LYCOS RETRIEVER Beta Retriever Home  |  What is Lycos Retriever?   
Navidad
built 654 days ago
S[O]meone else who was there along the Navidad was the Wild Woman. People began seeing her tracks, and missing food and property, around the time the area re-settled after the revolution. Theories on the origin of the mysterious creature ranged from its being a child, lost as settlers fled ahead of Santa Anna during the so-called Runaway Scrape, to a runaway slave.
Description: According to F-Secure, Navidad is a worm that arrives as an email attachment named Navidad.exe. There's a bug in the worm that causes other executables not to run. It copies itself to the Windows\System directory as WINSRVC.VXD. However, it registers itself in the system incorrectly, using the name WINSVRC.EXE After infection, if you attempt to launch an application, you'll get the following error message:
Navidad then begins mailing itself. Using MAPI to spread, it can work with many types of email clients, including Microsoft Outlook. Navidad checks for all messages in the inbox and sends itself as a reply to any message with an attachment. The reply contains the same subject and body, but with NAVIDAD.EXE added as an attachment.
Source:
Navidad uses Microsoft Outlook to reply to messages in the victim's inbox, sending itself as an attachment called NAVIDAD.EXE. The recipient therefore sees a reply to a message they sent, and might therefore be tempted to open it, infecting themselves. Allan Dyer, Chief Consultant of Yui Kee Computing Ltd. commented, "It is not enough to say, 'don't open untrusted attachments' because people do often trust the people they are e-mailing and worms like Navidad exploit this. Users should practice Safe Hex to protect themselves." The Safe Hex guidelines can be found at:
Source:
Born in Santa Monica, Navidad was raised in Sinaloa, Mexico and returned to the United States, where he graduated from Venice High School in 1987. He earned an administration of justice degree at Santa Monica College, police said. “He was going to school to study about the law and he was ... working full time,” said Teresa Webster, a checker at the store where Navidad had worked.
Source:
When Navidad is running, it can actually be closed by clicking on the blue eye in the system tray. When the dialogue box appears with the button that says "Nunca presionar este boton", click on the 'close program' button (X) in the upper right corner of the box. Another message box will appear. Click OK in this box, and the program will close. The eye will no longer be in the system tray.
SEARCH
MORE ABOUT
  Navidad