virus advisory from McAfee

Virus Advisory



What is it?

Offering a fake holiday greeting, W32/Zafi.d@MM is a Medium Risk mass-mailing worm that arrives as an email attachment. When run, the worm displays a fake error message (Error in packed file!), infects the host computer and emails itself to stolen email addresses using the infected computer's Internet connection.

Like previous variants, the worm sends itself in different languages depending on the recipient's address. For example, a .COM mail address receives an English message, a .DE mail address receives German.

Note: To fortify your anti-virus defense against threats like W32/Zafi.d@MM that need Internet access to spread, we recommend installing McAfee Personal Firewall Plus.



What should I look for?


FROM: Varies (forged addresses taken from infected system)
SUBJECT: Example: Fw: Merry Christmas!
BODY: Example: Happy Hollydays!
ATTACHMENT: Example: postcard.php8583.zip


How do I know if I've been infected?

Fake error message displayed. Alerts from a desktop firewall (if installed) that a new application is asking for Internet access. TCP port 8181 open on the infected system.

 

If you are running a current resident AV app like McAfee and keep your virus ref files up to data, I'd say you are probably OK but to double check, do a google search for online antivirus and the first page or two is all sites that will scan your PC using the very latest ref files.

If an online scan (or two if you want to be super safe - different sites) comes up clean, you know you are not infected.

You will note from the message you posted that McAfee is trying to sell you more software and I always take those messages with a grain or two of salt.