BBC Home
Explore the BBC
BBC News
Launch consoleBBC NEWS CHANNEL
Last Updated: Thursday, 16 December, 2004, 12:04 GMT
Virus poses as Christmas e-mail
Screengrab of Zafi-D Christmas card, F-Secure
The graphics in the Zafi-D attachment are very crude
Security firms are warning about a Windows virus disguising itself as an electronic Christmas card.

The Zafi.D virus translates the Christmas greeting on its subject line into the language of the person receiving infected e-mail.

Anti-virus firms speculate that this multilingual ability is helping the malicious program spread widely online.

Anti-virus firm Sophos said that 10% of the e-mail currently on the net was infected with the Zafi virus.

International threat

Like many other Windows viruses, Zafi-D plunders Microsoft Outlook for e-mail addresses and then uses mail-sending software to despatch itself across the web to new victims.

To be infected users must open up the attachment travelling with the message which bears the code for the malicious bug.

The attachment on the e-mail poses as an electronic Christmas card but anyone opening it will simply get a crude image of two smiley faces.

boldog karacsony...
Feliz Navidad!
Weihnachten card
Prettige Kerstdagen
Christmas pohlednice
Joyeux Noel!
Buon Natale!
Christmas Vykort!
The virus' subject line says "Merry Christmas" and translates this into one of 15 languages depending of the final suffix of the e-mail address the infected message has been sent to.

The message in the body of the e-mail reads: "Happy Holidays" and this too is translated.

On infected machines the virus tries to disable anti-virus and firewall software and opens up a backdoor on the PC to hand over control to the writer of the virus.

The virus is thought to have spread most widely in South America, Italy, Spain, Bulgaria and Hungary.

The original Zafi virus appeared in April this year.

"We have seen these hoaxes for several Christmases already, and personally I prefer traditional pen and paper cards, and we recommend this to all our clients too," said Mikko Hypponen, who heads F-Secure's anti-virus team.

Top 20 computer threats unveiled
09 Oct 04 |  Technology
The rise and rise of file-sharing
10 Dec 04 |  Click Online
Hi-tech tools fuel phishing boom
24 Nov 04 |  Technology
Police tackle internet crime
24 Nov 04 |  North East Wales
Lazarus-like virus hits computers
19 Nov 04 |  Technology
How to smash a home computer
14 Nov 04 |  Technology


The BBC is not responsible for the content of external internet sites


News Front Page | World | UK | England | Northern Ireland | Scotland | Wales | Politics
Business | Entertainment | Science/Nature | Technology | Health | Education
Have Your Say | Magazine | In Pictures | Week at a Glance | Country Profiles | In Depth | Programmes
Americas Africa Europe Middle East South Asia Asia Pacific