- Discovered:
- July 1, 2003
- Updated:
- February 13, 2007 12:03:17 PM
- Also Known As:
- I-Worm.Mapson.c [KAV], Win32.Mapson.C [CA], W32/Mapson.gen@MM [McAfee]
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.Mapson.C.Worm is a mass-mailing worm that sends itself to all the contacts in the MSN messenger contact list. The Subject line, Message body, and attachment vary. The attachment will have a .com, .exe, .scr, or .pif extension. Also, the email may spoof the From field.
The W32.Mapson.C.Worm worm:
- Attempts to spread itself through the KaZaA, KaZaA Lite, eDonkey2000, Gnucleus, Limewire, Morpheus, and Grokster file-sharing networks, as well as through ICQ.
- Terminates some popular antivirus, firewall, and system-monitoring programs.
- Is written in the Borland Delphi programming language and is compressed with UPX.
Antivirus Protection Dates
- Initial Rapid Release version July 2, 2003
- Latest Rapid Release version February 3, 2011 revision 006
- Initial Daily Certified version July 2, 2003
- Latest Daily Certified version February 3, 2011 revision 020
- Initial Weekly Certified release date July 2, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Moderate
Damage
- Damage Level: Medium
Distribution
- Distribution Level: High
Writeup By: Yana Liu



