My not-so-funny Valentine

By Robert Vamosi
15 February 2001 10:24 AM
Tags: worm, virus, valentine, outlook, email, anti virus, scan
Valentine (Valentine.A) is a new worm that bears some similarity to the KAK worm which infected users throughout 2000.

Valentine will run whenever Windows is started, and spreads by attaching itself to every e-mail sent through Outlook. Valentine is a mass mailing worm that will attempt to send e-mail to every address listed in the Outlook address book. Valentine also changes Internet Explorer's default page to point to a Web site (now shut down) from which the worm can download a potentially destructive payload onto an infected computer. With the downloaded payload in place, Valentine will attempt to delete every file from the C:/ drive and rename every folder by adding the text happysanvalentine (for example, C:\Programs\MyDocuments\Excelhappysanvalentine) on the 8th, 14th, 23rd, or 29th day of any month. Even though the damaging component is no longer available, Valentine could still slow down e-mail servers.

How it spreads
Valentine.A arrives as an e-mail with the following:

Subject: blank
Body: anything
Attachment: none

Valentine spreads by imbedding itself to the HTML-format signature file of every outgoing Outlook e-mail and attempts to send itself to every address listed in the Outlook address book. Microsoft has issued a patch for the vulnerability in ActiveX that allows worms like Valentine to infect. Users should download the scriptlet.typelib/Eyedog patch, if they have not already done so.

Removal
At the moment, only Sophos and McAfee have posted updated signature files. Other anti-virus software vendors are expected to follow shortly.

Advertisement

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal Sick of broken tender sites
    Some of the state governments desperately need to invest in more user-friendly tender sites so that looking for information on government tenders doesn't have to be a game of blind man's bluff.
  • Array Cyberwar: What is it good for?
    In this week's episode, Cyberwar. What is Australia's place in the world of digital warfare? What are the implications for the NBN?
  • Array Is wholesale-only backhaul just a pipedream?
    The potential acquisition of Pipe Networks by SP Telemedia has raised the question about whether vertically integrated backhaul providers will mean higher wholesale prices for ISP customers.
  • More blogs »

Tags

Back to top

Featured