A simple utility for cleaning the Delf.NCZ worm from your system. #Delf.NCZ antivirus #Worm remover #Delf.NCZ remover #Delf.NCZ #Antivirus #Remover
Win32.Worm.Delf.NCZ Removal Tool is a useful tool designed in order to help you get rid of the malware infection.
Upon execution the worm copies itself in the windows system folder as kspool.exe and adds a key in the system registry to be run upon startup, named
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Kernel spoolerIt then proceeds to spreading, which is done by a) copying itself as
>%DriveLetter%\MSSETUP.T~~\Uninstall Driver.exewhere %DriveLetter% is a network mapped drive, creating also a folder.htt file in the same folder, to run the malware when the folder is accessed by Explorer and b) by the dropped library, AVWAV32.DLL, which has file infector behaviour: It scans the computer for document files (.doc, .xls, .ldf, .mdf) to which it prepends itself and whose extensions are changed to .exe. Upon execution of such a file, the malware infects the computer it is run on, drops the original document and opens it.
- runs on:
- Windows All
- file size:
- 57 KB
- filename:
- AntiWin32.Worm.Delf.NCZ-en.exe
- main category:
- Antivirus
- developer:
- visit homepage
ShareX
calibre
Microsoft Teams
Context Menu Manager
IrfanView
4k Video Downloader
7-Zip
Windows Sandbox Launcher
Bitdefender Antivirus Free
Zoom Client
- Windows Sandbox Launcher
- Bitdefender Antivirus Free
- Zoom Client
- ShareX
- calibre
- Microsoft Teams
- Context Menu Manager
- IrfanView
- 4k Video Downloader
- 7-Zip