Win32/Delf_AGen.BX information

The Win32/Delf_AGen.BX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Delf_AGen.BX virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Delf_AGen.BX?


File Info:
name: 2F24C80C18777FB9DFCB.mlw
path: /opt/CAPEv2/storage/binaries/220a3ff2e9f0f756e192ddebbb01229a57a888bc3174438c62f2e17b1e4cfef4
crc32: 5595BD1A
md5: 2f24c80c18777fb9dfcbf03fcf847a29
sha1: 7bce74bb882b58db7844c6f016c28877122e668b
sha256: 220a3ff2e9f0f756e192ddebbb01229a57a888bc3174438c62f2e17b1e4cfef4
sha512: 653240987ca9bc8328e972d997e6b6824c79dbe0f348f9a52805fc3a6fc37b92714bb27bc288fab5b83b1c6903fe04b74ef45717f899c80878cb82af4b26a42d
ssdeep: 3072:CTxDWisl0uMwmfrdVrLRZzFPk2I111KYTI1Uk1I:CTxDWquMwmDdVrbHMzTy1I
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T139048D48B2FDED4DC83E1D3078E088D2C7D9E5E4DED22C05A6D4650EAEEA147E11626F
sha3_384: 3ff9f1193a005cea1abad93af28a0748e80a7db2f808b58ca8e2f74ce29d2cb5661b751164c2f49628b3929fd34ffd97
ep_bytes: 8bec609ce9af7a0000006a004975f953
timestamp: 1992-06-19 22:22:17

Version Info:
CompanyName: MSbuild Inc
FileDescription: MSbuild Component Registrant
FileVersion: 2.1.4.0
LegalCopyright: Copyright © 2004 MSbuild Inc. All Rights Reserved
ProductName: MSbuild
ProductVersion: 2.1.4.0
Translation: 0x0409 0x04e4

Win32/Delf_AGen.BX also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Trojan.Heur2.FU.kG0@aG8jFugi
Malwarebytes	Malware.Heuristic.1001
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 7000000f1 )
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.c18777
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Delf_AGen.BX
APEX	Malicious
BitDefender	Gen:Trojan.Heur2.FU.kG0@aG8jFugi
MicroWorld-eScan	Gen:Trojan.Heur2.FU.kG0@aG8jFugi
Ad-Aware	Gen:Trojan.Heur2.FU.kG0@aG8jFugi
Emsisoft	Gen:Trojan.Heur2.FU.kG0@aG8jFugi (B)
Comodo	TrojWare.Win32.PkdMorphine.~AN@1l4q0o
DrWeb	Trojan.PWS.Webmonier.917
VIPRE	Gen:Trojan.Heur2.FU.kG0@aG8jFugi
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.2f24c80c18777fb9
Sophos	ML/PE-A + Mal/Basine-C
Avira	TR/ATRAPS.Gen
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Heur2.FU.E00975
GData	Gen:Trojan.Heur2.FU.kG0@aG8jFugi
Google	Detected
AhnLab-V3	Downloader/Win.Agent.C5312099
Acronis	suspicious
McAfee	GenericRXUR-PB!2F24C80C1877
MAX	malware (ai score=82)
Cylance	Unsafe
Rising	Spyware.Delf!8.12D (TFE:5:Be7jq3guCoP)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.GCTV!tr
BitDefenderTheta	AI:Packer.C91F999A20
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Win32/Delf_AGen.BX?

Win32/Delf_AGen.BX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X