ZAFI Computer Virus
Virus of Babble, Zafi, a computer virus to torment Internet users, speaks in many tongues. It customizes its language to the user's computer settings.
How ZAFI spreads:
Zafi can infect Windows 95, 98, ME, NT, 2000 and XP systems. Zafi harvests email addresses and uses its own SMTP mail engine to send emails with infected attachments of itself out with spoofed email addresses. Zafi copies itself as either 'winamp 7.0 full_install.exe' to any folders that contain 'share' or 'upload' in their folder name.
What ZAFI does:
Zafi creates a random .EXE file and several random .DLL files in the Windows System folder. Zafi closes any programs that have 'firewall' or 'virus' in their filenames. Some key Windows tools, like Task Manager and Registry Editor are disabled. If your anti virus software has stopped working or your computer starts acting strangely then this may be due to the worm. We recommend that you speak to your computer vendor for support in these instances.
How to recognise ZAFI:
Infected emails appear in many different European languages, including English in some cases. Email subject lines and message text vary. Zafi emails come with an infected attachment whose filename also varies.
ZAFI in the News:
ZAFI.B tops the June 2004 virus charts - Looks like virus writers have been lying low due to arrests of coders worldwide or maybe antivirus vendors have succeeded in clearing up the aftermath of previous attacks. Also there is evidence enough that there are still plenty of easily duped people out there who will do such a thing. July 2004, UK.
According to statistics on most-reported malware from antivirus company Sophos, the number one virus for September is Zafi-B - which has stayed at the top spot. Oct 2004, UK.
|
Post your comment