What is “Trojan:Win32/DelfInject.SM!MTB”?

The Trojan:Win32/DelfInject.SM!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/DelfInject.SM!MTB virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Trojan:Win32/DelfInject.SM!MTB?


File Info:
crc32: 76E7E14F
md5: 1f6445dd70e0c3da09ac2c5d7b736945
name: 1F6445DD70E0C3DA09AC2C5D7B736945.mlw
sha1: b4dba50c596aa315d655ed6acd82876fb85697e2
sha256: 4af3d60f86b1be4b16c76214fc9ba6e23f937c4a7fa93d2eb25e615bd1ce63b8
sha512: c3d16cec4e5766601ddcfe93529811152f63152ef9fd0c55bdfcb1b1dbe62a20c7a229f1fca20691498bc89a3c6040b3077611629279dbc2122d1ba2c3022677
ssdeep: 12288:VnCFpZeB7uGHKKaWU8drn/1iNyhpyv0oM+6yRXOuDvrq8EU0th6gU1t:VnWpBGHK4Um1dXq0oXec959x
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan:Win32/DelfInject.SM!MTB also known as:

Lionic	Trojan.Win32.Remcos.m!c
DrWeb	Trojan.DownLoader41.20290
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Doina.22200
Sangfor	Backdoor.Win32.Remcos.gen
K7GW	Trojan-Downloader ( 0057f8001 )
Cybereason	malicious.c596aa
Cyren	W32/Trojan.KZBO-5586
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.Delf.DGG
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Backdoor.Win32.Remcos.gen
BitDefender	Gen:Variant.Doina.22200
MicroWorld-eScan	Gen:Variant.Doina.22200
Tencent	Malware.Win32.Gencirc.10ceb988
Ad-Aware	Gen:Variant.Doina.22200
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.UMal.khked@0
TrendMicro	TROJ_GEN.R06CC0DHN21
McAfee-GW-Edition	BehavesLike.Win32.Fareit.tc
FireEye	Generic.mg.1f6445dd70e0c3da
Emsisoft	Gen:Variant.Doina.22200 (B)
Jiangmin	Backdoor.Remcos.dap
Webroot	W32.Trojan.Gen
Microsoft	Trojan:Win32/DelfInject.SM!MTB
Gridinsoft	Trojan.Win32.Downloader.oa!s1
Arcabit	Trojan.Doina.D56B8
ZoneAlarm	HEUR:Backdoor.Win32.Remcos.gen
GData	Gen:Variant.Doina.22200
AhnLab-V3	Trojan/Win.Generic.C4601345
McAfee	Artemis!1F6445DD70E0
MAX	malware (ai score=100)
VBA32	TScope.Trojan.Delf
Malwarebytes	Trojan.MalPack.DLF
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R06CC0DHN21
Yandex	Trojan.DL.Delf!5yzrWo6r2YU
Ikarus	Trojan-Downloader.Win32.Delf
Fortinet	W32/Agent.E805!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan:Win32/DelfInject.SM!MTB?

Trojan:Win32/DelfInject.SM!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X