Virus Profile: W32/Zafi.d@MM!zip

Threat Search
Virus Profile information details
Risk Assessment: Home Low | Corporate Low
Date Discovered: 12/15/2004
Date Added: 12/15/2004
Origin: Unknown
Length: Varies
Type: Virus
Subtype: Email
DAT Required: 4415
Removal Instructions


This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.

Indication of Infection

Methods of Infection


Virus Characteristics

This is a detection for W32/Zafi.d@MM while the virus is contained within a ZIP file.

Although the McAfee scan engine can understand ZIP format, the process of UnZipping takes some time to calculate, and hence detection for the top-level ZIP itself has been added in as a performance measure for email scanning products such as WebShield and GroupShield.

Detection of W32/Zafi.d@MM with the addition of !ZIP to the detection name does indicate that the virus has not had a chance to run on the local system, and hence no damage should have occurred.

For more information on this threat, see:


All Users:
Use current engine and DAT files for detection and removal.

Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).


PC Infected? Get Expert Help

Virus Removal Service

Connect to one of our Security Experts by phone. Have your PC fixed remotely - while you watch!