The Christmas season of viruses and worms is upon us. It is time to repeat the procedure for newcomers : 1) DO NOT send virus warnings direct to the list, please send them to the list maintainer who will assess and forward to the list the relevant information. 2) Practice safe e-mailing habits: a) DO NOT open unsolicited attachments b) Invest in a reputable anti-virus program, use it, and most importantly, keep it up to date. *********************************************************** Extract of main features for W32.Navidad: Discovered on: November 3, 2000 W32.Navidad is a mass mailing worm program. The worm replies using MAPI to all Inbox messages that contain a single attachment. This works with Microsoft Outlook. The worm utilizes the existing email subject line and body and attaches itself as NAVIDAD.EXE. Due to the bugs in the code, after being executed, the worm causes your system to be unusable. Category: Worm Covered by Virus definitions file dated on or after : November 6, 2000 Threat assessment: Wild: High - distribution mechanism uses existing subject lines Damage: High - Causes system instability: Improperly changes registry keys Distribution: Medium - As an e-mail attachment Subject of email: Uses existing subject lines Name of attachment: NAVIDAD.EXE Size of attachment: 32,768 bytes Removal: Difficult For full details go to - http://www.symantec.com/avcenter/venc/data/w32.navidad.html or to the site provided by your anti-virus program vendor. *********************************************************** Peter Cook [email protected] List maintainer and Co-host with Barbara < [email protected] > of the ButeshireGenWeb mailing list.