Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 09-17-2004, 02:45 AM   #1
Solid State Member
 
ronstaa's Avatar
 
Join Date: Mar 2004
Posts: 8
Default Trojan Del-457 Please help???

Hi
Can someone help please this so called Trojan is giving me grey hairs. How do I delete this thing. We are running Vshield virus scan. Each time I reboot the computer this message appears from Vshield program...

Infected file name:
C:\Documents and Settings\ronald.polonski\Local Settings\Temp\hostx.exe\HOSTX.EXE

Virus name:
Del-457

And I cannot find the file it isnt there and no the folders are set to show hidden folders I checked. Even the system guy tried and cannot work it out. The program allows me to delete the Trojan, so thats what I did but then the program tells me then it cannot delete it, it must be done manually please help what the hell is it?????????????
__________________

ronstaa is offline   Reply With Quote
Old 09-18-2004, 03:15 AM   #2
Fully Optimized
 
CoMpUtaFrEek's Avatar
 
Join Date: May 2004
Posts: 1,765
Default Re: Trojan Del-457 Please help???

Sounds like you have an outdated virus scanner. I'd recommend upgrading it if you are having problems.

Try searching for files and folders and type "hostx"
__________________

__________________
Asus A7N8X Deluxe - Rev 2.0 - Bios Ver. 1007
AMD Athlon XP-M 2200+ - @ 11x188 = 2Ghz (1.75Vcore)
ATi Radeon 9700 Pro (Almost as good as my old 5950U!)
Corsair 512MB XMS TwinX Low Latency DDR 400 - @ 188Mhz
3dmark03 Score: 5086
CoMpUtaFrEek is offline   Reply With Quote
Old 09-18-2004, 03:15 AM   #3
Fully Optimized
 
CoMpUtaFrEek's Avatar
 
Join Date: May 2004
Posts: 1,765
Default Re: Trojan Del-457 Please help???

Or boot into safe mode and run the virus scan
__________________
Asus A7N8X Deluxe - Rev 2.0 - Bios Ver. 1007
AMD Athlon XP-M 2200+ - @ 11x188 = 2Ghz (1.75Vcore)
ATi Radeon 9700 Pro (Almost as good as my old 5950U!)
Corsair 512MB XMS TwinX Low Latency DDR 400 - @ 188Mhz
3dmark03 Score: 5086
CoMpUtaFrEek is offline   Reply With Quote
Old 09-18-2004, 04:47 AM   #4
Solid State Member
 
ronstaa's Avatar
 
Join Date: Mar 2004
Posts: 8
Default

Ive tried to do a search and it came up empty handed. I will try to update the virus program and see what happens. I have a feeling our company is a little slack in updating the program I cannot remeber last time they updated.
ronstaa is offline   Reply With Quote
Old 09-19-2004, 08:43 AM   #5
Fully Optimized
 
CoMpUtaFrEek's Avatar
 
Join Date: May 2004
Posts: 1,765
Default Re: Trojan Del-457 Please help???

Might want to buy the recent version of Mcafee, I think you may have an older one.

Theyre nasty they make you buy the big updates.
__________________
Asus A7N8X Deluxe - Rev 2.0 - Bios Ver. 1007
AMD Athlon XP-M 2200+ - @ 11x188 = 2Ghz (1.75Vcore)
ATi Radeon 9700 Pro (Almost as good as my old 5950U!)
Corsair 512MB XMS TwinX Low Latency DDR 400 - @ 188Mhz
3dmark03 Score: 5086
CoMpUtaFrEek is offline   Reply With Quote
Old 09-28-2004, 11:24 PM   #6
KYR
Beta Member
 
Join Date: Sep 2004
Posts: 3
Default Del-457

I am having the same issue. I just bought the newest version of Mcafee. At least twice a day Mcafee tells me that the hostx.exe file is infected with the Del-457 trojan. It also tells me that the file has been deleted to complete the clean process. Now this pops up at least two or three times a day. When I run the virus scan it comes up as Virtumondo. It won't let me delete it just quaranteen. When I try to search for the file and delete it manually, it won't let me delete it. I think the name of the malicious file is "oledoc.exe". Hijack this lets me delete it but it keeps coming back. I am stuck and that is how I found this cool forum. Anyone know anything about this PITA?
KYR is offline   Reply With Quote
Old 09-30-2004, 04:56 PM   #7
Beta Member
 
Join Date: Sep 2004
Posts: 4
Question

I am having the same issue. I tried to delete the file but cannot. Booted into ERD and deleted the file but when I boot back up normally it comes right back. I have the latest DAT for mcafee and it recognizes the file but does nothing about it. I have searched the registry and found nothing that relates to this. Anyone out there know anything about this hostx.exe?
teqmod is offline   Reply With Quote
Old 09-30-2004, 04:58 PM   #8
Beta Member
 
Join Date: Sep 2004
Posts: 4
Default another thing

I delete it and log in as a different user it automatically loads into the local settings for that user, so it starts somewhere during the logon process, not the boot process. Or so it would seem.
teqmod is offline   Reply With Quote
Old 10-05-2004, 06:06 PM   #9
KYR
Beta Member
 
Join Date: Sep 2004
Posts: 3
Default

No one has anything huh? This seems to be a strange virus that is recognized but no one knows how to clean it. I really don't want to reformat... uhggg
KYR is offline   Reply With Quote
Old 10-06-2004, 08:06 AM   #10
Beta Member
 
Join Date: Sep 2004
Posts: 4
Default It's Gone!!!!!!

I will post what I did when I get into work this morning!!
__________________

teqmod is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 11:42 PM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0