Trojan Delf – wsearch.exe – e3cf2f22c23e1fba947c8ea12e15deaf

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

Trojan Delf
Also known as: Backdoor RBot, Trojan Delphi
SHA256: fb3d05e70a22dbdb8f221b112a567a5d1706c21529ed34dd6c032e92cfc33d38
SHA1: 2b8a89647e7f8ed81ddfd10482d04413ba1334e4
MD5: e3cf2f22c23e1fba947c8ea12e15deaf
File size: 3550635 bytes

Created files:

%Local AppData%\WideSearch\wsearch.exe – Trojan Delf
%Temp%\is-JRJQ5.tmp\_isetup\_shfoldr.dll – Trojan Delf
%Temp%\itjwhbvblc.exe – Trojan Delf
%Temp%\kjehqgfvaa.exe – Trojan Delf

Trojan Delf created autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\WideSearch: %Local AppData%\WideSearch\wsearch.exe

Leave a Reply