Win32/Delf.UNL (file analysis)

The Win32/Delf.UNL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Delf.UNL virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Attempts to identify installed AV products by installation directory

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Delf.UNL?


File Info:
crc32: E93A0096
md5: d497e0332e88341bd5ddbaa326cab977
name: upload_file
sha1: e6da7d600eac4f5cf517d0ee5ba103ffbc7ba660
sha256: a64edb19e71549fb9248b27b58f911a4a1e8cd8b8e4adff93ecfb7e15a3cdad7
sha512: 55262251f5e752aced368e594c83b47b559d3e1096ed11c362a39921de4af4ef48a02f3c6d208338480f2d545dd5e9e013cd3718f303de422de7b35fbeb89fa2
ssdeep: 24576:w2O/GlJWlc3iY587dtvUu1FGVb1vEpvI9ZRiL9:wGiYWJdUu1Fon96L9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Delf.UNL also known as:

MicroWorld-eScan	Trojan.GenericKD.44230961
McAfee	Artemis!D497E0332E88
VIPRE	Trojan.Win32.Generic!BT
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKD.44230961
K7GW	Trojan ( 005714d41 )
K7AntiVirus	Trojan ( 005714d41 )
Invincea	Mal/Generic-S
Baidu	Archive.Bomb
Symantec	Trojan Horse
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Delf.gen
Alibaba	Backdoor:Win32/Generic.8b119dcc
Ad-Aware	Trojan.GenericKD.44230961
Emsisoft	Trojan.GenericKD.44230961 (B)
Comodo	Malware@#307877lc65wfo
DrWeb	Trojan.MulDrop14.19055
Zillya	Trojan.Delf.Win32.130234
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
FireEye	Generic.mg.d497e0332e88341b
Sophos	Mal/Generic-S
Microsoft	Trojan:Win32/Ymacco.AAA6
Arcabit	Trojan.Generic.D2A2E931
AegisLab	Trojan.Win32.Generic.4!c
ZoneAlarm	HEUR:Trojan.Win32.Delf.gen
GData	Trojan.GenericKD.44230961
BitDefenderTheta	AI:Packer.11EF1A7819
ALYac	Trojan.GenericKD.44230961
MAX	malware (ai score=80)
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Delf.UNL
Rising	Trojan.Delf!8.67 (TFE:5:CXn2iUC8T1J)
Yandex	Trojan.Igent.bUHb9w.36
Ikarus	Trojan.Win32.Delf
Fortinet	W32/Delf.UNL!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.32e883
Avast	Win32:Trojan-gen
Qihoo-360	Generic/HEUR/QVM06.3.D20B.Malware.Gen

How to remove Win32/Delf.UNL?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Delf.UNL (file analysis)