a-squared Anti-Malware and Mamutu behavior blocker - Malware scanner, remover and protection against new infections of Viruses, Spyware, Trojan Horses, Bots, Backdoors.
RECOMMENDATION!
A-SQUARED TESTED
BEST IN TEST:
October 2009:
1. place: a-squared Anti-Malware
99.8% at MRG scanner test #21
malwareresearchgroup.com
September 2009:
Best detection in all categories!
COM! Magazine test (German)
August 2009:
1. place: a-squared Anti-Malware
99.9% at static detection test of
PC Security Labs
June 2009:
1. place: a-squared Anti-Malware
99.7% at MRG scanner test #19
malwareresearchgroup.com
November 2008:
99.84% detection rate in
antivirus comparison test of
PC Security Labs!
August 2008:
"Of the scanners tested,
a-squared by Emsisoft performed
significantly better than
the others."
Dozleng.com Comparison Test
REVIEWS/AWARDS
a-squared Anti-Malware was
awarded for its outstanding
total performance.
Best static detection!
PC Magazine:
"Near-Perfect Protection:
It blocked every single one of the
samples the moment each one tried
to execute, scoring a perfect
10 of 10 points."
Best Free Trojan Scanner!
"Our favorite malware-masher:
a-squared Anti-Malware!"
SecuritySoftwareZone best rating
Tucows 5 cows!
"In terms of worms and spyware,
but also trojans, a-squared Anti-Malware can hardly be beaten."
ZDNet best rating
a-squared Anti-Malware with
best rating at Softpedia.com
MajorGeeks.com
Editor's Pick
FreeFunFiles.com
Editor's Pick in August 2006
Softpedia.com
Reviewer's pick
PRODUCTS
a-squared Malware-Info
Name: Worm.Win32.Zafi.D
Description:
General
Worm.Win32.Zafi.d is a worm that spreads using filesharing tools and emails. The worm is compressed using FSG and has a size of 11,745 bytes.As soon as Worm.Win32.Zafi.D was started it copies itself to the Windows System directory using the file name "Norton Update.exe". To ensure its startup on every reboot of the computer it uses the following registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Wxp4"="%system%\Norton Update.exe"
The worm creates several other files with packed copies of it self or with components the worm uses. These files are:
%system%\.DLL
C:\s.cm
Spreading
Worm.Win32.Zafi.D searches for files that extensions contain one of the following strings to extract mail addresses from them:
htm
wab
txt
dbx
tbb
asp
php
sht
adb
mbx
eml
pmr
fpt
inb
Email addresses containing one of the following strings will be ignored:
yaho
win
use
info
help
admi
webm
micro
msn
hotm
suppor
syman
viru
trend
secur
panda
cafee
sopho
kasper
Found email addresses are saved in random named files (8 random chars + ".dll") within the Windows System directory.
The worm mails try to stealth theirself as christmas greetings. Depending on the email address the worm uses diffrent texts in diffrent languages.
Beside the normal email spreading the worm can use several FileSharing networks for spreading. Therefore the worm copies itself to directories that contain the following strings within their names:
share
upload
music
In doing so the worm uses the filenames "winamp 5.7 new!.exe" or "ICQ 2005a new!.exe".
Payload
To protect itself the worm will try to terminate several anti-virus tools and programs that names contain one of the following strings:
reged
msconfig
task
Beside that self defending behaviour Worm.Win32.Zafi.D includes a backdoor component listening to port 8181. This backdoor allows attackers to upload and execute files to an infected machine.
Other special features
Currently no special features are known.
Removal instructions for Worm Zafi D:
To delete this malware infection, please download and install a-squared Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Additional information might be found here:
Search
at Google for
Worm Zafi D
Search at Bing for
Worm Zafi D
Search
at Yahoo for
Worm Zafi D
How can I protect myself from Worm Zafi D?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software a-squared Anti-Malware today!
Only $40 for the security of your computer.
Buy a-squared Anti-Malware online:
Trust only on the best protection software!
