p2pnet.net News:- It's out there and it's hungry - the Zafi.B worm that, as we reported yesterday, is causing major problems.
Among other things, it has a .pif attachment telling anyone who makes the mistake of opening it, "Don't worry be happy."
But, Do Worry. Don't be happy. Because Zafi.B, the latest rendition of Hungary's Zafi.A and Erkez, among other names,will shanghai your email application.
And it has a fondness for p2p applications.
The latest version of Zafi.B has a message box reading, "We demand the government accommodates the homeless, tightens up the penal code and VOTES FOR THE DEATH PENALTY to cut down the increasing crime," says WebUser here.
F-Secure has issued a level 2 alert and, F-Secure product manager warns Mikael Albrecht, "This worm is tricky, as it has a feature that can close down firewalls and antivirus programs in order to help itself spread further. But that’s not all.
"Another interesting thing about this worm is that the infected messages come in many different languages. As most of the widely spread worms use only English, this feature may confuse the user to open the message – and the worm spreads on."
As an example an email message sent by Zafi.B may look like this, says F-Secure:
Sender: Jennifer
Subject: eYou`ve got 1 VoiceMessage!
Attachment:
"link.voicemessage.com.listen.index.php1Ab2c.pif"
Message body:
Dear Customer!
You`ve got 1 VoiceMessage from voicemessage.com website!
You can listen your Virtual VoiceMessage at the following link:
http://virt.voicemessage.com/index.listen.php2=35affv or by clicking the attached link.
Send VoiceMessage! Try our new virtual VoiceMessage Empire!
Best regards: SNAF.Team (R).
http://p2pnet.net/story/1686
Among other things, it has a .pif attachment telling anyone who makes the mistake of opening it, "Don't worry be happy."
But, Do Worry. Don't be happy. Because Zafi.B, the latest rendition of Hungary's Zafi.A and Erkez, among other names,will shanghai your email application.
And it has a fondness for p2p applications.
The latest version of Zafi.B has a message box reading, "We demand the government accommodates the homeless, tightens up the penal code and VOTES FOR THE DEATH PENALTY to cut down the increasing crime," says WebUser here.
F-Secure has issued a level 2 alert and, F-Secure product manager warns Mikael Albrecht, "This worm is tricky, as it has a feature that can close down firewalls and antivirus programs in order to help itself spread further. But that’s not all.
"Another interesting thing about this worm is that the infected messages come in many different languages. As most of the widely spread worms use only English, this feature may confuse the user to open the message – and the worm spreads on."
As an example an email message sent by Zafi.B may look like this, says F-Secure:
Sender: Jennifer
Subject: eYou`ve got 1 VoiceMessage!
Attachment:
"link.voicemessage.com.listen.index.php1Ab2c.pif"
Message body:
Dear Customer!
You`ve got 1 VoiceMessage from voicemessage.com website!
You can listen your Virtual VoiceMessage at the following link:
http://virt.voicemessage.com/index.listen.php2=35affv or by clicking the attached link.
Send VoiceMessage! Try our new virtual VoiceMessage Empire!
Best regards: SNAF.Team (R).
http://p2pnet.net/story/1686
