1. Symantec/
  2. Security Response/
  3. W32.Navidad


Risk Level 2: Low

November 3, 2000
February 13, 2007 11:57:49 AM
Also Known As:
I-Worm.Navidad.a [Kaspersky], W32/Navidad.gen@M [McAfee], Win32.Navidad [Computer Associ, W32/Navidad [Sophos], WORM_NAVIDAD.A [Trend]
Systems Affected:

W32.Navidad is a mass-mailing worm program. Using MAPI, the worm replies to all inbox messages that contain a single attachment. This worm is able to distribute itself through any MAPI-compliant email client, including Microsoft Outlook. However, email messages that are infected with this worm can be received by any email client. The worm utilizes the existing email subject line and body and attaches itself as Navidad.exe. Due to the bugs in the code, when the worm is executed, it causes your system to be unusable.

Symantec has also created an interactive tutorial to help you get rid of this worm.

Antivirus Protection Dates

  • Initial Rapid Release version November 6, 2000
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version November 6, 2000
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date November 6, 2000
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Eric Chien

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube