x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Mapson.B

Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Mapson.B
Technical name:W32/Mapson.B@MM
Threat level:Low
Type:Worm
Effects:  It does not have any destructive effects. It spreads via e-mail and through P2P file sharing programs.
Affected platforms:

Windows XP/2000/NT/ME/98/95

First detected on:June 25, 2003
Detection updated on:March 16, 2005
StatisticsNo
Proactive protection:
Yes, using TruPrevent Technologies

Brief Description 

    

Mapson.B is a worm that does not have any destructive effects, which spreads via e-mail. After infecting a computer, it sends copies of itself to all the e-mail addresses in the Contact List of the instant messaging program MSN Messenger.

The e-mail message carrying Mapson.B has extremely variable characteristics. However, the subject and message are always in Spanish and the attached file almost always has a PIF extension.

As well as e-mail, Mapson.B also spreads through P2P (peer-to-peer) file sharing programs.

Mapson.B displays messages on screen and creates a large number of copies of itself on the computer.

Visible Symptoms 

    

Mapson.B is easy to recognize, as when it is run this worm displays the following message in Spanish on screen:

  • Error
    Archivo Parcialmente Corrupto remplazelo por uno nuevo

Similarly, in July this worm displays two windows with following characteristics:

  • Title:
    Lorraine Worm [GEDZAC LABS 2003]
    Text:
    Creado por Falckon/GEDZAC
  • Title:
    Lorraine Worm [GEDZAC LABS 2003]
    Text:
    Dedicado a mi G. Lorena R. S.,http://www.vsantivirus.com/renalo.htm

Finally on the fourth of each month, Mapson.B opens the Internet browser and displays a web page containing information about the virus author.