Widespread Zafi-B computer worm calls for death penalty, reports Sophos

Experts at Sophos are warning computer users of the Zafi-B worm (W32/Zafi-B) which has accounted for 60 per cent of all reported viruses since it first appeared on Friday 11 June. Zafi-B spreads itself by email and peer-to-peer filesharing systems, and is using a wide variety of different languages.

The worm can display a message box on screen containing Hungarian text [translated below]:

‘We demand that the government accommodates the homeless, tightens up the penal code and VOTES FOR THE DEATH PENALTY to cut down the increasing crime. Jun. 2004, Pécs (SNAF Team)’

“The Zafi-B worm has accounted for more than 60 per cent of the reports to Sophos’s global network of monitoring stations over the last 24 hours, making it the most widespread email worm at the moment,” said Graham Cluley, senior technology consultant for Sophos. “All computer users should ensure their defences are in place against the latest viruses. That not only includes regular anti-virus updates to protect against emerging threats, but also running a policy at the email gateway to block unwanted executable code from entering your business.”

The Zafi-B worm is believed to have been written in Hungary, but can send itself via email using a variety of languages. Its predecessor, Zafi-A, displayed a message calling for Hungarian patriotism.

Further details about Zafi-B can be found at:
http://www.sophos.com/virusinfo/analyses/w32zafib.html