1. Symantec/
  2. Security Response/
  3. W32.Mapson.C.Worm


Risk Level 2: Low

July 1, 2003
February 13, 2007 12:03:17 PM
Also Known As:
I-Worm.Mapson.c [KAV], Win32.Mapson.C [CA], W32/Mapson.gen@MM [McAfee]
Systems Affected:

W32.Mapson.C.Worm is a mass-mailing worm that sends itself to all the contacts in the MSN messenger contact list. The Subject line, Message body, and attachment vary. The attachment will have a .com, .exe, .scr, or .pif extension. Also, the email may spoof the From field.

The W32.Mapson.C.Worm worm:
  • Attempts to spread itself through the KaZaA, KaZaA Lite, eDonkey2000, Gnucleus, Limewire, Morpheus, and Grokster file-sharing networks, as well as through ICQ.
  • Terminates some popular antivirus, firewall, and system-monitoring programs.
  • Is written in the Borland Delphi programming language and is compressed with UPX.

Antivirus Protection Dates

  • Initial Rapid Release version July 2, 2003
  • Latest Rapid Release version February 17, 2018 revision 020
  • Initial Daily Certified version July 2, 2003
  • Latest Daily Certified version March 23, 2017 revision 041
  • Initial Weekly Certified release date July 2, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube