W32/Dorf-BF is a worm for the Windows platform.
When first run W32/Dorf-BF copies itself to <Windows>\kavir.exe.
The following registry entry is created to run kavir.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
kavir
<Windows>\kavir.exe