Categories: Trojan

TrojanDownloader:Win32/Delf removal instruction

The TrojanDownloader:Win32/Delf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Delf virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Portuguese (Brazilian)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Creates a copy of itself

Related domains:

www.inf0nix.com

How to determine TrojanDownloader:Win32/Delf?


File Info:
crc32: 3923246Bmd5: 8966d576c3ef2e24d3629d77578a9095name: winupdate.exesha1: 547537aca73883ebd5330a11c27d181a305619c7sha256: d9aed066e2e53785adb122063e83a2d19f6a08b4556078ef95f77e1a3dc0721esha512: bb5881bed7f9c5228bb34382b3c86932a1116caa5a2f0c02fe0203801a73259aadd3517f0863a34d5f24c6f9a2b61a12abd80db2b37b7a028c8dcdbef285176essdeep: 6144:mvAJZdsNucJ7M5yLTaI33zqedMwBC8y2AjeS/M5wCgKDv/RFBWZnSMlwdICkC:mYJsNucuAe1FGq2oH/4wCgiRScdICkCtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

TrojanDownloader:Win32/Delf also known as:

Bkav	W32.GracindAD.Trojan
MicroWorld-eScan	Gen:Variant.Graftor.115849
CAT-QuickHeal	Trojan.Projecthook
Qihoo-360	HEUR/QVM11.1.7A24.Malware.Gen
McAfee	Artemis!8966D576C3EF
Cylance	Unsafe
VIPRE	Trojan-Downloader.Win32.Delf
AegisLab	Trojan.Win32.Genome.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 7000000f1 )
BitDefender	Gen:Variant.Graftor.115849
K7GW	Trojan ( 7000000f1 )
CrowdStrike	win/malicious_confidence_60% (W)
TrendMicro	TSPY_POSHOOK.A
F-Prot	W32/Delfloader.U.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
ClamAV	Win.Trojan.Banload-2109
GData	Gen:Variant.Graftor.115849
Kaspersky	HEUR:Trojan.Win32.ProjectHook.gen
Alibaba	TrojanDownloader:Win32/Banload.7985ae33
NANO-Antivirus	Trojan.Win32.Delf.brlpvb
ViRobot	Trojan.Win32.S.Agent.458752.R
Rising	Malware.Undefined!8.C (TFE:5:etmm96j0yiC)
Ad-Aware	Gen:Variant.Graftor.115849
Emsisoft	Gen:Variant.Graftor.115849 (B)
Comodo	Malware@#3b26oebx66tze
F-Secure	Heuristic.HEUR/AGEN.1032788
DrWeb	Trojan.DownLoader7.2773
Zillya	Downloader.Banload.Win32.51527
McAfee-GW-Edition	BehavesLike.Win32.Trojan.gc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.8966d576c3ef2e24
Sophos	Troj/Trackr-F
Ikarus	Trojan-Dropper.Delf
Cyren	W32/Delfloader.U.gen!Eldorado
Jiangmin	Trojan/Agentb.aeo
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1032788
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Unknown
Endgame	malicious (moderate confidence)
Arcabit	Trojan.Graftor.D1C489
ZoneAlarm	HEUR:Trojan.Win32.ProjectHook.gen
Microsoft	TrojanDownloader:Win32/Delf
AhnLab-V3	Trojan/Win32.Bancos.R115903
VBA32	TrojanPSW.Delf
ALYac	Gen:Variant.Graftor.115849
Malwarebytes	Trojan.Banker
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/TrojanDownloader.Banload.RUG
TrendMicro-HouseCall	TSPY_POSHOOK.A
Yandex	Trojan.DL.Delf!oQ5cONWzmMA
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_57%
Fortinet	W32/Banload.RUG!tr.dldr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
MaxSecure	Trojan.Malware.7164915.susgen