Home Malware Programs Trojans Win32/spy.delf.oxi

Win32/spy.delf.oxi

Posted: September 2, 2011

Win32/spy.delf.oxi is a Trojan that spies on a compromised pc to steal sensitive information from a victim. Win32/spy.delf.oxi is able to delete certain classes of files, especially .dll files. Win32/spy.delf.oxi is related to numerous other harmful applications. Win32/spy.delf.oxi may also slow down your computer. Uninstall Win32/spy.delf.oxi immediately upon detection.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%UserProfile%\UserData\1HQ4NSDO File name: %UserProfile%\UserData\1HQ4NSDO
%UserProfile%\UserData\0WR2YODG File name: %UserProfile%\UserData\0WR2YODG
%UserProfile%\UserData File name: %UserProfile%\UserData

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run archivosys.exe = "%Windir%\archivosys.exe"
Loading...