Delf.V is a mass-mailing worm that sends out FIFA World Cup (Football/Soccer) related emails. It contains subjects such as "Soccer fans killed five teens" and "Crazy soccer fans".
Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.
Delf.V is a mass-mailing worm that sends out FIFA World Cup (Football/Soccer) related emails.
Delf.V copies itself to the Windows system folder as a file named: msctools.exe.It Installs the following registry launch points:
%SysDir% represents the Windows System Folder.The mutex used by Delf.V is named "dezas".
Delf.V collects email addresses from the following list of file extensions:
Addresses are discarded if they contain one of the following keywords:
The harvested addresses are saved as two files named cats.jpg and cats2.jpg.
Delf.V tries to post the addresses to [***]traf.com/ms/count.php. It also tries to download and execute a file from http://couple[***].com/tumbs/dianaimg.exe.
Delf.V email contains the following characteristics:
Date Created: -
Date Last Modified: -