New Windows worm comes as Xmas card
December 15, 2004 - 9:32AM/the AGE
An anti-virus firm has advised computer users to beware of a new Windows email worm which has been particularly successful in infecting computers as it is disguised as a multilingual electronic Christmas card.
"We think this worm will be big, because of its timing and the fact that it comes in 15 different European languages," Mikko Hyppoenen, head of anti-virus research at Finnish firm F-Secure, said.
The virus, dubbed Zafi.D, infects computers by email and distributes itself by using e-mail lists on contaminated personal computers.
Its Christmas greeting is in the language of the recipient, decided by the country code - like ".fi" or ".fr" - at the end of the email address, making it more likely that the recipient will think it is a genuine greeting.
It also opens a back door on infected PCs, making it possible for outsiders to use them to distribute unsolicited bulk email advertisements, or spam, and launch malicious attacks to close down web sites, he added.
The earlier variants of the Zafi internet worm family were highly dangerous viruses, with the B variant still among the top 10 most virulent bugs several months after it was launched, he said.
While this is the first Zafi worm disguised as a Christmas card, the phenomenon is not new, Hyppoenen said.
"We have seen these hoaxes for several Christmases already, and personally I prefer traditional pen and paper cards, and we recommend this to all our clients too."