Worm

About “Worm.DelfPMF.S30896276” infection

Malware Removal

The Worm.DelfPMF.S30896276 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.DelfPMF.S30896276 virus can do?

  • A file was accessed within the Public folder.
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Checks for the presence of known devices from debuggers and forensic tools
  • Checks for the presence of known devices from debuggers and forensic tools

How to determine Worm.DelfPMF.S30896276?


File Info:

name: 4E4778C00E08882CA3C2.mlw
path: /opt/CAPEv2/storage/binaries/d9ebd9f56a0d3ce25a406c487312727b504d7271575f2cd69dce26d03c2e8d12
crc32: BC0B29E2
md5: 4e4778c00e08882ca3c2a506e1150c2a
sha1: efa6bda9225fe460ff7c65eaa822dafa6890a330
sha256: d9ebd9f56a0d3ce25a406c487312727b504d7271575f2cd69dce26d03c2e8d12
sha512: db9f7d2bfe425b041b0e27557f6cd131afe8f823a14fbc4650b5212e5b0602f39ea39281e9c856b55acadd41bc28308c393d96c892d4117106b33fd4fe1a7c8b
ssdeep: 1536:rrjWJMloE1m707QBsPZEWRfXAE4CjQaX02fHjUfU:/jWJ6oE1mmbPRfw3Cjn0+Ht
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T120149E87E95498F1FE134E742CFEC52F8B73BB319E708592F7494644EB33641222916A
sha3_384: 1fcbec2570cd71007fa266117ae63d0cb500e57f743b838d74e33e13bd71f5a9cb4d5cc8939f13ba3c6e8a5071fccd09
ep_bytes: 558bec83c4f0b838464000e874e2ffff
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Worm.DelfPMF.S30896276 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealWorm.DelfPMF.S30896276
SkyhighBehavesLike.Win32.VTFlooder.cz
McAfeeW32/HLLP.11042.gen
MalwarebytesGeneric.Trojan.Delf.DDS
VIPRETrojan.Agent.EICV
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0053c5661 )
K7GWTrojan ( 0053c5661 )
CrowdStrikewin/malicious_confidence_100% (D)
ArcabitTrojan.Agent.EICV
BaiduWin32.Virus.Lamer.f
SymantecW32.SillyP2P
tehtrisGeneric.Malware
ESET-NOD32Win32/Delf.NAY
APEXMalicious
ClamAVWin.Virus.Wapomi-9623880-0
KasperskyP2P-Worm.Win32.Delf.aj
BitDefenderTrojan.Agent.EICV
NANO-AntivirusTrojan.Win32.Delf.oxkq
MicroWorld-eScanTrojan.Agent.EICV
AvastWin32:Delf-SVI [Trj]
TencentVirus.Win32.Lamer.fh
EmsisoftTrojan.Agent.EICV (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebWin32.HLLW.Kazaa.924
ZillyaWorm.Delf.Win32.3450
TrendMicroTROJ_AGENT_005911.TOMB
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.4e4778c00e08882c
SophosML/PE-A
IkarusWorm.Win32.Eggnog
JiangminWorm/Delf.vm
WebrootW32.Worm.Gen
GoogleDetected
AviraTR/Dropper.Gen
Antiy-AVLVirus/Win32.BagarBubba.a
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Pincav.AV@2rw0ny
MicrosoftWorm:Win32/Xolxo.A
ZoneAlarmP2P-Worm.Win32.Delf.aj
GDataTrojan.Agent.EICV
VaristW32/Delf.QB.gen!Eldorado
AhnLab-V3Worm/Win32.Delf.R119214
Acronissuspicious
VBA32Worm.Delf
ALYacTrojan.Agent.EICV
MAXmalware (ai score=81)
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_AGENT_005911.TOMB
RisingWorm.P2p.Win32.Delf.bn (CLASSIC)
YandexTrojan.GenAsa!HYSjiRN/8Mk
SentinelOneStatic AI – Malicious PE
MaxSecureVirus.W32.Lamer.FG
FortinetW32/Aple.A
BitDefenderThetaGen:NN.ZelphiF.36608.mmZ@auciUnn
AVGWin32:Delf-SVI [Trj]
Cybereasonmalicious.9225fe
DeepInstinctMALICIOUS

How to remove Worm.DelfPMF.S30896276?

Worm.DelfPMF.S30896276 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment