Trojan

Win32/TrojanDownloader.Delf.DCU malicious file

Malware Removal

The Win32/TrojanDownloader.Delf.DCU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32/TrojanDownloader.Delf.DCU virus can do?

  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Unconventionial language used in binary resources: Hebrew
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/TrojanDownloader.Delf.DCU?



File Info:

crc32: 51232C97
md5: 54a4be7037ecdb031563998906a365cd
name: 54A4BE7037ECDB031563998906A365CD.mlw
sha1: e19e35a43087696fc4e7ac0dfeea4ea19fed8f28
sha256: 248eabc9c97d8c4994c26c88cf1806ea9274eb187e3eb0bae7ae8035c7f3b189
sha512: 515c6edb804b85cdaa610a275cfda7490884a42dc5c1585681d13d644c0e5b2ef363dff586e24e1a44410db85e49ee3e2c9737b865f1f9e84271dc5800dbd60d
ssdeep: 12288:9Esf2663Kqz+uv5+lBNErkAfhK6Pl7bDDnfvcfYM:KsO68So+svZb3YYM
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright xa9 2009 - 2013 Nir Sofer
InternalName: Document
FileVersion: 1.35
CompanyName: Document
ProductName: DocumentStartup
ProductVersion: 1.35
FileDescription: Document
OriginalFilename: Document
Translation: 0x0409 0x04b0

Win32/TrojanDownloader.Delf.DCU also known as:

BkavW32.AIDetectVM.malware1
MicroWorld-eScanTrojan.GenericKD.35971496
FireEyeGeneric.mg.54a4be7037ecdb03
CAT-QuickHealTrojan.Multi
McAfeeFareit-FZO!54A4BE7037EC
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderTrojan.GenericKD.35971496
Cybereasonmalicious.037ecd
CyrenW32/Trojan.AWBT-6701
SymantecML.Attribute.HighConfidence
AvastWin32:Malware-gen
KasperskyHEUR:Trojan-Ransom.Win32.Blocker.gen
AlibabaTrojanDownloader:Win32/Blocker.4af7dadc
ViRobotTrojan.Win32.Z.Highconfidence.723744
AegisLabTrojan.Win32.Blocker.j!c
RisingDownloader.Delf!8.16F (TFE:4:o1xB3CNbqnR)
Ad-AwareTrojan.GenericKD.35971496
EmsisoftTrojan.GenericKD.35971496 (B)
ComodoMalware@#2wywlg8y2zpa0
F-SecureTrojan.TR/AD.DbatLdr.bqqgo
ZillyaDownloader.Delf.Win32.60402
TrendMicroRansom_Blocker.R03BC0PA521
McAfee-GW-EditionFareit-FZO!54A4BE7037EC
SophosMal/Generic-S
IkarusTrojan-Downloader.Win32.Delf
eGambitPE.Heur.InvalidSig
AviraTR/AD.DbatLdr.bqqgo
Antiy-AVLTrojan[Ransom]/Win32.Blocker
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Ymacco.AA24
GridinsoftTrojan.Win32.Downloader.oa
ArcabitTrojan.Generic.D224E1A8
ZoneAlarmHEUR:Trojan-Ransom.Win32.Blocker.gen
GDataTrojan.GenericKD.35971496
CynetMalicious (score: 90)
AhnLab-V3Malware/Win32.Generic.C4287760
BitDefenderThetaGen:NN.ZelphiF.34760.SG2@a4R!MumQ
ALYacTrojan.GenericKD.35971496
VBA32TScope.Trojan.Delf
MalwarebytesTrojan.MalPack.DLF
PandaTrj/CI.A
ESET-NOD32Win32/TrojanDownloader.Delf.DCU
TrendMicro-HouseCallRansom_Blocker.R03BC0PA521
TencentWin32.Trojan.Falsesign.Swbc
FortinetW32/GenKryptik.DPIE!tr
WebrootW32.Trojan.Gen
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.Ransom.ed7

How to remove Win32/TrojanDownloader.Delf.DCU?

Win32/TrojanDownloader.Delf.DCU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment