Link to home
Start Free TrialLog in
Avatar of Beaver_Trucks
Beaver_Trucks

asked on

Remove Trojan Horse downloader.delf.12.an

I need help in removing a trojan horse from a system.

AVG 8 pops up with the following notification when you open anything:

Threat detected!
file name: c:\windows\system32\corpolw.dll
threat name: Trojan horse Downloader.Delf.12.AN

I have attached a copy of the hijack this log


hijackthis--2-.log
ASKER CERTIFIED SOLUTION
Avatar of David-Howard
David-Howard

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Beaver_Trucks
Beaver_Trucks

ASKER

I have tried safe mode, no dice, it keeps coming back.
Disable System Restore and run your suites in Safe Mode again. If you don't disable System Restore it can reappear.
http://www.pchell.com/virus/systemrestore.shtml
You may also be able to remove this with combofix. The directions and the free tool are at the link below. Please make sure that you follow the directions as they are not the standard click and run type.
Combofix is known to remove a wide varitey of trojans, etc.
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Download Combofix from:
www.bleepingcomputer.com/combofix/how-to-use-combofix
Follow the Steps on how to use ComboFix which is also on the site above
Post the ComboFix Log here once finished
The Malwarebytes Anti-Malware program solved my issue

Thanks very much
Great! You're very welcome.