Should I remove “Backdoor.Win32.Delf.awm”?

The Backdoor.Win32.Delf.awm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.Win32.Delf.awm virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Backdoor.Win32.Delf.awm?


File Info:
name: A6D2D77EE60026F78F82.mlw
path: /opt/CAPEv2/storage/binaries/aaa6ecca87c6cea2e6e35d2d772439f4bb3576fe611ea95e46ea8911a76b0f4e
crc32: 7CBD5D7A
md5: a6d2d77ee60026f78f82aa8fc516b753
sha1: edc7370cf98ec55d84133f3c8265520b68348553
sha256: aaa6ecca87c6cea2e6e35d2d772439f4bb3576fe611ea95e46ea8911a76b0f4e
sha512: 8a81e0319ee2223058b5c8b12098fbc9ad36cecbb8779cb1c87b71f038ca5dfd20bc652233e9af8dd2946bcca73e0325a14caab10df2c980b2138e682f508b0e
ssdeep: 12288:iYRTybNL9/zCrPPhlK8eNbU0nDwK3StbhIwaeRC9:3J09/zCzrfOUACbbaeR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T127F46D32F2A19437D1731B389C5B92E59836BF106E38B9477BE91E0C4F7928278252D7
sha3_384: 4ba5b9d30698ccf9480fc7f6e647aad7060e8cc3c33d7c6b036ec9eb4b36cce8bfdac084363c475ed78c1350c81a4610
ep_bytes: c46b490033d28a53380b0495b46b4900
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Backdoor.Win32.Delf.awm also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Delf.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.GenericKD.69164629
FireEye	Generic.mg.a6d2d77ee60026f7
Skyhigh	BehavesLike.Win32.Generic.bh
ALYac	Trojan.GenericKD.69164629
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Backdoor.Delf.Win32.23053
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:Win32/Generic.fc91e030
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.Delf.awm
BitDefender	Trojan.GenericKD.69164629
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.11b6313f
Emsisoft	Trojan.GenericKD.69164629 (B)
F-Secure	Backdoor.BDS/Delf.tlpry
DrWeb	Trojan.PWS.Wmd
VIPRE	Trojan.GenericKD.69164629
TrendMicro	TROJ_GEN.R03BC0XIC23
Trapmine	malicious.moderate.ml.score
Sophos	Generic Reputation PUA (PUA)
Ikarus	Trojan-Dropper.Delf
GData	Trojan.GenericKD.69164629
Google	Detected
Avira	BDS/Delf.tlpry
Antiy-AVL	Trojan[Backdoor]/Win32.Delf
Kingsoft	malware.kb.b.932
Arcabit	Trojan.Generic.D41F5E55
ZoneAlarm	Backdoor.Win32.Delf.awm
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Win.Generic.C5481895
MAX	malware (ai score=84)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BC0XIC23
Rising	Backdoor.Delf!8.780 (CLOUD)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat.DU
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.cf98ec
DeepInstinct	MALICIOUS

How to remove Backdoor.Win32.Delf.awm?

Backdoor.Win32.Delf.awm removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X