Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||W32/Zafi.A@mm, I-Worm.Kapes, W32.Erkez.A@mm|
|Effects: ||It ends processes belonging to antivirus programs and firewalls, among others.|
|Detection updated on:||April 19, 2004|
|Yes, using TruPrevent Technologies
|Country of origin:||HUNGARY|
Zafi.A is a worm that spreads via e-mail in a message written in Hungarian, which always has the subject kepeslap erkezett!.
Zafi.A ends processes belonging to antivirus programs and firewalls, among others. This leaves the affected computer vulnerable to the attack of other malware.
In addition, Zafi.A stops spreading after May 1, 2004. From this date on, it displays a window on screen with a political message.
Zafi.A is easy to recognize, as it reaches the computer in a message with the following characteristics:
Moreover, once it has affected the computer, it displays the following message on screen from May 1, 2004 on:
This message is about the political situation in Hungary, and demands for their rights.