W32/Zafi

W32/Zafi is a peer-to-peer (P2P) and email worm that spreads using several different languages, including English, Hungarian and Russian. On execution W32/Zafi will copy itself to the Windows system folder as random .DLL and random .EXE name. W32/Zafi is designed to search for and gather email addresses onto your computer and spread its copies by sending infected mails to those addresses. Some variants of W32/Zafi worm may display a message box on screen containing the Hungarian text.