What is "Win32/Spy.Delf.QYR"?

The Win32/Spy.Delf.QYR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.Delf.QYR virus can do?

Creates RWX memory
A process attempted to delay the analysis task.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Spy.Delf.QYR?


File Info:
crc32: EF8DD769
md5: 7833c0f413c1611f7281ac303bcef4b3
name: 7833C0F413C1611F7281AC303BCEF4B3.mlw
sha1: a81d0be682831823233164356ead42208b5161a9
sha256: c9d7b5d06cd8ab1a01bf0c5bf41ef2a388e41b4c66b1728494f86ed255a95d48
sha512: fcddcc12d3fcf2bb61d97b9af556773ca91365cbb9c38658c56f7e5f7f509acff8e171470189a7087a642c0fa3d2f0e96113b9e9a5ccb215a8a38aee7854d676
ssdeep: 49152:docG/eg7QUUZ13DhuSRprDK9bLRaHZJrVwHqQnGUWvv7rJwSI2MDc/Eb1HxTPt9:doJegw1LELc5JV+bnQnwD70
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
ProgramID: com.embarcadero.extraWebServer
ProductName: extraWebServer
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
FileDescription: extraWebServer
Translation: 0x0409 0x04e4

Win32/Spy.Delf.QYR also known as:

MicroWorld-eScan	Trojan.GenericKD.45789076
Qihoo-360	Win32/TrojanSpy.Bobik.HgIASPwA
McAfee	Artemis!7833C0F413C1
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Trojan.Win32.Save.a
BitDefender	Trojan.GenericKD.45789076
Arcabit	Trojan.Generic.D2BAAF94
ESET-NOD32	Win32/Spy.Delf.QYR
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Spy.Win32.Bobik.gen
Rising	Backdoor.Molerats!1.D32D (CLOUD)
Emsisoft	Trojan.GenericKD.45789076 (B)
F-Secure	Trojan.TR/ATRAPS.Gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
FireEye	Generic.mg.7833c0f413c1611f
Ikarus	Trojan.Agent
Avira	TR/ATRAPS.Gen
MAX	malware (ai score=99)
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AAC9
ZoneAlarm	HEUR:Trojan-Spy.Win32.Bobik.gen
GData	Trojan.GenericKD.45789076
Cynet	Malicious (score: 85)
VBA32	TScope.Trojan.Delf
ALYac	Trojan.MSIL.Bobik
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Win32/Spy.Delf.QYR?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Win32/Spy.Delf.QYR”?