Worm

How to remove “Worm.DelfPMF.S30896276”?

Malware Removal

The Worm.DelfPMF.S30896276 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.DelfPMF.S30896276 virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Worm.DelfPMF.S30896276?


File Info:

name: 8A3A459507D19D8EB7DF.mlw
path: /opt/CAPEv2/storage/binaries/5e5921c40031179d38f7628d0ce24039b6fad23d422f3e6cc4282dbdf510835a
crc32: EED24E6A
md5: 8a3a459507d19d8eb7df6b4684974db2
sha1: a39b291ca362b844e0d79688d347778850aa2790
sha256: 5e5921c40031179d38f7628d0ce24039b6fad23d422f3e6cc4282dbdf510835a
sha512: 069f0f7887be15cf5e984b4907b81b07da1ac8a72c8173f275c32453d039171b4923294aee576bca7acf02068ede3a445dd69a0b69921e8c1fc17820ce29a255
ssdeep: 6144:fjMjZhrj7wv81dS4fzlyVUqNnL8CWNvaxfzqzoibecFw/DgBV1LbkdbTQAgp5Yzr:QsH3NOBfawFk+p5Bv7u
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T193153983AE152AFAC445C1747173198365E436085725BBEF82ACFB323E95AD21F78BC1
sha3_384: 45298c766e945457caa63869bf14c5241ad2b487d557707af14ba04d4d6055a75ad27631da6f321aaca5fd8d80fd4b7e
ep_bytes: 558bec83c4f0b838464000e874e2ffff
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Worm.DelfPMF.S30896276 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanTrojan.Agent.EICV
CMCP2P-Worm.Win32.Delf!O
CAT-QuickHealWorm.DelfPMF.S30896276
SkyhighBehavesLike.Win32.HLLP.ct
McAfeeW32/HLLP.11042.gen
MalwarebytesGeneric.Malware.AI.DDS
ZillyaWorm.Delf.Win32.3450
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 004bcce41 )
K7GWTrojan ( 004bcce41 )
Cybereasonmalicious.ca362b
ArcabitTrojan.Agent.EICV
BaiduWin32.Virus.Lamer.f
SymantecW32.SillyP2P
Elasticmalicious (moderate confidence)
ESET-NOD32Win32/Delf.NAY
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Malware.Delf-6737076-0
KasperskyP2P-Worm.Win32.Delf.aj
BitDefenderTrojan.Agent.EICV
NANO-AntivirusTrojan.Win32.Delf.oxkq
AvastWin32:Delf-SVI [Trj]
TencentVirus.Win32.Lamer.fh
EmsisoftTrojan.Agent.EICV (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebWin32.HLLW.Kazaa.924
VIPRETrojan.Agent.EICV
TrendMicroTROJ_AGENT_005911.TOMB
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.8a3a459507d19d8e
SophosW32/BagarBu-A
SentinelOneStatic AI – Malicious PE
JiangminWorm/Delf.vm
WebrootW32.Worm.Gen
VaristW32/Aple.A.gen!Eldorado
AviraTR/Dropper.Gen
MAXmalware (ai score=81)
Antiy-AVLVirus/Win32.BagarBubba.a
Kingsoftmalware.kb.b.989
XcitiumTrojWare.Win32.Pincav.AV@2rw0ny
MicrosoftWorm:Win32/Xolxo.A
ZoneAlarmP2P-Worm.Win32.Delf.aj
GDataTrojan.Agent.EICV
GoogleDetected
AhnLab-V3Worm/Win32.Delf.R119214
Acronissuspicious
BitDefenderThetaGen:NN.ZelphiF.36792.3mZ@a0C2bxn
ALYacTrojan.Agent.EICV
VBA32Worm.Delf
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_AGENT_005911.TOMB
RisingWorm.P2p.Win32.Delf.bn (CLASSIC)
YandexTrojan.GenAsa!HYSjiRN/8Mk
IkarusWorm.Win32.Eggnog
MaxSecureVirus.W32.Lamer.FG
FortinetW32/Aple.A
AVGWin32:Delf-SVI [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Worm.DelfPMF.S30896276?

Worm.DelfPMF.S30896276 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment