Selected viruses, spyware, and other threats: sorted alphabetically

Win32/Navidad is an internet worm spreading as an attachment of email messages with the name Navidad.exe.  After the file is executed the worm gets installed into the system and ensures its activation. 
Whenever the worm gets executed a dialogue window with heading "Error" and with the text UI appears.  The author of the worm made an error when manipulating the registry – although the worm body is stored in the file winsvrc.vxd the keys in the registery call a file with the filename winsvrc.exe.  Activity of the worm is manifested by presence of a little icon with a blue eye in the system tray; moreover, no program with the extension EXE can be executed.  In the worm body there are texts in Spanish; they are used when the dialogue windows are displayed if a user has clicked on the "blue eye" icon.

Te estamos mirando..
Lo estamos mirando...
buena eleccion...
Lamentablemente cayo en la tentacion y perdio su computadora
Feliz Navidad

© 1992-2004 Eset s.r.o. All rights reserved. No part of this encyclopedia may be reproduced, transmitted or used in any other way in any other form or by any means without prior permission from Eset.