Home Spyware Database "Trojan.Dropper-Delf Removal Guide"

Trojan.Dropper-Delf Removal Guide

Trojan.Dropper-Delf Description

Trojan.Dropper-Delf Automatic Detection (Recommended)

Is your PC infected with Trojan.Dropper-Delf? To safely & quickly detect Trojan.Dropper-Delf, we highly recommend you...

Download SpyHunter's Malware Scanner.

SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats.

Trojan.Dropper-Delf Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove Trojan.Dropper-Delf Processes

Remove the "Trojan.Dropper-Delf" processes files:
lsas.exe %USERPROFILE%\LOCALS~1\Temp\v5chyhhcu.exe %SYSTEMROOT%\odb.exe %SYSTEMROOT%\system32\prunnet.exe prunnet.exe %SYSTEMROOT%\svchost.exe prun.exe A2-tmpapi.exe ieupdates.exe GB-tmp_.exe G17-tmp_.exe G12-tmp_.exe meex.exe adgiygu.exe Gay-Lesbian-Photo.exe mljul0.exe media_codec_iw_3912969[1].exe A0001215.exe KB_963491.exe msiesettings[1].exe ie_update3r.exe winow.exe msm.exe winlogo.exe show2[1].exe netg[1].exe vcodec2007[1].exe sadan[1].exe Installer5.exe
Read more about How to kill Trojan.Dropper-Delf Processes

Step 2 : Use Registry Editor to Remove Trojan.Dropper-Delf Registry Values

Locate and delete "Trojan.Dropper-Delf" registry entries:
A4F94C0C-54A7-4DB1-9AF3-B22E63D00302 0B5F7FDF-0717-45BF-B49D-695F3168C7FE SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\Winhost4 SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\Winhost3 SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\Winhost2 SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\Winhost1 SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\Winhost SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\SystemDriverLoad SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\SystemDriver SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\gamma SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\FDriver SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\DriverLoad SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\DriverCheck SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\DDriver SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\CDriver SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\beta SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\alpha SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ADriver B2FBBC8D-743D-4DDF-BD61-A9E314D14EA5 B6B28A9D-AB77-4959-BAE2-E39F446B16CA D33752EC-B654-46ED-BB6B-FE0FFF83B990 c111cf13-545f-6ff1-51ac-f623d452c63d software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\CheckWeb 90B286E7-377B-4C7C-8859-9D961E8DD433 C6F12012-1E17-4D5E-A9FF-D051732E3573 AppID\dsaip32b.dll AppID\3084A75F-5350-4D8B-BC5F-6B378035C133 3084A75F-5350-4D8B-BC5F-6B378035C133 SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\ieupdate 04A9D5D4-73A5-4752-9820-06086885F789 AppID\038F228B-EED3-4A87-A565-F88FC99EBA91 038F228B-EED3-4A87-A565-F88FC99EBA91 04B0AACB-ADE6-45C7-9989-7836E8DC8C3D D99BACC6-6289-4D4F-8BAF-4192016AF547 B8A170A8-7AD3-4678-B2FE-F2D7381CC1B5 SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\B8A170A8-7AD3-4678-B2FE-F2D7381CC1B5 D1159422-16E3-462F-A93D-FB718E100407 D4C5947D-16E3-462F-A93D-FB718E100406 C7CF1142-0785-4B12-A280-B64681E4D45E 1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5 MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\st3 Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\D1159422-16E3-462F-A93D-FB718E100407 Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\D4C5947D-16E3-462F-A93D-FB718E100406 Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\C7CF1142-0785-4B12-A280-B64681E4D45E Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5 SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\KAV
Read more about How to Remove Trojan.Dropper-Delf Registry Entries

