The worm tries to ping-bomb some computer at Microsoft on the 2nd of February 2000 and deactivates itself on 12th of July 2000 unlike the original version. All other functionalities are the same as the worm was compiled from the original NewApt sources. The NewApt.d worm variant appeared on January 10, 2000. This worm variant is slightly different from its earlier versions. It has a bigger list of telephone numbers it calls when the payload it activated.
Telephone numbers are also different.
This worm variant shows an aditional link in the message it spreads itself with. The link points to a porno site.