Worm

Worm.Win32.Delf.bq information

Malware Removal

The Worm.Win32.Delf.bq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.Win32.Delf.bq virus can do?

  • Creates RWX memory
  • Expresses interest in specific running processes
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Thai
  • The binary likely contains encrypted or compressed data.
  • Attempts to stop active services
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Likely virus infection of existing system binary
  • Checks for the presence of known devices from debuggers and forensic tools
  • Creates a copy of itself
  • Attempts to disable System Restore
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent file extensions from being displayed
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Worm.Win32.Delf.bq?


File Info:

crc32: 9D300EE5
md5: de1f746ef2e9589ee600157cc3cce7d3
name: DE1F746EF2E9589EE600157CC3CCE7D3.mlw
sha1: fc6557ca77c2361bd79d717e826b821921870cdc
sha256: f5da3dd47fd5900925e356e62bb341128cf41913e5655de5076d95c4cf203ad2
sha512: 16c1f8634451e7663cc3174ba66cc75bfe75fb30429dd5485935e41d589f21b7e248add5cf71086f8dbd736891bfa8f3d7461f8c4d3df798fac5cae369606b59
ssdeep: 6144:BWCBm/LrFVwAcZIMNRolzHnoVpGYBNbX:BvmTr/GIRlzHnoVV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Worm.Win32.Delf.bq also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004f094a1 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader.37959
CynetMalicious (score: 100)
ALYacTrojan.Generic.30304405
CylanceUnsafe
ZillyaWorm.Delf.Win32.1117
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 004f094a1 )
Cybereasonmalicious.ef2e95
CyrenW32/Worm.VJDM-4815
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Pahooka.A
APEXMalicious
AvastWin32:Delf-ERR [Wrm]
ClamAVWin.Worm.Delf-33136
KasperskyWorm.Win32.Delf.bq
BitDefenderTrojan.Generic.30304405
NANO-AntivirusTrojan.Win32.Delf.cwyawg
MicroWorld-eScanTrojan.Generic.30304405
TencentMalware.Win32.Gencirc.10cf09f0
Ad-AwareTrojan.Generic.30304405
SophosML/PE-A + Mal/Sily-A
ComodoWorm.Win32.Pahooka.A@3i01
BitDefenderThetaAI:Packer.1E38CAA11D
VIPRETrojan.Win32.Generic.pak!cobra
TrendMicroMal_Otorun5
McAfee-GW-EditionBehavesLike.Win32.Autorun.ht
FireEyeGeneric.mg.de1f746ef2e9589e
EmsisoftTrojan.Generic.30304405 (B)
SentinelOneStatic AI – Malicious PE
JiangminWorm.Delf.ev
AviraTR/Dldr.Delphi.Gen
Antiy-AVLTrojan/Generic.ASMalwS.5BD63
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D1CE6895
GDataTrojan.Generic.30304405
AhnLab-V3Trojan/Win32.RL_Xema.R284927
McAfeeW32/Pahooka.worm
MAXmalware (ai score=83)
VBA32Win32.Trojan.Dropper.Heur
MalwarebytesMalware.AI.4291147389
PandaTrj/Genetic.gen
TrendMicro-HouseCallMal_Otorun5
YandexWorm.Delf!ElA2e1DvtsM
IkarusBackdoor.Win32.Hupigon
FortinetW32/Weena!worm
AVGWin32:Delf-ERR [Wrm]

How to remove Worm.Win32.Delf.bq?

Worm.Win32.Delf.bq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment