Security Update
 

1703

Zafi.b Worm

This is a mass-mailing worm discovered on June 11, 2004. W32.Erkez.B@mm is a mass-mailing worm that constructs messages using its own SMTP engine and spoofing the From: address. On an infected computer the worm searches for email addresses on the local hard disk and will send itself to those email addresses.

The worm uses different languages depending on the Top Level Domain (TLD) of the recipients address. ie: .COM Mail address users, will receive the English mail body, while those with .DE Mail address will receive the German body.

It will copy itself to file sharing network. When this worm infects a computer, it attempts to overwrite executables associated with security products installed on that machine.

For more information visit the links below:

McAfee Security

Symantec


Please be wary of opening any attachments, especially executables. Some possible executable file extensions are :

  • .exe
  • .com
  • .zip
  • .pif

Network Associates' McAfee antivirus has a free tool called “Stinger” that detect and remove 39 different viruses, Trojans and variants from infected computers. “Stinger” can be downloaded at: http://vil.nai.com/vil/stinger/


Thank you again for choosing Dnet!