Spy

Spyware.DiamondFox removal tips

Malware Removal

The Spyware.DiamondFox is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Spyware.DiamondFox virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Drops a binary and executes it
  • Performs some HTTP requests
  • A scripting utility was executed
  • Creates a hidden or system file
  • Contacts C&C server HTTP check-in (Banking Trojan)
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

diamond.serivice.com

How to determine Spyware.DiamondFox?


File Info:

crc32: A2E6B437
md5: a1e165e1926c0c83123c89fce6b1af56
name: A1E165E1926C0C83123C89FCE6B1AF56.mlw
sha1: 281246ba4b852a5f62e032424f7816f5a6b0406f
sha256: 2d64df6be5fbabdd41d304644e18d6dcab3d1a889df58fa962111e1c76ad2215
sha512: 28e2081e6249378e7f81e46e8e4afc93828adca7cf51316e7060655a60b2ee90b6f22af0b45a23299368d821816a64bc9d02d18f69d296047604f51b12eba354
ssdeep: 6144:SnSNM0tFUkfgEYxE91e/QkqCh+FjvTBiG+:SSN3zgpxooF3h+FjvTor
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Spyware.DiamondFox also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Snojan
ALYacGen:Variant.Fugrafa.133115
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Snojan.875aad7d
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.a4b852
CyrenW32/Rbot.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Agent.ACSB
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
KasperskyTrojan.Win32.Snojan.ctjj
BitDefenderGen:Variant.Fugrafa.133115
NANO-AntivirusTrojan.Win32.SpyEyes.iukpuu
MicroWorld-eScanGen:Variant.Fugrafa.133115
TencentWin32.Trojan.Snojan.Lndx
Ad-AwareGen:Variant.Fugrafa.133115
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34790.mqW@aS!FA6g
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R011C0GFE21
McAfee-GW-EditionBehavesLike.Win32.Swizzor.dh
FireEyeGeneric.mg.a1e165e1926c0c83
EmsisoftGen:Variant.Fugrafa.133115 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Snojan.dmo
AviraHEUR/AGEN.1142606
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.3377950
MicrosoftTrojan:Win32/Tiggre!rfn
ArcabitTrojan.Fugrafa.D207FB
AegisLabTrojan.Win32.Snojan.4!c
GDataGen:Variant.Fugrafa.133115
AhnLab-V3Trojan/Win.Generic.C4432449
Acronissuspicious
McAfeeGenericRXOV-MJ!A1E165E1926C
MAXmalware (ai score=88)
VBA32BScope.TrojanSpy.SpyEyes
MalwarebytesSpyware.DiamondFox
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R011C0GFE21
RisingBackdoor.Diamondfox!1.D569 (CLASSIC)
IkarusTrojan.Win32.Agent
MaxSecureTrojan.Malware.73764767.susgen
FortinetW32/Snojan.ACSB!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/TrojanDownloader.Nemucod.HwUB2nEA

How to remove Spyware.DiamondFox?

Spyware.DiamondFox removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment