Well it was 3:30am in the morning and I’m just about to shut my PC down for the night and go to bed, when I get the following virus warning from Avast:
C:\Program Files\Spybot – Search & Destroy\SDHelper.dll
Win32:Delf-MZG [Trj]
Trojan Horse
091203-0, 03/12/2009
As soon as I realised it was SpyBot Search & Destroy I almost crapped my pants in panic! If that’s infected it must be a really BAD virus infection!!
Avast wouldn’t delete the file because it’s running and after scanning the Spybot – Search & Destroy folder with Avast I got multiple warnings of the same Win32:Delf-MZG [Trj] trojan virus infection!
By now I’d already disconnected the PC from the Internet and was quickly closing all programs down including Spybot – Search & Destroy.
Then I took a step back and thought how the heck has Spybot – Search & Destroy become infected with a Trojan like Win32:Delf-MZG [Trj]? Looking at the files that are supposedly infected they have old dates, suggesting they’ve not been edited recently.
So I reconnected the Internet and searched Win32:Delf-MZG [Trj] and found multiple pages about this, looks like it’s a false positive, thank God for that!
My PCs have not had a virus infection for over 10 years, last one was when I first got into PCs and I didn’t run AV software and had a PC (a 486 
) infected with the Chernobyl virus that damages your PC on the anniversary of the Chernobyl accident, I found it 2 days before the anniversary!
Looks like Avast has screwed up it’s virus database, the forums I’m looking at are loading so slowly looks like their servers are struggling to keep up with people like me looking for answers!
If you get hit with the problem as I understand things you should not delete the files or add them to the vault/chest, because It will mess up those programs.
I’m going to sleep now and hope when I Wake up in the morning Avast has fixed it’s virus database. If not I’ll uninstall it and find an alternative AV scanner.
Now it’s past 4am and I really need sleep, stupid Avast!
Update: I’ve had a good nights sleep and woke to find confirmation it’s a false positive http://forum.avast.com/index.php?topic=51647 and Avast has updated and no longer reports Spybot Search and Destroy as infected on the PC I had a problem with.
Hoping no one reading this messed up their PCs in a panic?
David
6 responses to Avast Win32:Delf-MZG [Trj] Trojan Warning and SpyBot Search and Destroy
Yes, I’ve been through the same as you this night and, from what it seems, Avast has fixed the missunderstanding. I hope nothing has stopped working… Thank you deeply for your helpful post!
Yes and its for many other exes and dlls as well, such as a particular dll in the IZArc Program folder and new installers. :@
Is this really a false positive alert? This morning I got lots of alerts for Win32.delf-mgz, a little bit after update AVAST virus definition datebase, I started my virtual machine that also alarmed (the virus definition database wasn’t up to date on that, just updated yesterday evening on that machine.) I tried to get a delf remover from avast website, and it said for the remover it is infected!!!
Before that I listened to music on AIMP and it said bass.dll is infected by win32,delf-mgz. I disabled Avast!’s real time protection then I ran ESET’s remover tool, it didn’t find anything.
What can I do?
Avast Win32:Delf-MZG [Trj] Trojan Warning and SpyBot Search and Destroy
I’m having the same problem, though I hd actually panicked and thought the trojan was loading bogus files into my program (had a trojan that did this before) and moved them to the chest, effectively ruining Spybot. Now I can’t get Spybot to uninstall and reinstall, and Avast won’t leave the thing alone.
Hoping someone comes up with a solution.
Avast Win32:Delf-MZG [Trj] Trojan Warning and SpyBot Search and Destroy
Well, i was trying to play some game when avast simply deleted the door to it, i got so scared… installing again the whole game? My computer was infected since when!!!? I just turned off avast and copy pasted the shortcut to the game from a friends PC… well, at least it has been fixed, i just realized that my avast wasnt updated…
Avast Win32:Delf-MZG [Trj] Trojan Warning and SpyBot Search and Destroy
I had this happen when my girlfriend left the computer on during the night and she was logged into Skype. My computer started sounding the alarm that someone or something was trying to load the Trojan through the Skype program. I shut off my computer and ran all my anti-virus programs ( Avast Pro ) being one of them. I placed the file in the chest and every since then we have not been able to log into Skype. I have uninstalled and re-installed Skype several times now with no luck. I have now deleted the Trojan file from the chest and will see it that will fix my Skype problem after I go back and re-install that again.
I hope it works…..I’ve been pulling out what hair I have left for the last 7 days.
Avast Win32:Delf-MZG [Trj] Trojan Warning and SpyBot Search and Destroy
Leave a reply to Avast Win32:Delf-MZG [Trj] Trojan Warning and SpyBot Search and Destroy