Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

W32/Zaflen.a - Infects DOC, RTF, JPG, GIF, and PNG files

Users should be careful with any of these files found in email (or potentially posted in an untrusted website). Most likely the virus is an EXE and prepends to each infected damaging dozens or even hundreds of files that may be on the hard drive.  Please be careful with all attachments and stay up-to-date on AV protection.   McAfee, Microsoft, Kapersky, Sanda, Sophos, and others have protection now. 

W32/Zaflen.a - Infects DOC, RTF, JPG, GIF, and PNG files
http://vil.nai.com/vil/content/v_142474.htm

QUOTE: This detection is for a parasitic file infector, which infects the files with extensions "doc, rtf, jpg, gif and png" by prepending itself to these files. This also uses a mass mailing component for spreading via e-mail.  It searches all drives for these file types and changes the icon of the infected files to M.S.Word icon and the extension to scr or exe. It also appends 35 bytes to the end of file along with the extension of the original file.

Aliases: Worm.Win32.VB.gr  (Kaspersky) Worm:Win32/Zaflen.A@mm  (Microsoft) W32.SillyFDC  (Symantec) W32/Nedro.C.worm  (Panda) W32/Lovelet-AD  (Sophos)