Virus Norton didn't detect "win32/delf.fr trojan"

Well NOD detected a win32/delf.fr trojan that norton didn't. The file is svced.exe located in the system32 folder....I'm not sure what to do with it and I couldn't find any support issues on their site for it...any ideas? Thanks in advance.

Regards,
-BB.

[Madsen DK]

Hi bb
Cant you clean or quarantine it, or am i not getting it right
Nod got it NAV didnt, well whats the problem?
Regards
Ole

[Paul Wilders]

quoting: balbane link=board=39;threadid=10252;start=0#msg66512 date=1055540977]
Well NOD detected a win32/delf.fr trojan that norton didn't. The file is svced.exe located in the system32 folder....I'm not sure what to do with it and I couldn't find any support issues on their site for it...any ideas? Thanks in advance.

Regards,
-BB.

Please submit the file to Eset for examination.

Thanks in advance,

paul

The file sort of, well I deleted it. I searched and svced isn't a windows component it's just part of the trojan....Sorry but thanks guys.

Regards,
-BB.

[balbanebeoulve]

This is balbane and I keep getting the same problem. NOD32 says I have win32/delf in the system volume information. I have a quarantine of it....but when I scan my whole computer nothing pops up...only sometimes it detects this...Please tell me how I can fix this..Thanks in advance.

Regards,
-BB.

[Paul Wilders]

Hi bal...

Please tell us what O/S you do have installed/in use.

regards.

paul

[balbanebeoulve]

Windows XP home edition.

[controler]

Windows Me and up with keep a copy of everything you download
in that system volume information folder and no matter how many times you try to delete the file when you reboot windows wil always replace it . The only way to get around that is to turn system restore off
one thing though,, some systems lose and points you have saved as restore points when you turn off system restore. Those files kept in System Volume Information can't hurt anything anyway.

con

[jan]

Hi balba,

have you seen our FAQ about System restore?

Rgds.,

jan