Help to remove Trojan.Win32.Delf.bon -C:\Program Files\Internet Explorer\svchost.exe - Page 2

Tuk Tuk · 15-04-2008, 04:27 AM

yes i have been doing that however everytime i turn the computer on again it will always detect it again and say that it is running and therefore cannot be disinfected...

then i use killbox all the time to delete it or spybot but it keeps coming back... what do i do

**Strider** · 15-04-2008, 10:49 AM

Can you do an Antivirus scan in the safe mode?

Tuk Tuk · 15-04-2008, 12:58 PM

yes i can run a scan in safe mode do you want me to run one ?

**bakuryu** · 15-04-2008, 03:05 PM

are you running a full scan on all the partitions, disabling system restore on all of them ? Also which browser are you using ? And is the file location for the detected threat same ?

Tuk Tuk · 15-04-2008, 03:10 PM

Quote:

are you running a full scan on all the partitions, disabling system restore on all of them ? Also which browser are you using ? And is the file location for the detected threat same ?

yes ive fully scanned both partitions, disabling system restore. However ill be able to disinfect it and then delete it with my internet security or kill it with your killbox however when i restart the computer as it tells me to it will reapper when my computer protection status runs again scanning all of my computer.

in answer to your browser question i am using Internet Explorer with all updates installed for it through windows update.

and yes the file is always detected int he same location: C:\Program Files\Internet Explorer\svchost.exe

**Chef** · 15-04-2008, 06:13 PM

I think that some part of a trojan file attached itself to svghost.exe as this is one of the main tasks that functions while Vista loads up...

Most likely a virus of some sort attached itself or replicated itself into/or a svghost.exe

As Strider mentioned, doing a Safe Boot and going into safe mode disables some, well most functions and normal tasks Vista would normally load up, so a safe boot and a scan from then on should do the process of eliminating the virus. If it persists.....your computer may be a founder of a new virus..
Something like this happended to me sometime ago and it ended up being a trojan attached itself to explorer.exe and shutting down my normal tasks and screen after 3 mins of computer use.... And then how did I fix it? A clean format and OS installation!

Which you maybe unlucky and end up with ^ this option!

This mainly happens when you use trojan cracks, keygens and other illegals!

What do you think Baku and Strider?

**bakuryu** · 15-04-2008, 08:57 PM

clear all temporary files, and IE cache. Run CCleaner and delete those files.

Then delete the svchost.exe file from the internet explorer folder. First try deleting it normally, if it does not, then run Unlocker and find which process has locked it or delete it with your Anti-virus. Next take ownership of all the files in Internet Explorer folder and set attribute of the Internet Explorer folder : Read Only. then reboot and see.

unrefined_saint · 07-11-2008, 02:45 PM

i installed kaspersky antivirus (8.0.0.454) and scanned. It detected and deleted the trojan program Trojan.Win32.Delf.bon in 3 sites
-svchost.exe\svchost.exe
-C:\Program files\internet explorer\svchost.exe
-C:\system volume information\_restore{8AB67F3D-9648-47D9-896B-3893EC8777CE}\RP245\A0100059.exe

i don't know if that already solved the problem. I cannot uninstall Internet Explorer. I tried deleting the files in the IE folder but it keeps reappearing. I don't know much about computers. Is the virus still in my computer?

Thanks

**bakuryu** · 07-11-2008, 02:51 PM

No need of un-installing IE. If the threats don't re-appear, that means Kaspersky has removed them.

**Strider** · 07-11-2008, 04:18 PM

Quote:

I cannot uninstall Internet Explorer. I tried deleting the files in the IE folder but it keeps reappearing.

If you are using Internet Explorer 6, upgrade to the version 7. It should add a little more protection against treats..

http://www.microsoft.com/windows/dow.../getitnow.mspx

15-04-2008, 04:27 AM	#11
Tuk Tuk Newbie Join Date: Mar 2008 Location: Melbourne Age: 15 Posts: 18 Thanks: 1 Thanked 0 Times in 0 Posts Rep Power: 0	Re: Help to remove Trojan.Win32.Delf.bon -C:\Program Files\Internet Explorer\svchost.exe yes i have been doing that however everytime i turn the computer on again it will always detect it again and say that it is running and therefore cannot be disinfected... then i use killbox all the time to delete it or spybot but it keeps coming back... what do i do

15-04-2008, 10:49 AM	#12
Strider Founder Join Date: Nov 2005 Location: The Last City Zion! Posts: 2,684 Thanks: 228 Thanked 230 Times in 191 Posts Rep Power: 53	Re: Help to remove Trojan.Win32.Delf.bon -C:\Program Files\Internet Explorer\svchost.exe Can you do an Antivirus scan in the safe mode? __________________ Want to ask a question? Try This! A guide on how to post a question, reply to a post etc.

15-04-2008, 12:58 PM	#13
Tuk Tuk Newbie Join Date: Mar 2008 Location: Melbourne Age: 15 Posts: 18 Thanks: 1 Thanked 0 Times in 0 Posts Rep Power: 0	Re: Help to remove Trojan.Win32.Delf.bon -C:\Program Files\Internet Explorer\svchost.exe yes i can run a scan in safe mode do you want me to run one ?

15-04-2008, 03:05 PM	#14
bakuryu ƒ(ψ)=Θº×φ Join Date: May 2006 Location: India Age: 22 Posts: 5,032 Thanks: 12 Thanked 392 Times in 362 Posts Rep Power: 69	Re: Help to remove Trojan.Win32.Delf.bon -C:\Program Files\Internet Explorer\svchost.exe are you running a full scan on all the partitions, disabling system restore on all of them ? Also which browser are you using ? And is the file location for the detected threat same ? __________________ Please don't click here

15-04-2008, 06:13 PM	#16
Chef Hardware Support Join Date: Nov 2007 Location: C:/Program Files/Games/FPS Age: 16 Posts: 701 Thanks: 54 Thanked 20 Times in 20 Posts Rep Power: 8	Re: Help to remove Trojan.Win32.Delf.bon -C:\Program Files\Internet Explorer\svchost.exe I think that some part of a trojan file attached itself to svghost.exe as this is one of the main tasks that functions while Vista loads up... Most likely a virus of some sort attached itself or replicated itself into/or a svghost.exe As Strider mentioned, doing a Safe Boot and going into safe mode disables some, well most functions and normal tasks Vista would normally load up, so a safe boot and a scan from then on should do the process of eliminating the virus. If it persists.....your computer may be a founder of a new virus.. Something like this happended to me sometime ago and it ended up being a trojan attached itself to explorer.exe and shutting down my normal tasks and screen after 3 mins of computer use.... And then how did I fix it? A clean format and OS installation! Which you maybe unlucky and end up with ^ this option! This mainly happens when you use trojan cracks, keygens and other illegals! What do you think Baku and Strider? __________________

15-04-2008, 08:57 PM	#17
bakuryu ƒ(ψ)=Θº×φ Join Date: May 2006 Location: India Age: 22 Posts: 5,032 Thanks: 12 Thanked 392 Times in 362 Posts Rep Power: 69	Re: Help to remove Trojan.Win32.Delf.bon -C:\Program Files\Internet Explorer\svchost.exe clear all temporary files, and IE cache. Run CCleaner and delete those files. Then delete the svchost.exe file from the internet explorer folder. First try deleting it normally, if it does not, then run Unlocker and find which process has locked it or delete it with your Anti-virus. Next take ownership of all the files in Internet Explorer folder and set attribute of the Internet Explorer folder : Read Only. then reboot and see.

07-11-2008, 02:45 PM	#18
unrefined_saint Newbie Join Date: Nov 2008 Age: 24 Posts: 1 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 0	Re: Help to remove Trojan.Win32.Delf.bon -C:\Program Files\Internet Explorer\svchost.exe i installed kaspersky antivirus (8.0.0.454) and scanned. It detected and deleted the trojan program Trojan.Win32.Delf.bon in 3 sites -svchost.exe\svchost.exe -C:\Program files\internet explorer\svchost.exe -C:\system volume information\_restore{8AB67F3D-9648-47D9-896B-3893EC8777CE}\RP245\A0100059.exe i don't know if that already solved the problem. I cannot uninstall Internet Explorer. I tried deleting the files in the IE folder but it keeps reappearing. I don't know much about computers. Is the virus still in my computer? Thanks

07-11-2008, 02:51 PM	#19
bakuryu ƒ(ψ)=Θº×φ Join Date: May 2006 Location: India Age: 22 Posts: 5,032 Thanks: 12 Thanked 392 Times in 362 Posts Rep Power: 69	Re: Help to remove Trojan.Win32.Delf.bon -C:\Program Files\Internet Explorer\svchost.exe No need of un-installing IE. If the threats don't re-appear, that means Kaspersky has removed them.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode