How to remove “Troj/Delf-HMD”?

The Troj/Delf-HMD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Troj/Delf-HMD virus can do?

Executable code extraction
Network activity detected but not expressed in API logs

How to determine Troj/Delf-HMD?


File Info:
crc32: C9BC59C6
md5: e6e8b291c6d9ec2ddc97bc4989cf1d13
name: E6E8B291C6D9EC2DDC97BC4989CF1D13.mlw
sha1: 597cbff182b00dfcb65d7e045507b48b88c21d9c
sha256: f87dbcfed3a4b74309af7879316c3e9d5e9bbebaa2df3388cc6daf2634a7f0eb
sha512: 0692ffa50e1e0af787a01a254233c2ca6b1764f139c17feca127d77a4e673861334b481e5d2f1ae1f7849025131b116997c44b9b9e2b50b7e3d3a5872ff524cd
ssdeep: 768:BFsxPS1u/itbhu4tR4jSId7Ox+ha55DOw2:bsxFatbhu4tkd/aDOw2
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Copyright xa9 2002-2005 Abrosoft Co.
InternalName: FantaMorph
FileVersion: 3.05
CompanyName: Abrosoft
LegalTrademarks: Abrosoft
Comments: Abrosoft FantaMorph ScreenSaver
ProductName: FantaMorph
ProductVersion: 3.05
OriginalFilename: FantaMorph.scr

Troj/Delf-HMD also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005811f91 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.31412
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKDZ.79827
Cylance	Unsafe
Zillya	Trojan.Injector.Win32.1268734
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 005811f91 )
Cyren	W32/DelfInject.EN.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.EPYR
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan.Win32.Injuke.gen
BitDefender	Trojan.GenericKDZ.79827
MicroWorld-eScan	Trojan.GenericKDZ.79827
Tencent	Malware.Win32.Gencirc.10cf82c8
Ad-Aware	Trojan.GenericKDZ.79827
Sophos	Troj/Delf-HMD
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
FireEye	Generic.mg.42fb5f0397589c7a
Emsisoft	Trojan.GenericKDZ.79827 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Injuke.mat
Antiy-AVL	Trojan/Generic.ASMalwS.34C9CB7
Microsoft	Trojan:Win32/Bunitucrypt.RTA!MTB
Gridinsoft	Trojan.Win32.Downloader.oa!s1
GData	Trojan.GenericKDZ.79827
TACHYON	Trojan/W32.DP-Injuke.1867264
AhnLab-V3	Trojan/Win.Generic.R449739
McAfee	GenericRXQQ-HD!42FB5F039758
MAX	malware (ai score=83)
VBA32	TScope.Trojan.Delf
Malwarebytes	Spyware.Arkei
Rising	Trojan.Kryptik!1.D9CB (CLASSIC)
Ikarus	Trojan.Win32.Injector
MaxSecure	Trojan.Malware.74209402.susgen
Fortinet	W32/Injector.EQGY!tr
AVG	Win32:Trojan-gen

How to remove Troj/Delf-HMD?

Troj/Delf-HMD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X