Delf.V is a mass-mailing worm that sends out FIFA World Cup (Football/Soccer) related e-mails. It contains subjects such as "Soccer fans killed five teens" and "Crazy soccer fans".
Depending on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the suspect file, or ask you for a desired action.
More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.
You may also refer to the Knowledge Base on the F-Secure Community site for more information.
Delf.V is a mass-mailing worm that sends out FIFA World Cup (Football/Soccer) related e-mails.
Delf.V copies itself to the Windows system folder as a file named: msctools.exe.It Installs the following registry launch points:
%SysDir% represents the Windows System Folder.The mutex used by Delf.V is named "dezas".
Delf.V collects e-mail addresses from the following list of file extensions:
Addresses are discarded if they contain one of the following keywords:
The harvested addresses are saved as two files named cats.jpg and cats2.jpg.
Delf.V tries to post the addresses to [***]traf.com/ms/count.php. It also tries to download and execute a file from http://couple[***].com/tumbs/dianaimg.exe.
Delf.V e-mail contains the following characteristics:
F-Secure Anti-Virus detects this malware with the following updates:
Detection Type: PC