and the report indicated the detection of a recognition pattern of this program in:

C:\Documents and Settings\admin\Local Settings\Temp\7609F487.nbp

It said “[WARNING] An error has occurued and the file was not deleted. ErrorID: 26003” and “[WARNING] The file could not be deleted!”

I went to the directory and tried to manually deleted. It came back with “Cannot delete 7609F478: Access is denied.”

I tried to open a browser, it indicated “System not found”. Cleared all browser data, ran CCleaner, Eusing Registry Cleaner and rebooted. The Local Area Connection reported Speed: 100 Mbps and Status: Connected. Tried once again to open a browser and got the same message, “System not found”.

I assume that whatever this back-door program is, it’s not allowing me to open a browser to the net. What do I need to do in order to purge this program from my computer?

Thanks.

C

2

You could try several things.I take it you use Avast ? First try a boot time scan. Have you tried deleting that temp file in safe mode ?
If you can access another pc,download MalwareBytes Antimalware,SuperAntispware, their definitions, and HijackThis.Install all programs,exit MBAM and SAS, double click on the update files to update both programs.Then scan for threats.Open HJT choose 'scan and save a log file.When the results appear in notepad, copy/paste the log here,along with the logs of MBAM and SAS

http://www.digitalred.com/avast-boot-time.php

http://www.malwarebytes.org/mbam.php

http://www.gt500.org/malwarebytes/database.jsp

http://www.superantispyware.com/

http://www.superantispyware.com/definitions.html

http://filehippo.com/download_hijackthis/

3

I’ve run a scan with avast!, Avira and SAS. Each scan revealed a problem but under a different name. I rebooted in Safe Mode and deleted the 7609F487.nbp file. Scanned the system with all three programs after I deleted the file…no problems. I assumed, incorrectly, that the problem had been resolved so I opened a browser…“System not found”, the same problem I’d had before.

I’ve decided to reformat and do a clean install of Windows XP, if I can find my Windows XP disk. After that is complete I’ll set avast! to run a scan every time I boot up and I’ll download HiJackThis so it is available the next time I run into a problem. Thanks for that advice and the links.

C

4

Try and find what the malware is made of(file wise) and find its guard. I think there’s something rewriting it every time you try and delete it. Search it up find the guard file