Categories: Spy

What is “Win32/Spy.Delf.QYR”?

The Win32/Spy.Delf.QYR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.Delf.QYR virus can do?

Creates RWX memory
A process attempted to delay the analysis task.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Spy.Delf.QYR?


File Info:
crc32: EF8DD769md5: 7833c0f413c1611f7281ac303bcef4b3name: 7833C0F413C1611F7281AC303BCEF4B3.mlwsha1: a81d0be682831823233164356ead42208b5161a9sha256: c9d7b5d06cd8ab1a01bf0c5bf41ef2a388e41b4c66b1728494f86ed255a95d48sha512: fcddcc12d3fcf2bb61d97b9af556773ca91365cbb9c38658c56f7e5f7f509acff8e171470189a7087a642c0fa3d2f0e96113b9e9a5ccb215a8a38aee7854d676ssdeep: 49152:docG/eg7QUUZ13DhuSRprDK9bLRaHZJrVwHqQnGUWvv7rJwSI2MDc/Eb1HxTPt9:doJegw1LELc5JV+bnQnwD70type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
ProgramID: com.embarcadero.extraWebServerProductName: extraWebServerFileVersion: 1.0.0.0ProductVersion: 1.0.0.0FileDescription: extraWebServerTranslation: 0x0409 0x04e4

Win32/Spy.Delf.QYR also known as:

MicroWorld-eScan	Trojan.GenericKD.45789076
Qihoo-360	Win32/TrojanSpy.Bobik.HgIASPwA
McAfee	Artemis!7833C0F413C1
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Trojan.Win32.Save.a
BitDefender	Trojan.GenericKD.45789076
Arcabit	Trojan.Generic.D2BAAF94
ESET-NOD32	Win32/Spy.Delf.QYR
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Spy.Win32.Bobik.gen
Rising	Backdoor.Molerats!1.D32D (CLOUD)
Emsisoft	Trojan.GenericKD.45789076 (B)
F-Secure	Trojan.TR/ATRAPS.Gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
FireEye	Generic.mg.7833c0f413c1611f
Ikarus	Trojan.Agent
Avira	TR/ATRAPS.Gen
MAX	malware (ai score=99)
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AAC9
ZoneAlarm	HEUR:Trojan-Spy.Win32.Bobik.gen
GData	Trojan.GenericKD.45789076
Cynet	Malicious (score: 85)
VBA32	TScope.Trojan.Delf
ALYac	Trojan.MSIL.Bobik
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_80% (W)