1. Symantec/
  2. Security Response/
  3. W32.Mapson.D.Worm


Risk Level 2: Low

August 30, 2003
February 13, 2007 12:06:34 PM
Also Known As:
I-Worm.Mapson.d [KAV], W32/Mapson.gen@MM [McAfee]
Systems Affected:

W32.Mapson.D.Worm is a mass-mailing worm that sends itself to all the contacts in the MSN Messenger contact list and also attempts to spread through file-sharing networks and ICQ. The worm also attempts to terminate some popular antivirus, firewall, and system-monitoring programs.

The subject line, message body, and attachment vary, but the attachment will have a .bat, .com, .exe, .scr, or .pif extension. The worm may also spoof the From: field.

The worm is written in the Borland Delphi programming language and is compressed with UPX.

Antivirus Protection Dates

  • Initial Rapid Release version September 2, 2003
  • Latest Rapid Release version September 2, 2003
  • Initial Daily Certified version September 2, 2003
  • Latest Daily Certified version September 2, 2003
  • Initial Weekly Certified release date September 3, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube