Continued threat of Zafi-D virus

By Derek Sooman on May 1, 2005, 4:00 AM
Virus Zafi-D now leads this month's list of top 10 viruses, security firm Sophos has confirmed. The virus, which first appeared at the end of last year, accounted for 46.6 percent of all virus reports submitted to Sophos.

"During the month of April, several older viruses maintained their spot on the chart," Gregg Mastoras, senior security analyst at Sophos, said in a statement. "The Zafi family of viruses accounted for more than 50 percent of all the viruses reported to Sophos this month. It could be that many of these worms were able to spread in multiple languages, therefore catching some users off guard."

Zafi-D is a mass mailing worm and peer-to-peer worm that creates a number of files in the Windows system folder. Some of these are exact or zipped copies of the worm, detected as W32/Zafi-D, while others are log files created by the worm. The virus harvests email addresses from the Windows Address Book and from files found on the hard drive. It can be recognised by the way it displays a fake error message box with the caption "CRC: 04F6Bh" and the text "Error in packed file!"

Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.