Troj/Delf-LW is a Trojan for the Windows platform.
When first run Troj/Delf-LW copies itself to <System>\Secret.exe.
The following registry entry is created to run Secret.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Secret
\"<System>\Secret.exe\" FormaT
When the computer is next rebooted and Troj/Delf-LW is launched on startup, it first disables the Task Manager, and tries to prevent a log-off or shutdown from occuring.
Troj/Delf-LW then proceeds to attempt to delete every file and folder on the entire system, while displaying a progress bar entitled "Updating System Configuration".
Once Troj/Delf-LW has finished deleting files, it displays a message saying "Yedinmi Yarraaa?".