Trojan

About “Trojan.Downloader.Small.DFM” infection

Malware Removal

The Trojan.Downloader.Small.DFM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Downloader.Small.DFM virus can do?

  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Downloader.Small.DFM?


File Info:

crc32: AE4D2107
md5: c4d480849e7bde52f4f9eb8d94e5781a
name: C4D480849E7BDE52F4F9EB8D94E5781A.mlw
sha1: df6009ea62ba61796e42ef593d9eeb8fbc7ecc80
sha256: 6013be66b44636f76ed3a19481477a8c38dce8e53892535fae4fbd4d11bcf52d
sha512: c1ef101be6bcee01f7e50871617a739bcafcbac1ffc830e0ab8d919e326d0c5d9f5dec665eadf2d84521bd9f780cb0e9af84dd1955fb892ab494d073e4ec08d8
ssdeep: 12288:GqlzgjsFdzmREyIY3QZB8yMZx+LtWCqVx/4ThpCbtKozXzFxYfSBY1Q5rB1yWDC:G6cjwiRxVQbL/UhfO8hF41c8L6RTB8E
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Downloader.Small.DFM also known as:

K7AntiVirusTrojan ( 7000000f1 )
DrWebTrojan.DownLoader.10934
ClamAVWin.Trojan.Downloader-64691
McAfeeArtemis!C4D480849E7B
CylanceUnsafe
ZillyaDownloader.Small.Win32.91893
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaTrojanDownloader:Win32/DelpDldr.49156b5a
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.49e7bd
CyrenW32/Downloader.GCJG-5288
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/TrojanDownloader.Small.DFM
APEXMalicious
AvastWin32:Delf-BSS [Trj]
CynetMalicious (score: 100)
KasperskyTrojan-Downloader.Win32.Small.dfm
BitDefenderTrojan.Downloader.Small.DFM
NANO-AntivirusTrojan.Win32.Small.cbwyg
MicroWorld-eScanTrojan.Downloader.Small.DFM
TencentWin32.Trojan-downloader.Small.Szuy
Ad-AwareTrojan.Downloader.Small.DFM
SophosMal/Generic-S
TrendMicroTROJ_GEN.R002C0DK121
McAfee-GW-EditionBehavesLike.Win32.Backdoor.th
FireEyeGeneric.mg.c4d480849e7bde52
EmsisoftTrojan.Downloader.Small.DFM (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Small.eiy
AviraTR/Dldr.Small.dfm.1
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.32814
MicrosoftTrojan:Win32/Azorult!ml
GDataTrojan.Downloader.Small.DFM
VBA32BScope.Trojan-Spy.Zbot
MAXmalware (ai score=100)
PandaTrj/CI.A
RisingTrojan.DL.Agent.mfd (CLASSIC)
YandexTrojan.DL.Small!mB73mNEmRQs
IkarusTrojan-Downloader.Win32.Delf
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Small.C!tr.dldr
AVGWin32:Delf-BSS [Trj]
Paloaltogeneric.ml

How to remove Trojan.Downloader.Small.DFM?

Trojan.Downloader.Small.DFM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment