TROJ_DELF.D , Need help to Remove

[Killer0]

I believe that it, troj_delf.d, has found a home in system32, file hnsys32.dll. I can remove it but XP put it right back when I reboot.
Of course "Search" doesn't find the hnsys32.dll backup. I don't understand how the backup works, but I thought I could delete the backup and find a clean replacement.


Fix-it finds it but can't fix it.
Trendmicro describes it.
McAfee couldn't find it.

Any ideas on where to start?

 

[SESaskDFC]

Howdy:

Disable System Restore.. Now clean out the virii.. When done, run a full system scan to be sure.. Reboot.. Run another scan. If clean, enable System Restore.

Murray

 

[carrr]

Go into regedit. Look for this key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
"Microsoft xdaemon 2.0"="C:\WINDOWS\xdaemon.exe - disable"

If found, delete it.

(Always back up your registry before editing, of course...)

 

[Killer0]

SESaskDFC & Carr,

Thanks for the ideas.
I'll try both.

 

[dkediger]

See the last several posts of this...
thread760-597681

Basically you've got SoBigE