Navidad


Name: Navidad
Aliases: Watchit, W32/Watchit,, W32/Navidad, Feliz Navidad, I-Worm.Navidad, Emanuel, Troj_Emmanuel, Emmanuel, W95/Navidad.16896,
Ports:
Files: Navidad.zip - 11,576 bytes Navidad.zip - 11,790 bytes Emanuel.zip -Navidad.exe - 32,768 bytes WINSVRC.VXD - WINSVRC.EXE - Emmanuel.exe -16,896 bytes Wintask.exe - 16,896 bytes
Created: Nov 2000
Requires:
Actions: Worm / Mail trojan / Destructive trojan
When executed, Navidad displays an Error box with the text
Versions: A, B, E,
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKEY_CLASSES_ROOT\exefile\shell\open\command\ HKEY_USERS\.DEFAULT\Software\HKEY_CURRENT_USER\Software\
Notes: Works on Windows 95, 98, ME, NT and 2000, together with MS Outlook.
Country: written in South America
Program:

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>