Navidad is a typical worm that arrives through e-mail, as a file called "Navidad.exe". The worm is so buggy that it installs itself in a way that prevents executable files from being launched. When the worm activates , it uses the MAPI interface to send copies of itself to the addresses contained in the unread e-mails stored locally.

To disinfect Navidad :

• Download and apply this registry fix to undo those nasty changes.
• Open the task manager by pressing alt-ctrl-del. Kill all actives navidad and winsvrc tasks.
• Delete navidad.exe and winsvrc.vxd

There is a variant, called either navidad.b or emmanuel

• Download and apply this registry fix to undo its changes.
• Open the task manager by pressing alt-ctrl-del. Kill all actives process called emmanuel and wintask
• Delete emmanuel.exe and wintask.exe