Zafi Virus Strikes Millions Of Computers World wide

What is it?

Offering a fake holiday greeting, W32/Zafi.d@MM is a Medium Risk mass-mailing worm that arrives as an email attachment. When run, the worm displays a fake error message (Error in packed file!), infects the host computer and emails itself to stolen email addresses using the infected computer's Internet connection.

Like previous variants, the worm sends itself in different languages depending on the recipient's address. For example, a .COM mail address receives an English message, a .DE mail address receives German.

Note: To fortify your anti-virus defense against threats like W32/Zafi.d@MM that need Internet access to spread, we recommend installing McAfee Personal Firewall Plus.

What should I look for?
FROM: Varies (forged addresses taken from infected system)
SUBJECT: Example: Fw: Merry Christmas!
BODY: Example: Happy Hollydays!
ATTACHMENT: Example: postcard.php8583.zip

How do I know if I've been infected?
Fake error message displayed. Alerts from a desktop firewall (if installed) that a new application is asking for Internet access. TCP port 8181 open on the infected system.

How do I find out more?
View details about W32/Zafi.d@MM here.

Current Threat
W32/Zafi.d@MMMedium Risk Current VirusScan users with DAT 4414 are protected from this threat. FreeScan checks for W32/Zafi.d@MM.

Install the Latest Protection
Current Subscribers
1. Connect to the Internet.2. Right-click the icon in your system
tray.3. Click Updates. Note: We recommend setting your service to Automatic Update.

VirusScan 8.x Owners
Renew your current DAT subscription.VirusScan 7.x or prior Retail Product Owners
Visit our Upgrade Center to order new VirusScan 2005. New Users

Download new McAfee VirusScan now for year-round PC protection from the latest viruses and worms.
Or try it free for 15 days.

Find free antivirus solutions and free online virus scans at Spam Virus Help