Home / Spyware Encyclopedia / Notifier.Delf << Back

Recommendation to Automatically remove Notifier.Delf


Our products can remove Notifier.Delf and thousands of other Virus and Spyware automatically and instantly.

Notifier.Delf Details


  • Category Notifier
  • Discovered 5/11/2009 9:40:18 AM
  • Modified 2/14/2020 2:27:11 PM
  • Threat Level Medium
  • Category Description
    The purpose of these Trojans is to inform the author or 'master' that malicious code has been installed on the victim machine and to relay information about the IP address, open ports, e-mail address and so on. Trojan Notifiers are typically included in a Trojan 'pack' that contains other malware.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
Trojan-Dropper.Win32.VB.ii.exe 1257472Microsoft1.0.0.0f9464f804379d0032418da150d46d65e 
Trojan-Dropper.Win32.VB.i.exe 125952?????1.0.0.0598ba823275dbca8674c52b4280f903a 
Trojan-Dropper.Win32.VB.ir.exe 118784 1.0.0.10a9472f4efdf99959bde2661ff2247e0 
Trojan-Dropper.Win32.VB.ie.exe 55916    
Trojan-Dropper.Win32.VB.i.exe 125952龙辉工作室1.0.0.0598ba823275dbca8674c52b4280f903a14/02/2020
d2gfz.dll 1508    
TROJAN-DROPPER.WIN32.VB.IC.EXE 1147627  1afa711c837ef16c2ce84109c7acee5f 
7AFA407E.EXE 357376  c4ec2d8df9a3f3231867c69569e5f207 
dinst.exe 90112 1.0.0.045a5c5b21ffc82558dd546722a37ed6b 
commandd.exe 20480 1.0.0.04de72a9d63dd90007d67ab4f30cf77a5 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"Windows Security Module"\"phqg.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows Security Module"\"phqg.exe"
..\Software\Classes\N.tjKpSb382\(Default)
..\Software\Classes\Typelib\{7BD27B00-E8C2-4BCB-B2F2-B549B3CD7B4C}\(Default)
..\Software\Classes\Clsid\{B7170459-1CC2-43BE-9A41-0D5EEE24A79F}\(Default)
..\Software\Classes\Interface\{31F3B604-0233-4898-8E37-C8DA332957FF}\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Yupdater"\"%WIN%\system_32\services.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"generic host process"\"%win.sys32%\scvhost.exe"

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware