The Zafi.D worm arrives as an attachment to e-mails that bear a subject line of “Merry Christmas” and a message body consisting of the words “Happy Hollydays” printed in green text and separated by a yellow emoticon. (The message is signed with any one of a number of names, including “Jaime” and “Anne McGee.”) The attachment (with a .ZIP file extension), when executed, delivers worm code that infects Microsoft Windows systems and replicates by sending itself to e-mail addresses harvested from the infected computer’s address book.
It can even alter the language of the message according to the country domain of the recipient.
Further information and help
