trojan.win32.delf.nl

Hi
When i was scanning my pc with a-squared free it detected this in the folder
C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
I have Boclean running and did not alert me of anything should i be worried?
Thank you

Mário

 

I am now running ewido and so far nothing appear, so may be a FP from a-squared


well it has finished and nothing found also still no alert from Boclean
dont know what to think

 

Right click on the file, look at the properties of the file.

Check the md5 hash, and google.

It should be legimate .

 

Even better than scanning the file with just Ewido, upload it to be tested here:

http://www.virustotal.com/en/indexf.html

It will be scanned by 26 or so different AVs...

 

and from there you can see if it is safe or not .. 26 av's with some of them a very respected response time regarding detection ...


you'll see

good luck

 

Thank you
I have uploaded the file, but how do i know then if it is something?
Also i have posted in a-squared forum but till today i havent received any answer.

Mário

 

Well, you patiently wait for the scan results to appear...

You"ll eventually see something like this (see attachment)

In this particular case you can see that two AVs positively identify it as malware (even though the majority don't).

That's the advantage of having a file scanned by multiple engines.