Joined: 15 Oct 2002
Location: NW England, UK
|Posted: Fri Dec 17, 2004 2:41 pm Post subject: Zafi.D virus Christmas greetings
|Looks like someone doesn't want any presents from Father Christmas this year as they've been really bad and created a new virus especially for the festive season.
The Zafi.D virus version of the virus sends itself in an e-mail claiming to be a Christmas greetings card, with the subject "Merry Christmas!" with a subject "Happy HollyDays!" or "Error in packed file!"
However this one has got a bit cleverer in that it tries to customise the message accordingly depending on what language it thinks you might speak. For example if your e-mail address ends in .hu it'll send you the message in Hungarian.
There are currently about 19 versions of the message such as:
Sender: S. Ewa
Subject: Christmas - Kartki!
Sender: V. Dusan
Subject: Christmas pohlednice
Sender: T. Antonio
Subject: Buon Natale!
etc. More listed at http://www.f-secure.com/v-descs/zafi_d.shtml
The worm also goes under the names:
Win32.Zafi.D [Computer Associates]
WORM_ZAFI.D [Trend Micro
If you get infected, theres a W32.Erkez.D@mm removal tool
Mad Theories - Ambleside - Coniston - Grange