W32.Mapson.Worm sends itself to all contacts found in the MSN messenger contact list. The Subject line, Message body, and attachment vary. The attachment will have a .com, .exe, or .pif file extension. The email also may have spoofed From field. This worm also attempts to spread itself through KaZaA, KaZaA Lite, eDonkey2000, Gnucleus, Limewire, Morpheus, Grokster file-sharing networks and ICQ.
This threat is written in the Borland Delphi programming language and is compressed with UPX.
Also Known As: W32/Mapson@MM [McAfee]
Infection Length: 180,736 bytes
Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: Macintosh, OS/2, UNIX, Linux