Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.
Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
W32/Zafi-D is a mass mailing worm and peer-to-peer worm.
Copies itself to the Windows system folder with the filename Norton Update.exe.
Creates a number of files in the Windows system folder with filenames consisting of 8 random characters and a DLL extension. Some of these are exact or zipped copies of the worm, detected as W32/Zafi-D, while others are log files created by the worm.
Harvests email addresses from the Windows Address Book and from files found on the hard drive.
Copies itself to folders with names containing share, upload, or music as ICQ 2005a new!.exe or winamp 5.7 new!.exe.
Displays an fake error message box with the caption "CRC: 04F6Bh" and the text "Error in packed file!"