PDA

View Full Version : Zafi Worm variant


Donn
12-15-2004, 07:40 PM
Warning! Worm.Win32.Zafi.D!

The 4. variant of the Zafi worm is spreading since yesterday. Worm.Win32.Zafi.D has a size of 11,745 bytes and is packed with FSG. It spreads via email as a christmas greeting and also via file sharing networks. In addition to the spreading mechanism Worm.Win32.Zafi.D installs a Backdoor on the computer which enables remote administration of the machine.

A more detailed description of the worm can be found at the aČ Malware Database:
http://www.emsisoft.com/en/malware/?Worm.Win32.Zafi.D

Zafi.D can be detected and removed with aČ Free and aČ Personal with the latest signature updates. The latest versionaČ Personal background guard will block the worm if it is started. Please run the aČ Online-Update immediately and ensure that the new automatic update feature in aČ Personal is enabled.


Sincerely yours,

Your aČ Team
http://www.emsisoft.com

Donn
12-16-2004, 04:54 PM
It apparently is disguised as a Christmas greeting:

http://news.bbc.co.uk/2/hi/technology/4101325.stm