Cannot remove W32/Delf.FFWG

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by AutoCAD, May 3, 2011.

  1. AutoCAD

    AutoCAD Private E-2

    Hi All:

    After uninstalling all my anti-virus and anti-spyware and install mgtools and combofix. I run Norman.exe and I get W32/Delf.FFWG, but I cannot get it removed from my computer. Any suggestions?
     
  2. LauraR

    LauraR MajorGeeks Super-Duper Administrator Staff Member

  3. AutoCAD

    AutoCAD Private E-2

    Ok I ran READ & RUN ME FIRST Malware Removal Guide (incl. spyware, virus, trojan, hijacker).

    Basically, everything worked as before, I clean temp directories and run each cleaning process. But, when I run Norman I get this same error that does not clean. Below are the logs and I have added the norman log and MGlogs.zip in my next reply.
     

    Attached Files:

  4. AutoCAD

    AutoCAD Private E-2

    Here is the Norman Log and MGlogs.zip
     

    Attached Files:

  5. AutoCAD

    AutoCAD Private E-2

    Has anyone found a solution?
    Do I need to add anything to my post?
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You do not appear to be having malware problems. Your logs are clean. You are just suffering from false detections by Norman ( one of the reasons we don't use it ). It does not even show you what process it is referring to, but I would expect that it is complaining about catchme.sys which is on your PC due to ComboFix which uses this program from GMER to help locate rootkits.



    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Go back to step 6 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Go to add/remove programs and uninstall HijackThis.
    7. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    8. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds