Categories: Malware

Win32/Delf.UYZ removal

The Win32/Delf.UYZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Delf.UYZ virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/Delf.UYZ?


File Info:
name: E03BF75BB24B08B09695.mlwpath: /opt/CAPEv2/storage/binaries/a0f95dd4e32657efc5b0fe88ad64358b3ac1e424c500dbd9be7ed997e98ea395crc32: F91F2A55md5: e03bf75bb24b08b09695db5c8cf3f1e0sha1: eabe6f4f96d8dbd9d3479d43ceb49dd5aa26b9b2sha256: a0f95dd4e32657efc5b0fe88ad64358b3ac1e424c500dbd9be7ed997e98ea395sha512: 0bc67e8703c1d7838500bc6da6767cdd1087c9a941b7896f2b13fbb19f983c6a2942c4e7935d84e9dea29bfced9320be72a5971fbe5642bf5fd6c191e48e1e51ssdeep: 24576:RV5fin1sAT4v8U0bue7mRl7muSHDpjKJRl1BIF81Ws:DZ6ue7gNHSjpjK3LBltype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T150256AD67A38C977CC6335B64B9E8F906695EC192241C8BA33F29B0E17B96407E4D30Dsha3_384: 5593c04957b0a9527706f29940f024c6495f4153061ae71ceb3693fd4f4faaf3373ab4196665325f9ad8945dc235ee9dep_bytes: 5589e5c605607345000168405a4e006atimestamp: 1970-01-01 00:00:00
Version Info:
0: [No Data]

Win32/Delf.UYZ also known as:

Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.GenericKDZ.99244
FireEye	Generic.mg.e03bf75bb24b08b0
McAfee	Artemis!E03BF75BB24B
Malwarebytes	Malware.AI.3295392920
Sangfor	Dropper.Win32.Agent.Vkmq
BitDefenderTheta	Gen:NN.ZexaF.36196.8CX@aeoV3qd
Cyren	W32/Trojan.BSUO-9015
ESET-NOD32	a variant of Win32/Delf.UYZ
Paloalto	generic.ml
Kaspersky	UDS:Trojan-Dropper.Win32.Dorifel
BitDefender	Trojan.GenericKDZ.99244
Avast	Win32:Trojan-gen
Emsisoft	Trojan.GenericKDZ.99244 (B)
VIPRE	Gen:Variant.Zusy.466020
McAfee-GW-Edition	BehavesLike.Win32.Infected.dh
Sophos	Mal/Generic-S
GData	Trojan.GenericKDZ.99244
Google	Detected
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.Delf
Arcabit	Trojan.Generic.D183AC
ZoneAlarm	UDS:Trojan-Dropper.Win32.Dorifel
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.466020
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09E223
Rising	Dropper.Dorifel!8.31E (TFE:5:c2Vc38IcMFJ)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Delf.UYU!tr
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)