W32.Valcard - ValentineCard.exe

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Valcard

Sender:

Varies.  Usually someone you know.

Subject:

...when sleepers wake and yet still dream...
Be Mine ?!
From Me To You
Happy Valentines
I can express no kinder sign of love, than this kind kiss
Love at first sight
O, beauty, till now I never knew thee!
Poetry is an echo, asking a shadow to dance
Romance from Afar
Romantic gesture
Secret Admirer
Somebody Loves You
Thy eternal summer shall not fade
Yours Always

Message:

...and every breath I ever took,every tear I ever wept,Every star I
wished upon,Seemed nothing until now.(sending computer's registered
owner's name)
Febuary FeelingsIt's that time of year again.But I'm still only
sedning a card to you.(sending computer's registered owner's name)
Good night, sweet prince, and flights of angels sing thee to thy rest
Happy Valentineshope you like the card I've attached,even if you
don't feel the same.(sending computer's registered owner's name)
HiI feel like a child sending you this cardbut I just had to do
it.(sending computer's registered owner's name)
In this life we cannot do great things.We can only do small things
with great love.(sending computer's registered owner's name)

Attachment:

ValentineCard.exe

Comments: A massmailing worm that sends itself to all recipients in the Microsoft Outlook address book.

Symptoms:


 Copies itself to C:WindowsSystemValentineCard.exe. 
 It adds the value 14th       C:WindowsSystemValentineCard.exe to the
registry key
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Run LiveUpdate to make sure that you have the most recent virus definitions.
Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files.
Run a full system scan.
Delete all files that are detected as W32.Valcard.
If they were not deleted by NAV, use Windows Explorer to delete the files C:\Evil.jpg and C:\Windows\System\ValentineCard.exe.