You're in: Panda Security > Home Users > security-info > about-malware > encyclopedia > overview
Active Scan. Scan your PC free
Panda Security Product Line 2012

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Navidad.B

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Navidad.B
Technical name:W32/Navidad.B
Threat level:Low
Alias:Enmanuel,, I-Worm.Navidad.B, Troj_Navidad.B, W32/Navidad.B-m, I-Worm.Navidad.B
Type:Worm
Subtype:Trojan
Effects:  When activated it prevents files with an EXE extension from being run and displays warnings and an error message when the infected computer is started up. It goes memory resident as a task.

Affected platforms:

Windows XP/2000/NT/ME/98/95

Detection updated on:June 16, 2009
StatisticsNo
Yes, using TruPrevent Technologies
Repair utility:Panda QuickRemover
Family:NAVIDAD

Brief Description 

    

Navidad.B is an astute worm that is difficult to detect because it reaches computers in a reply to a previously sent e-mail (which is infected). This message includes a file called EMANUEL.EXE, which infects the computer when it is run.

Navidad.B is dangerous as it prevents many programs from being run. In other words, files with an EXE extension. It also displays warnings when the computer is started up and goes memory resident as a task.

It spreads very quickly by sending itself as a reply to all the e-mail messages in the Inbox of the mail program.

Visible Symptoms 

    

The first symptom of Navidad.B is an e-mail message with the following characteristics:

  • A reply to a message that the user has sent to another user (which is infected).
  • The subject is the same as the original message that was sent. The only difference is that it includes the reply tag (RE:).
  • The message is the same as that in the original e-mail message sent to the infected user.
  • The message includes an attachment called EMANUEL.EXE.

When the EMANUEL.EXE file is run, Navidad.B activates and displays a long list of icons and messages. These appear depending on how the infected user replies to each one.

For more information on the windows displayed when Navidad.B activates, click here.