Step 3 : Use Windows Command Prompt to Unregister Trojan.Dropper-Delf DLL Files

Search and unregister "Trojan.Dropper-Delf" DLL files:
%SYSTEMROOT%\system32\adsldpbx.dll %SYSTEMROOT%\system32\admparsek.dll adsldpbx.dll admparsek.dll %USERPROFILE%\application data\google\mjkdpl.dll mjkdpl.dll cryper.dll dsaip32b.dll cdfvie.dll bDivX.dll isignup.dll ztaman.dll ztacfg.dll tlvpri.dll tlrini.dll qjgpri.dll qjgini.dll myfpri.dll myfini.dll jzipri.dll jziini.dll jhbpri.dll winow.dll d3dxofa.dll fontext_a.dll prflbmsgp32.dll st3.dll Kav.dll 235780.DLL internat.dll
Read more about How to Remove Trojan.Dropper-Delf DLL Files

Step 4 : Detect and Delete Other Trojan.Dropper-Delf Files

Remove the "Trojan.Dropper-Delf" processes files:
lsas.exe adsldpbx.dll admparsek.dll prunnet.exe mjkdpl.dll prunnet prun.exe SystemDriverLoad SystemDriver gamma FDriver DriverLoad DriverCheck DDriver CDriver beta alpha ADriver A2-tmpapi.exe cryper.dll dsaip32b.dll ieupdates.exe cdfvie.dll GB-tmp_.exe G17-tmp_.exe G12-tmp_.exe meex.exe adgiygu.exe Gay-Lesbian-Photo.exe gsvlnlo adgiygu pviever mljul0.exe media_codec_iw_3912969[1].exe RegistryMonitor1 bDivX.dll isignup.sys A0001215.exe isignup.dll KB_963491.exe msiesettings[1].exe ie_update3r.exe Winmplayer winow.exe ztaman.dll ztacfg.dll tlvpri.dll tlrini.dll qjgpri.dll qjgini.dll myfpri.dll myfini.dll jzipri.dll jziini.dll jhbpri.dll winow.dll d3dxofa.dll fontext_a.dll prflbmsgp32.dll st3.dll msm.exe winlogo.exe show2[1].exe netg[1].exe vcodec2007[1].exe sadan[1].exe Kav.dll 235780.DLL RealUpdate internat.dll ControlPanel MsnValue messengerapp Installer5.exe %USERPROFILE%\LOCALS~1\Temp\v5chyhhcu.exe %SYSTEMROOT%\system32\adsldpbx.dll %SYSTEMROOT%\system32\admparsek.dll %SYSTEMROOT%\odb.exe %SYSTEMROOT%\system32\prunnet.exe %USERPROFILE%\application data\google\mjkdpl.dll %SYSTEMROOT%\svchost.exe
Read more about How to Delete Harmful Files

Step 5 : View the Trojan.Dropper-Delf Components with its MD5s

Remove the "Trojan.Dropper-Delf" components:

File Name	File Size	MD5
ie_update3r.exe	13773	119f799105364d2859433a00f4f51476
fycini.dll	49	b018a0ba8b4a7f0d838a6a7aad896502
jziini.dll	57	6bfc83d366eebe2e7db3b1274976ab3f
qjgini.dll	60	d87c825d982ecebec25ecf1feb72ca7e
ztacfg.dll	47	54d48d12950dcba37f75bd76d8690f25
st3.dll	70144	02c68950e41d4e4e4353d485486293ce
msm.exe	524800	aa6ea0b8dffba3af32c92a1aacb04940
~.exe	13773	cbf134144bbefb8329d9516b533ff72a
winlogon.exe	12841	d4d8dd60179295acd189dbed42c6df38
media_codec_iw_3912969[1].exe	84506	622b65c2520c6e994235789234049176
Gay-Lesbian-Photo.exe	309248	fcf419f630c361ec48dccbefdfd5b0a8
nluoyvq.exe	77164	a00abf85c4dc3bf22ed68795f4500f53
install_player_3912990[1].exe	97835	63477713fd84e40608c2c53e264ab6da
G6-tmp_.exe	412672	b72d121fb4a8cd46e1c0753c444508ed
G2-tmpa1i.exe	263680	fb5529fe3a47e905df580a51cbe10c2e
dsaip32b.dll	211968	734fea41338ed88f1791672a409a4874
G2C-tmp1i.exe	395776	7944c6d95cd33257dd70d7bdda3ff836
cryper.dll	261632	2c8afa26df62097d56ccaf36ca8bfade
msetup[1].exe	90511	fbe89f9598c6ae730e0b72a0d3b8a15c
ieupdates.exe	59904	05a94b822ab5e26d193cc4282c77ad5a
ieupdates.exe	58880	cd65e10f876d73f2ef17f66d3979a904
c-setup[1].exe	65543	72632addf4acab87f1b43cad152241b2
svchost.exe	200704	f67e42e0136d3138d6574ba018db1c46
prun.exe	34304	ca04b240118c8ecca7881930d2f8afbd
install[1].exe	63015	34551c4fc4d795e046f826336b0b712e
svchost.exe	245248	69c5d85d7890a9fa127851a3099998fa
prunnet.exe	36094	bf223156a89e3eb39e019b68d38dab9a
prunnet.exe	44890	ac1089330b5763220e88ade5977eafe5
odb.exe	235520	ad37d3bb1a3d01b813f45fed060d4884
svchost.exe	255176	d4fbe0171329e899645f8caf4370d0d8
adsldpbx.dll	71168	04a1a1d86e0d3d765ee4eb89030543a1
run_.exe	553984	11e21259a561e3dad535aedc2250f9f0
RUNDLL32.exe	235520	e0d9f6d426c40eb7c539dc46d7d230b9
filename.exe	86016	1e895bb72986d1d1ffe9c9c5d6276795
lsas.exe	61952	59fa22323eec6e0ff8e5fb8837bde567
msiesettings[1].exe	13773	119f799105364d2859433a00f4f51476
fyepri.dll	16934	fd994510b851c1e93f4aa8336fba4453
jzipri.dll	18990	79b5b65de81411f2a98746ace6f5a61c
qjgpri.dll	19505	d87808f2168343de288a721fe2b4c416
ztaman.dll	19492	27ba455a0b415baa147371a913c329c7
prflbmsgp32.dll	67072	af61801d797f4eb16bf19c2c49307e8c
netg[1].exe	219010	dd7461b20443c0f732bf373807f8c0ad
isignup.dll	34175	02615c1bb824ecd4c317a84cf54b3cb6
winow.exe	27033	f876b86c84470aa1760f567b50981215
mljul0.exe	314880	d79f2c57461436ee210b337428041d29
adgiygu.exe	77164	a00abf85c4dc3bf22ed68795f4500f53
G12-tmp_.exe	406528	68f50a7d2a6a99b6f19435658429a94b
install_player_3912981[1].exe	97835	6e27a782deb6c8653c889b2768492f77
cdfvie.dll	84480	fa1df61787bf4df17d8670cd53f0e2a6
G4-tmpa1i.exe	263680	fb5529fe3a47e905df580a51cbe10c2e
dsaip32b.dll	214016	34cd8fbdf4e918feaf0ba5e366f4c270
WebVideoSetup[1].exe	82455	23873ee5b6810ab542321a23f3f806d2
cdfvie.dll	88064	ba9d7c28b4cc7c34459ff764ae9c04ee
ieupdates.exe	49152	58446c824612457c2b51224acd04757e
ieupdates.exe	61440	ed5b5eaa73ebc8c481cc44db87b715f4
ieupdates.exe	60928	f9e6f6cb504dae41e2a38cdaa44aa689
apieaxcraje.dll	271360	c6e95f3899807cf6bb6da137e42aa74b
drvcnf.dll	266752	7e66635282fd058e6f7997f71a3b9324
load[1].exe,S87ekhV.exe	13312	b76f057f467552786948a99c2b267e32
sadan[1].exe	121392	0c859fe07e1988af5ea29ed30cd9a482
mjkdpl.dll	65536	927c5b13f7abc37086f58b245d31d10c
prunnet.exe	38400	b2bba040b67f1953171f117aa00a6c31
ieupdates.exe	66048	15910406cd34cb567fb404cb574e6d13
prunnet.exe	69184	84ac32cacc8885b8d78f921415f536a4
odb.exe	237568	e6b7ba961af67f8ce84e933d96db05fc
odb.exe	234496	721e15626ab8bfc2530284610cbc4d84
wserving.exe	188416	a2e6eae125ed5c863a514a67134a6f2b
wnzip32.exe	100864	346a71fc6aceb5a695ddf05640f7d041
javaz.exe	160768	b571a1e84ec1be0be60c8df6a47085e6
winow.dll	33792	5cd61641192a634ca19816f851505a39
jhbpri.dll	17455	af8db36b998a286f16a6cdbc85b22266
myfpri.dll	20521	18ff7b4baea8952f4845612fe882a5a6
tlvpri.dll	16423	bbe3e2e988114b32c6cfa4ab169ab726
st3.dll	64512	18f6ba12511c0dd14e55055077c78893
d3dxofa.dll	70656	0b12046a3ad3a1302f7d7f1f26f4548a
winlogo.exe	12206	475de79b3e3ac05d5882aea679489c09
setup.exe	12841	d4d8dd60179295acd189dbed42c6df38
bDivX.dll	245760	633db8062be95578038cbbac95384b5b
~tmp.exe	18432	fa6f68fde8d3a0a0b93440116dd6e430
apgefvc.exe	77164	a00abf85c4dc3bf22ed68795f4500f53
GB-tmp_.exe	405504	d7db827139eca4aee28277b97210df71
winlogo.exe	36864	fb3189f7a023621b0109472b951b1bd4
ieupdates.exe	50688	e3d8ce6a6e54a4da54c8f79133441617
dsaip32b.dll	213504	e212756fbf6ac877780683ab050e5ecd
dsaip32b.dll	212480	b3a98dd19b2eb67a305f733f16bc9d42
svpekgonwvx.dll	212992	66e113f1500c4d95d9375e79f9b189db
cscdl.dll	88064	3b9eade7ea3cc7facc1247feccea4c03
ieupdates.exe	57344	d021272a1a7f7b3bf338222abe934339
setup_1_1_[1].exe	56832	47292a1fbf9c19233bf5289cdffb9bd3
services.exe	597504	9cd8f790c818e9a35395d824e8594727
wdmon.exe	253440	6c275bea7ad7b76260989dbbc3d85d23
svchost.exe	245760	112efcc5e649c2ccb25d4c5648e5b6c3
specailbots[1].exe,wplayer.exe	1698304	312ac0239d9fba386cacbe539a4cde4b
prunnet.exe	34816	e0d913a1b8de25914d1dd8a6ecc610d4
prunnet.exe	35840	a8711bb39a78ce400ea2edc737759c05
prunnet.exe	60054	23f61dad07688c985e4f64e9428a87c6
prunnet.exe	114688	d3e8d5217d17b41db29b87f1111cf388
odb.exe	233984	1328accd1d2a6751cce6799b7e821f67
admparsek.dll	55808	ef3b3f1491d16d9e99a9611c27875a35
svw.exe	230912	928a4ef1f58046067a43d0f469bc16f4
ree2.exe	190976	f87c808990f26a49baef38c9ccc2d8a7
svchost.exe	52736	5e15535c5c870e3442a296eb1b6e6af8
bxwnz.exe	357376	e39be19b701f5cf8beb70a7088b8199c
KB_963491.exe	13773	119f799105364d2859433a00f4f51476
jhbini.dll	58	8bb7a6bf5968b0cff39ed22a64c588ad
myfini.dll	52	08f43be251db0efd06ca032a5b933ac1
tlrini.dll	50	bd8a5e44d5b624871c2c3363562325b4
winow.exe	27623	1aea400cccfe3baa8edda8f063f8037e
fontext_a.dll	70656	f7601d1a4fa7e35d87fe4d5eaca0c5a2
show2[1].exe	16384	edcbece80245af8ca7c415716336bc81
winow.dll	32256	e1572f17a8b3b64a56b3605fef0251bb
isignup.sys	49913	4652655440adfefbb8d8e00d0fd8d729
qtplugin.exe	314880	d79f2c57461436ee210b337428041d29
meex.exe	77164	a00abf85c4dc3bf22ed68795f4500f53
G17-tmp_.exe	406528	68f50a7d2a6a99b6f19435658429a94b
locker.exe	217088	ed4dd4577d8c99d64d99b4394fcbcfa0
G9-tmp1i.exe	410112	d48bb471ea6546b8069525284c020bf3
dsaip32b.dll	211456	826c30aaaa6be5356dc9c3201d47c388
dsaip32b.dll	216064	69ac2e60201052609fffea93c1f48e41
svpekgonwnp.dll	245760	5558fa6fefb032ea485ebc5889219367
A2-tmpapi.exe	262144	5364f5bd4b62e17124cf70f943bc408b
go[1].exe,ms-5.exe,svchost.exe,ms-1.exe	198144	0394118e08995f5e87c703926c77f37b
ieupdates.exe	59392	f1c192c9d00943dae0de1779c8e61bef
ieupdates.exe	71168	89ad3fdbb49c2f9988b301f332a85354
i[1].exe	16896	74394297107b982c274a49ab5de7f80f
prun.exe	29696	b50055da10328141838bc810818c9c63
skioiniw.exe	120832	8bfa4f2fed552d66888b76fcfda534bd
prunnet.exe	94272	ddfcae620452f63bb14fb821ee442ca1
prunnet.exe	70656	4cd45199d3f51639181e09678aa94deb
service.exe	47616	8e8d13ca106f31b904e2b06fe73101ce
mrs.exe	193536	f697fb897976d88b42996db0bd687d0b
prunnet.exe	44824	7ecbb49043c17c6c2385890b4a5e249e
odb.exe	232960	a533ff445d6ad0101b5698db8cc3d804
v5chyhhcu.exe	15001	9dfeca8351c88e5f38015b808b9207d5
ieupdates.exe	58880	88b3688756b6fa8cf899d567cf9eef7e
shell32.dll	67584	ddf80fc4a1f091f9893658625cd71de7
propa.exe	398336	45c0bf52ef941a600798234ff3f84b27

Site Disclaimer

SpywareRemove.com IS NOT associated, affiliated, consorted, or connected with the publishers or creators of Trojan.Dropper-Delf.

User Comments

Username:    Mohammad Ayyub    Date Posted:    2008-04-16 10:08:55    Comment: I WAS SUFFER WITH TROJAN HORSE NAMED CDFVIE.DLL THAT CANNOT REMOVE EASILY.UNTIL YOU REINSTALL UR OPERATING SYSTEM. BUT WE CAN DELETE IT BY THIS WAY, TRY TO REMOVE UR HARD DISK FROM UR PC AND FIX IT TO ANOTHER PC THAT IS VIRUS FREE AND MAKE IT SLAVE.GO TOUR HARD DISK C:\WINODWS\SYSTEM32\ THEN SELECT CDFVIE.DLL,OR WHERE IT IS LOCATED SELECT IT AND PRESS DELETE. FIX UR HARD DISK TO UR OWN PC. AND SCAN FOR TROJAN HORSE,THAT WILL BE REMOVED TRY TO USE FIREFOX EXPLORER. IF U HAVE A INTERNET EXPLORER 6.0 TRY TO REMOVE IT FOR A FEW TIME

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top