W32.Navidad

W32.Navidad is a mass-mailing worm program. Using MAPI, the worm replies to all inbox messages that contain a single attachment. This worm is able to distribute itself through any MAPI-compliant email client, including Microsoft Outlook. However, email messages that are infected with this worm can be received by any email client. The worm utilizes the existing email subject line and body and attaches itself as Navidad.exe. Due to the bugs in the code, when the worm is executed, it causes your system to be unusable.

Symantec has also created an interactive tutorial to help you get rid of this worm.

Protection

• Initial Rapid Release version November 6, 2000
• Latest Rapid Release version March 3, 2008 revision 035
• Initial Daily Certified version November 6, 2000
• Latest Daily Certified version June 17, 2008 revision 017
• Initial Weekly Certified release date November 6, 2000

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: More than 1000
• Number of Sites: More than 10
• Geographical Distribution: High
• Threat Containment: Moderate
• Removal: Difficult

Damage

• Damage Level: High

Distribution

• Distribution Level: High