Worm

Should I remove “Worm.DelfPMF.S30896276”?

Malware Removal

The Worm.DelfPMF.S30896276 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.DelfPMF.S30896276 virus can do?

  • A file was accessed within the Public folder.
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Checks for the presence of known devices from debuggers and forensic tools
  • Checks for the presence of known devices from debuggers and forensic tools

How to determine Worm.DelfPMF.S30896276?


File Info:

name: 9EA6EF310406DD28DE1B.mlw
path: /opt/CAPEv2/storage/binaries/282cb9173d59b4380a66a609a941be82c1d42a0765b1f444c9d779c821db26f3
crc32: 2C19BFC1
md5: 9ea6ef310406dd28de1beded413a70a6
sha1: 67b67f5c3b70394eb96ce9a5ba24f55244bc63c4
sha256: 282cb9173d59b4380a66a609a941be82c1d42a0765b1f444c9d779c821db26f3
sha512: 7f2456c0106b7d4691689a517e522afbd6933c857006b2f2f4f2a96ac0c540a09bcc25f1fc20dbd0e1f6c74a4f07f455d218dd21d4c090173163c7fdbcebbbe8
ssdeep: 3072:/jW+6oUqoN5CfsXYomtmEjPeUsGvE4pL4zv2NL6sRe5lxeG:/jvjTO5OVtdmGvEaL4z6Re5SG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13C444B42E3E804F5F5B38A348CB681259B77FD315E308F8EA754564A1E327909E39B27
sha3_384: bce7a92b8e01d0344732757d80bcc18b5ebf7507571f690423b038e156e1e48b469439d22dd2d3bc21750998b1c821d3
ep_bytes: 558bec83c4f0b838464000e874e2ffff
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Worm.DelfPMF.S30896276 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.Agent.EICV
FireEyeGeneric.mg.9ea6ef310406dd28
CAT-QuickHealWorm.DelfPMF.S30896276
SkyhighBehavesLike.Win32.HLLP.dt
McAfeeW32/HLLP.11042.gen
MalwarebytesGeneric.Trojan.Delf.DDS
ZillyaWorm.Delf.Win32.3450
SangforSuspicious.Win32.Save.ins
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0053c5661 )
K7AntiVirusTrojan ( 0053c5661 )
ArcabitTrojan.Agent.EICV
BitDefenderThetaGen:NN.ZelphiF.36744.qmZ@auciUnn
SymantecW32.SillyP2P
Elasticmalicious (high confidence)
ESET-NOD32Win32/Delf.NAY
APEXMalicious
ClamAVWin.Malware.Delf-6737076-0
KasperskyP2P-Worm.Win32.Delf.aj
BitDefenderTrojan.Agent.EICV
NANO-AntivirusTrojan.Win32.Delf.oxkq
AvastWin32:Delf-SVI [Trj]
EmsisoftTrojan.Agent.EICV (B)
BaiduWin32.Virus.Lamer.f
F-SecureTrojan.TR/Dropper.Gen
DrWebWin32.HLLW.Kazaa.924
VIPRETrojan.Agent.EICV
TrendMicroTROJ_AGENT_005911.TOMB
Trapminemalicious.high.ml.score
SophosMal/Generic-S
IkarusTrojan.Agent
MAXmalware (ai score=81)
JiangminWorm/Delf.vm
WebrootW32.Worm.Gen
GoogleDetected
AviraTR/Dropper.Gen
VaristW32/Delf.QB.gen!Eldorado
Antiy-AVLVirus/Win32.BagarBubba.a
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Pincav.AV@2rw0ny
MicrosoftWorm:Win32/Xolxo.A
ZoneAlarmP2P-Worm.Win32.Delf.aj
GDataTrojan.Agent.EICV
CynetMalicious (score: 100)
AhnLab-V3Worm/Win32.Delf.R119214
Acronissuspicious
VBA32Worm.Delf
ALYacTrojan.Agent.EICV
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_AGENT_005911.TOMB
RisingWorm.P2p.Win32.Delf.bn (CLASSIC)
YandexTrojan.GenAsa!HYSjiRN/8Mk
SentinelOneStatic AI – Malicious PE
MaxSecureVirus.W32.Lamer.FG
FortinetW32/Aple.A
AVGWin32:Delf-SVI [Trj]
Cybereasonmalicious.c3b703
DeepInstinctMALICIOUS

How to remove Worm.DelfPMF.S30896276?

Worm.DelfPMF.S30896276 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment