About “Win32/TrojanDownloader.Delf.SCD” infection

The Win32/TrojanDownloader.Delf.SCD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/TrojanDownloader.Delf.SCD virus can do?

Unconventionial language used in binary resources: Portuguese (Brazilian)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/TrojanDownloader.Delf.SCD?


File Info:
name: 14F693EAE8C8E0BBB294.mlw
path: /opt/CAPEv2/storage/binaries/03eb464b569baf50205d8a0be30223491bb4d6202501918216e257cc5eefc132
crc32: B11EF6BE
md5: 14f693eae8c8e0bbb2944966a38c59bd
sha1: e83ce72fe95025e19ab7b9cdb2d44feef7d86899
sha256: 03eb464b569baf50205d8a0be30223491bb4d6202501918216e257cc5eefc132
sha512: 0dbed94da3df33811eca465c0f9f9b89796d9eb93982a143fdba8562b6ac64e6d9657bf5e428c146278c9fa677b1fc9256c83cdc9fdc3700ce20572e1e185f60
ssdeep: 12288:+IIRzGz4344tAstXRWlsPx7Ih5FRycLh6yH1Q4fB+S3eaHteKnpUAwT8C72H2sys:E3hXRWlYx0FRhBKoB+S3eaHtoTPPsi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BA356C13B2812D3BC07E863A09BB96669C3BBB1C2B965C5F5EF48D4C0E352813D36657
sha3_384: fc32303526d44feca5a38972a612fe8280cb41c7c83ed528555cb547b3bd69fd5c0b0439ea2fb35ea9d1aacc1662936f
ep_bytes: 558bec83c4f053b888614c00e8e3d5f3
timestamp: 2011-10-30 02:31:56

Version Info:
0: [No Data]

Win32/TrojanDownloader.Delf.SCD also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Jacard.4!c
McAfee	Artemis!14F693EAE8C8
Malwarebytes	Generic.Malware/Suspicious
Zillya	Downloader.Delf.Win32.64038
Sangfor	Downloader.Win32.Delf.Vf78
K7AntiVirus	Trojan ( 7000000f1 )
Alibaba	TrojanDownloader:Win32/Banker.d32f54fe
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.ae8c8e
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.Delf.SCD
APEX	Malicious
NANO-Antivirus	Trojan.Win32.Delf.idcizl
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Agen.Nzfl
F-Secure	Trojan.TR/Dldr.Delf.tbiw
McAfee-GW-Edition	BehavesLike.Win32.Infected.th
Sophos	Mal/Generic-S
GData	Win32.Trojan.Agent.0GN10V
Google	Detected
Avira	TR/Dldr.Delf.tbiw
Antiy-AVL	Trojan/Win32.Wacatac
Xcitium	Malware@#2nsgpdhtvbcf9
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
BitDefenderTheta	AI:Packer.B9B957E319
VBA32	suspected of Trojan.Downloader.gen
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H0CEG23
Rising	Downloader.Delf!8.16F (TFE:5:bnfXUou7HyD)
Yandex	Trojan.GenAsa!cDe+SjuEhZs
Ikarus	Trojan-Banker.Win32.Banbra
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Delf.SCD!tr.dldr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/TrojanDownloader.Delf.SCD?

Win32/TrojanDownloader.Delf.SCD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X