Topics
General News Antivirus Reviews Network Defense Spyware Anti-Spam Phishing Scams Virus Alerts

Security Forums
Desktop Security Malware Removal Help Spam Blocking Patches and Hotfixes Antivirus Support Network Security Firewalls and Routers Intrusion Detection Web Proxies

Quick Resources
About Antisource Malware Threats Triangle Free Virus Scan Virus Map

Zafi-D wishes us Happy Hollydays

Wednesday, December 15, 2004
Author: Richard S. Westmoreland
Permalink: 200412152022437

Virus Alerts

W32/Zafi-D is a mass mailing worm spreading Christmas cheer. It will also spread itself via peer-to-peer networks.

It is observed to be spreading rapidly. More information can be found at Sophos and Symantec which calls it Erkez.D. The payload consists of disabling antivirus services, using the address book to spread itself, and opening up a backdoor on tcp port 8181 to remote attackers. Even if you're blocking all executable attachments at your gateway, this worm will randomly send the infector file inside a zip file.