Delf.V is a mass-mailing worm that sends out FIFA World Cup (Football/Soccer) related emails. It contains subjects such as "Soccer fans killed five teens" and "Crazy soccer fans".
Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.
Find the latest advice in our Community Knowledge Base.
See the manual for your F-Secure product on the Help Center.
Submit a file or URL for further analysis.
Delf.V is a mass-mailing worm that sends out FIFA World Cup (Football/Soccer) related emails.
Delf.V copies itself to the Windows system folder as a file named: msctools.exe.It Installs the following registry launch points:
%SysDir% represents the Windows System Folder.The mutex used by Delf.V is named "dezas".
Delf.V collects email addresses from the following list of file extensions:
Addresses are discarded if they contain one of the following keywords:
The harvested addresses are saved as two files named cats.jpg and cats2.jpg.
Delf.V tries to post the addresses to [***]traf.com/ms/count.php. It also tries to download and execute a file from http://couple[***].com/tumbs/dianaimg.exe.
Delf.V email contains the following characteristics: