W32/Delf-KT is a Trojan and P2P worm for the Windows platform.
When W32/Delf-KT is installed it creates the file <System>\Rundll~.exe.
The following registry entry is created to run Rundll~.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Rundll
<System>\Rundll~.exe /out
Registry entries are created under:
HKCU\Software\MouseMX\
W32/Delf-KT attempts to spread via the Kazaa P2P file sharing network. If the Kazaa local content exists, the worm copies itself to the new location using one of the following filenames:
Directx10 v2.3 fullversion
GaduReader 3.5
GTA San Andreas Crack
Half Life 2 Crack - multiplayer
Half Life 2 dodatek
Norton AntyVirus 2005 full
Partition Magic 8.6
Partition Magic 9
Roller Coaster Tycoon 3 crack
Sims 2 crack
W32/Delf-KT also moves existing executable files on the computer to a new folder called MouseMX and copies itself into the place of the original file.