New virus alert
Posted: Fri Dec 17, 2004 4:47 amJust thought some people might like to see this and be aware
Win32/Zafi.D is a worm spreading in e-mail attachments and via P2P networks. Its executable file is 11745 bytes long, it is compressed using FSG.
Note: In following text a symbolic inscription %windir% is used instead of the name of directory in which Windows operating system is installed. Of course, this may differ from installation to installation. The subdirectory System or System32 placed in %windir% has a name %system%.
The body of the message sent by the worm contains a short Christmas greeting. There are 15 different language versions. A particular version is picked depending on recipient's top level domain.
Examples of the messages:
English
subject: Merry Christmas!
message body: Happy Hollydays!
meno prÃohy: postcard
Win32/Zafi.D is a worm spreading in e-mail attachments and via P2P networks. Its executable file is 11745 bytes long, it is compressed using FSG.
Note: In following text a symbolic inscription %windir% is used instead of the name of directory in which Windows operating system is installed. Of course, this may differ from installation to installation. The subdirectory System or System32 placed in %windir% has a name %system%.
The body of the message sent by the worm contains a short Christmas greeting. There are 15 different language versions. A particular version is picked depending on recipient's top level domain.
Examples of the messages:
English
subject: Merry Christmas!
message body: Happy Hollydays!
meno prÃohy: postcard