About “Trojan.Delf.FareIt.Gen.7” infection

Malware Removal

The Trojan.Delf.FareIt.Gen.7 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Review

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Trojan.Delf.FareIt.Gen.7 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Attempts to remove evidence of file being downloaded from the Internet
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Trojan.Delf.FareIt.Gen.7?


File Info:

crc32: 084C482C
md5: b2312aac4c42a97388bb8d91a3030328
name: ugofilezx.exe
sha1: 1b1ac18e6d7f212f98c104c1bad95382ed9be5c9
sha256: 853e847535309f5f01990837ce0a529755fa71f5ab4e616f144009ecf5f0680c
sha512: 61d49b630ee62a6af942f180a229cb4a93c6454e7b6961e4bc9605f4adeb18e0958055ed4c337ee4994b229a6ca08b6ed71101ef2ae6921d31704e83c9b69346
ssdeep: 12288:3R8OmEiq8jcTKQx/WcATgiBft2Ezt1X4Nh8x/RbKcujYeDQ:3yHE2jW9sNpLjW8x/dKcujk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Delf.FareIt.Gen.7 also known as:

MicroWorld-eScanTrojan.Delf.FareIt.Gen.7
FireEyeGeneric.mg.b2312aac4c42a973
McAfeeFareit-FTB!B2312AAC4C42
BitDefenderTrojan.Delf.FareIt.Gen.7
CrowdStrikewin/malicious_confidence_80% (D)
TrendMicroTrojanSpy.Win32.LOKI.SMAD1.hp
APEXMalicious
AvastWin32:Malware-gen
GDataTrojan.Delf.FareIt.Gen.7
KasperskyUDS:DangerousObject.Multi.Generic
Endgamemalicious (high confidence)
EmsisoftTrojan.Delf.FareIt.Gen.7 (B)
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Fareit.jc
Trapminemalicious.moderate.ml.score
SophosMal/Fareit-AA
MAXmalware (ai score=83)
ArcabitTrojan.Delf.FareIt.Gen.7
ZoneAlarmUDS:DangerousObject.Multi.Generic
MicrosoftTrojan:Win32/Wacatac.D!ml
AhnLab-V3Suspicious/Win.Delphiless.X2066
Acronissuspicious
Ad-AwareTrojan.Delf.FareIt.Gen.7
ESET-NOD32a variant of Win32/GenKryptik.EKND
TrendMicro-HouseCallTrojanSpy.Win32.LOKI.SMAD1.hp
RisingMalware.Heuristic!ET#87% (RDMK:cmRtazpX/OsJPryGoqxnBLoOOZvA)
SentinelOneDFI – Suspicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/Injector.ELXR!tr
BitDefenderThetaGen:NN.ZelphiF.34110.PGW@aywb6Yji
AVGWin32:Malware-gen
Cybereasonmalicious.e6d7f2
Paloaltogeneric.ml
Qihoo-360HEUR/QVM05.1.5D0C.Malware.Gen

How to remove Trojan.Delf.FareIt.Gen.7?

Trojan.Delf.FareIt.Gen.7 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment