Categories: Spy

Win32/Spy.Delf.NLL removal instruction

The Win32/Spy.Delf.NLL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.Delf.NLL virus can do?

Unconventionial language used in binary resources: Portuguese (Brazilian)
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with ASPack
Authenticode signature is invalid
Creates a copy of itself
Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/Spy.Delf.NLL?


File Info:
name: 158D968E43D2FDBDD696.mlwpath: /opt/CAPEv2/storage/binaries/6ed65d0c253966272315420a2d38c70d414086b35d792a34a3dcffb8aa5d5e5ecrc32: 3FF6E8E6md5: 158d968e43d2fdbdd696a834354b549bsha1: b752e0d7f3f66a6cea94b819bb4fac8069e02537sha256: 6ed65d0c253966272315420a2d38c70d414086b35d792a34a3dcffb8aa5d5e5esha512: 5174fb11d755c0b3dea8ff81cacc05f05a9e9600f734e7fe670cca5f80c4bdce9b32ff18340fa00851625c0f1758195023f45e396cd5b562f00ee5cd151aeeebssdeep: 6144:whI3RqpY1tDGxFhnDwk4z8Th9apixLBJAA+6weHAr3C0LDmQsH7NpVV6AiXl:IS1tDGxrbFftJAe0LdsbCAiVtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T175945E26F2F18533E1632A3D8D6B56AC58267E513E3898863BE41D0C6F797813937393sha3_384: 6a19a76cb0e396bfdfaa166e364e6b071ec76799e8e1b4abbed95420efefffb8c96826f3bd3707bc454cbc4619ba3998ep_bytes: 558bec83c4f053b810f54500e88b69fatimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Win32/Spy.Delf.NLL also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Mepaow.ljgO
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.158d968e43d2fdbd
Skyhigh	BehavesLike.Win32.Generic.gh
McAfee	Artemis!158D968E43D2
Cylance	unsafe
Zillya	Trojan.Agent.Win32.6543
Sangfor	Suspicious.Win32.Save.ins
Alibaba	TrojanSpy:Win32/Banload.c969596a
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Spy.Delf.NLL
APEX	Malicious
ClamAV	Win.Trojan.Agent-510605
Kaspersky	Trojan.Win32.Agent.aidy
BitDefender	Trojan.Crypt.Delf.E
NANO-Antivirus	Trojan.Win32.Agent.cwldwz
MicroWorld-eScan	Trojan.Crypt.Delf.E
Avast	Win32:Trojan-gen
Tencent	Win32.Trojan.Agent.Fkjl
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Spy.Gen
DrWeb	Trojan.Recycle.15
VIPRE	Trojan.Crypt.Delf.E
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.Crypt.Delf.E (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Agent.bmwq
Webroot	W32.Malware.Gen
Google	Detected
Avira	TR/Spy.Gen
Kingsoft	Win32.Trojan.Agent.aidy
Microsoft	Trojan:Win32/Tiggre!rfn
Xcitium	TrojWare.Win32.TrojanDownloader.Delf.gen@1xqow5
Arcabit	Trojan.Crypt.Delf.E
ZoneAlarm	Trojan.Win32.Agent.aidy
GData	Trojan.Crypt.Delf.E
Varist	W32/Banload.A.gen!Eldorado
AhnLab-V3	Trojan/Win32.Agent.C368145
VBA32	BScope.Backdoor.Remcos
ALYac	Trojan.Crypt.Delf.E
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware/Suspicious
Panda	Generic Malware
Rising	Spyware.Delf!8.12D (TFE:3:IA8enHU3GUK)
Yandex	Trojan.GenAsa!cTnCcUd/vuc
Ikarus	Trojan-Spy.Win32.KeyLogger
MaxSecure	Trojan.Malware.1962862.susgen
Fortinet	W32/Agent.AIDY!tr
BitDefenderTheta	AI:Packer.6D0173F621
AVG	Win32:Trojan-gen
Cybereason	malicious.7f3f66
DeepInstinct	MALICIOUS